From 5ec270aa98b806f32338fa25357abdf45dd0625b Mon Sep 17 00:00:00 2001
From: Jakob Odersky <jakob@driver.xyz>
Date: Wed, 22 Aug 2018 12:51:36 -0700
Subject: Trait-based initialization and other utilities

Adds the concept of a 'platform', a centralized place in which
environment-specific information will be managed, and provides common
initialization logic for most "standard" apps.

As part of the common initialization, other parts of core have also
been reworked:

- HTTP-related unmarshallers and path matchers have been factored out
  from core.json to a new core.rest.directives package (core.json
  extends those unmarshallers and matchers for backwards
  compatibility)

- CORS handling has also been moved to a dedicated utility trait

- Some custom headers have been moved from raw headers to typed ones
  in core.rest.headers

- The concept of a "reporter" has been introduced. A reporter is a
  context-aware combination of tracing and logging. It is intended to
  issue diagnostic messages that can be traced across service
  boundaries.

Closes #192
Closes #195
---
 .../driver/core/rest/directives/AuthDirectives.scala  | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 src/main/scala/xyz/driver/core/rest/directives/AuthDirectives.scala

(limited to 'src/main/scala/xyz/driver/core/rest/directives/AuthDirectives.scala')

diff --git a/src/main/scala/xyz/driver/core/rest/directives/AuthDirectives.scala b/src/main/scala/xyz/driver/core/rest/directives/AuthDirectives.scala
new file mode 100644
index 0000000..ff3424d
--- /dev/null
+++ b/src/main/scala/xyz/driver/core/rest/directives/AuthDirectives.scala
@@ -0,0 +1,19 @@
+package xyz.driver.core
+package rest
+package directives
+
+import akka.http.scaladsl.server.{Directive1, Directives => AkkaDirectives}
+import xyz.driver.core.auth.{Permission, User}
+import xyz.driver.core.rest.auth.AuthProvider
+
+/** Authentication and authorization directives. */
+trait AuthDirectives extends AkkaDirectives {
+
+  /** Authenticate a user based on service request headers and check if they have all given permissions. */
+  def authenticateAndAuthorize[U <: User](
+      authProvider: AuthProvider[U],
+      permissions: Permission*): Directive1[AuthorizedServiceRequestContext[U]] = {
+    authProvider.authorize(permissions: _*)
+  }
+
+}
-- 
cgit v1.2.3