diff options
author | zachdriver <zach@driver.xyz> | 2017-10-17 14:51:21 -0700 |
---|---|---|
committer | GitHub <noreply@github.com> | 2017-10-17 14:51:21 -0700 |
commit | 2af63e7fb8b15568adaf2d9f0a6b395d6719fd71 (patch) | |
tree | bb66e54c3f7ff26af279df255452566df057223b /src/main/scala/xyz/driver/core/rest/auth/ChainedAuthorization.scala | |
parent | b00892d723f6dedf50dc1c1fde7d443e9c3f9497 (diff) | |
parent | 1aaaf7a5ecf2cd28350fff872e334f9f6186966a (diff) | |
download | driver-core-2af63e7fb8b15568adaf2d9f0a6b395d6719fd71.tar.gz driver-core-2af63e7fb8b15568adaf2d9f0a6b395d6719fd71.tar.bz2 driver-core-2af63e7fb8b15568adaf2d9f0a6b395d6719fd71.zip |
Merge pull request #74 from drivergroup/zsmith/rest-app-packages
Split app and rest packages into separate files
Diffstat (limited to 'src/main/scala/xyz/driver/core/rest/auth/ChainedAuthorization.scala')
-rw-r--r-- | src/main/scala/xyz/driver/core/rest/auth/ChainedAuthorization.scala | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/src/main/scala/xyz/driver/core/rest/auth/ChainedAuthorization.scala b/src/main/scala/xyz/driver/core/rest/auth/ChainedAuthorization.scala new file mode 100644 index 0000000..f5eb402 --- /dev/null +++ b/src/main/scala/xyz/driver/core/rest/auth/ChainedAuthorization.scala @@ -0,0 +1,27 @@ +package xyz.driver.core.rest.auth + +import xyz.driver.core.auth.{Permission, User} +import xyz.driver.core.rest.ServiceRequestContext + +import scala.concurrent.{ExecutionContext, Future} +import scalaz.Scalaz.{futureInstance, listInstance} +import scalaz.syntax.semigroup._ +import scalaz.syntax.traverse._ + +class ChainedAuthorization[U <: User](authorizations: Authorization[U]*)(implicit execution: ExecutionContext) + extends Authorization[U] { + + override def userHasPermissions(user: U, permissions: Seq[Permission])( + implicit ctx: ServiceRequestContext): Future[AuthorizationResult] = { + def allAuthorized(permissionsMap: Map[Permission, Boolean]): Boolean = + permissions.forall(permissionsMap.getOrElse(_, false)) + + authorizations.toList.foldLeftM[Future, AuthorizationResult](AuthorizationResult.unauthorized) { + (authResult, authorization) => + if (allAuthorized(authResult.authorized)) Future.successful(authResult) + else { + authorization.userHasPermissions(user, permissions).map(authResult |+| _) + } + } + } +} |