cable_room 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 020faa2e6a7e8cd1027b4d5c7303d57ef1282ab4f298800df26d6336587082dc
-  data.tar.gz: fae6de782ad1a15d7e065fbef53e71665ebb4606ecd75748fa7e574bd63ae393
+  metadata.gz: 319532a2546c5bbd96b89ca34c9a44ba963a5bc97bc62e5faacf8417cb815783
+  data.tar.gz: 2d1c92b8e36af65a69182537ba25b2ba5652569e21d398f9bccbd91011e6e411
 SHA512:
-  metadata.gz: 24de44e3b78d19d72af29783069bf8ddd6ed87d03bb185c4e2fae9b79e159f6c2da7701f2a575cf54cb2a6baaf0a66ea4e4d65c7e84048694f33c8d6c19e2dd4
-  data.tar.gz: 178caf0566a1420f7cb705d9076ae39a5cd664cd42da23619f9312f1feccc34b8afb55563aeb5acf8af700fe4046b6cad5f901b34c6d9bf2947d8c2f6ff08529
+  metadata.gz: 25afc8414cc55c14d41a72c2d8898c026d442f204744a1a67721e2fd6e6b6b9ea9013bfe727ba98984475c504b00eb95bda324fdf2c60a6e2b9269d5e3fb4e17
+  data.tar.gz: 903fa66437dec42ba12b87c49a0864b561b0b8b2f302de05f80482d8a086a1e7971ba5f03e04146e4905b6854f017c2d311e222393ba977cca9936d5b656f306

data/lib/cable_room/room/port_management.rb

@@ -13,6 +13,22 @@ module CableRoom
           end
         end
 
+        def inbound_tag_policy(**kwargs, &blk)
+          if blk
+            self._port_policy_blocks = [*(_port_policy_blocks || []), {
+              **kwargs,
+              block: blk,
+            }]
+          else
+            @_tag_policy ||= TagPolicy.new().tap do |pol|
+              (_port_policy_blocks || []).each do |p|
+                pol.evaluate(**p.except(:block), &p[:block])
+              end
+            end
+            @_tag_policy
+          end
+        end
+
         def on_port_connected(...)
           set_callback(:port_connected, :before, ...)
         end
@@ -23,6 +39,8 @@ module CableRoom
       end
 
       included do
+        class_attribute :_port_policy_blocks, instance_writer: false, default: {}
+
         periodically :check_port_inactivity, every: PORT_TIMEOUT
 
         define_callbacks :port_connected, :port_disconnected
@@ -37,6 +55,16 @@ module CableRoom
             @current_message_origin = previous_mtok
           end
         end
+
+        authorize_inbound do |message|
+          msg_type = message['type'].to_s.underscore.to_sym
+          next true if %i[port_connected port_disconnected].include?(msg_type)
+          policy_allows?(msg_type)
+        end
+
+        inbound_tag_policy(priority: -10) do
+          allow :*, :connect
+        end
       end
 
       def initialize(...)
@@ -68,6 +96,10 @@ module CableRoom
 
       protected
 
+      def policy_allows?(method)
+        self.class.inbound_tag_policy.pass?(method, origin_tags)
+      end
+
       def on_port_disconnected(); end
 
       def on_port_connected(); end
@@ -93,6 +125,11 @@ module CableRoom
         origin_tags.include?(tag)
       end
 
+      def tag_origin!(*tags)
+        port_data[:tags] ||= Set.new
+        port_data[:tags].merge(tags.flatten.map(&:to_sym))
+      end
+
       def handle_received_message(message)
         case message['type']
         when 'port_connected'
@@ -101,14 +138,20 @@ module CableRoom
           touch_port_activity
 
           mdata.merge! ::ActiveJob::Arguments.deserialize(message['extra'])[0] if message['extra'].present?
-          mdata[:tags] = Array(message['tags']).map(&:to_sym) if message['tags'].present?
+          tag_origin!(message['tags'])
 
-          run_callbacks :port_connected do
-            on_port_connected
+          if self.class.inbound_tag_policy.pass?(message['type'].to_sym, origin_tags)
+            run_callbacks :port_connected do
+              on_port_connected
+            end
+          else
+            @port_data.delete(origin_port)
           end
         when 'port_disconnected'
-          run_callbacks :port_disconnected do
-            on_port_disconnected
+          if self.class.inbound_tag_policy.pass?(message['type'].to_sym, origin_tags)
+            run_callbacks :port_disconnected do
+              on_port_disconnected
+            end
           end
           @port_data.delete(origin_port)
         when 'port_ping'
@@ -131,6 +174,122 @@ module CableRoom
           @port_data.delete(mtok)
         end
       end
+
+      class TagPolicy
+        ALIASES = {}
+
+        def self.define_tag_alias(key, implies)
+          Array(implies).each do |i|
+            ALIASES[i] ||= Set.new
+            ALIASES[i] << key
+          end
+        end
+
+        define_tag_alias :connect, [:port_connected, :port_ping, :port_disconnected]
+
+        def initialize()
+          @policy_rules = []
+          @fallback_rule = { action: :allow, priority: -100, tag: :*, methods: :* }
+          append_rule(@fallback_rule)
+        end
+
+        def pass?(method, user_tags)
+          user_tags = Set.new(Array(user_tags).map(&:to_sym))
+          find_rules_for(method).each do |r|
+            if r[:tag] == :* || user_tags.include?(r[:tag])
+              return r[:action] == :allow
+            end
+          end
+
+          false
+        end
+
+        def evaluate(priority: 10, &blk)
+          @fallback_rule[:action] = :deny if priority > 0
+
+          p = @rule_priority
+          @rule_priority = priority
+          instance_exec(&blk)
+        ensure
+          @rule_priority = p
+        end
+
+        protected
+
+        def allow(tag = :*, methods = :*)
+          append_rule({
+            action: :allow,
+            tag: tag,
+            methods: methods,
+          })
+        end
+
+        def deny(tag = :*, methods = :*)
+          append_rule({
+            action: :deny,
+            tag: tag,
+            methods: methods,
+          })
+        end
+
+        private
+
+        def append_rule(rule)
+          rule[:methods] = Set.new(Array(rule[:methods]).map(&:to_sym))
+          rule[:priority] ||= @rule_priority || 10
+          @policy_rules << rule
+        end
+
+        def find_rules_for(method)
+          rules ||= select_ruleset(@policy_rules, method).presence
+          rules ||= []
+
+          rules.sort_by! { |r| -r[:priority] }
+
+          rules
+        end
+
+        def select_ruleset(set, method)
+          all_aliases = Set.new
+          all_aliases << method
+
+          bfs(method) do |m|
+            all_aliases.merge(ALIASES[m] || [])
+            ALIASES[m]
+          end
+
+          all_aliases << :*
+
+          rules = set.select { |r| (Set.new(r[:methods]) & all_aliases).count > 0 }.sort_by { |r| -r[:priority] }
+
+          rules
+        end
+
+        def bfs(base, children = nil)
+          q = [base]
+          seen = Set.new
+          until q.empty?
+            n = q.shift
+            next if seen.include?(n)
+            seen << n
+
+            catch :end_branch do
+              value = catch :found do
+                result = yield n
+                next_set = children ? children.call(n) : Array(result)
+                (next_set || []).each do |c|
+                  q << c unless seen.include?(c)
+                end
+                throw :end_branch
+              end
+
+              return value || n
+            end
+          end
+
+          nil
+        end
+      end
     end
   end
 end

data/lib/cable_room/room/user_management.rb

@@ -18,10 +18,16 @@ module CableRoom
         set_callback(:port_disconnected, :after, :_handle_user_cleanup_after_disconnection)
 
         define_callbacks :user_joined, :user_left
+
+        inbound_tag_policy(priority: -10) do
+          allow :*, :join
+        end
+
+        PortManagement::TagPolicy.define_tag_alias :join, [:connect, :user_joined, :user_left]
       end
 
       def initialize(...)
-        @_user_state_map = {}c
+        @_user_state_map = {}
         @_user_map_mutex = Monitor.new
         super
       end
@@ -93,6 +99,8 @@ module CableRoom
 
       def _user_state_transaction(user = origin_user)
         return unless user.present?
+        return unless policy_allows?(:join)
+
         @_user_map_mutex.synchronize do
           usm = @_user_state_map[user]
           yield usm, user

data/lib/cable_room/version.rb

@@ -1,3 +1,3 @@
 module CableRoom
-  VERSION = "0.2.0".freeze
+  VERSION = "0.3.0".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cable_room
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Ethan Knapp