oso-cloud 0.3.1 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f782a7cb7f39a37115f0a16e229d69b09f44d91a26228c3673dcd590b2395183
-  data.tar.gz: 3e396a943707635a5ce4659bdb39b283e20cd1f06fb7b2bb7dc008fd2cea01ae
+  metadata.gz: f76c57bb36720bbfbd88a403db0e80304c1d29edd4ee24ffaf4a3e48ff34760f
+  data.tar.gz: bb077dcb1f83e4b376d302ecf91067aa0b06c466e9e6c4a39cfeea0851b553a5
 SHA512:
-  metadata.gz: 8af7ceabb0bb8c434e5dc8dc378d40b3dcb08a6a4f17f464538f21f026349d9dcef3a28f79176dd893543f1be1e6e5560c0892ba8d2b73953b990c0d078a418b
-  data.tar.gz: 2c87cb55cceedfde35f917e78882b02da50dade1bb1565fffa1648eb276754170a6ea79716828e21b6d345ec857f6f89d785df38a7513f8173acd4900a3215aa
+  metadata.gz: b0c91e6514431e826ac0729c15e008c5aed0a85a9eed6d4d60e59fb1b75919eac6a3199e5d30bc2a3e806a291e5c9421010ae6323dc37adfa56bcc0a82a38ab4
+  data.tar.gz: 6130fd8d01cc30f858dd8494d2fe73ff95c451796589728175dd25a29dced4b6f7ef21d889c870a260897c389b2c071dd12511d385c4093c80aaebbbed193e87

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    oso-cloud (0.3.1)
+    oso-cloud (0.6.0)
 
 GEM
   remote: https://rubygems.org/
@@ -18,4 +18,4 @@ DEPENDENCIES
   rake (~> 12.0)
 
 BUNDLED WITH
-   2.1.4
+   2.3.13

data/lib/oso/client.rb

@@ -15,24 +15,73 @@ module Oso
       POST('policy', { src: policy })
     end
 
-    def authorize(actor, action, resource)
+    def authorize(actor, action, resource, context_facts = [])
       actor_typed_id = extract_typed_id actor
       resource_typed_id = extract_typed_id resource
       result = POST('authorize', {
         actor_type: actor_typed_id.type, actor_id: actor_typed_id.id,
         action: action,
-        resource_type: resource_typed_id.type, resource_id: resource_typed_id.id
+        resource_type: resource_typed_id.type, resource_id: resource_typed_id.id,
+        context_facts: facts_to_params(context_facts)
       })
       allowed = result['allowed']
       allowed
     end
 
-    def list(actor, action, resource_type)
+    def authorize_resources(actor, action, resources, context_facts = [])
+      return [] if resources.nil?
+      return [] if resources.empty?
+
+      key = lambda do |type, id|
+        "#{type}:#{id}"
+      end
+
+      resources_extracted = resources.map { |r| extract_typed_id(r) }
+      actor_typed_id = extract_typed_id actor
+      result = POST('authorize_resources', {
+        actor_type: actor_typed_id.type, actor_id: actor_typed_id.id,
+        action: action,
+        resources: resources_extracted,
+        context_facts: facts_to_params(context_facts)
+      })
+
+      return [] if result['results'].empty?
+
+      results_lookup = Hash.new
+      result['results'].each do |r|
+        k = key.call(r['type'], r['id'])
+        if results_lookup[k] == nil
+          results_lookup[k] = true
+        end
+      end
+
+      results = resources.select do |r|
+        e = extract_typed_id(r)
+        exists = results_lookup[key.call(e.type, e.id)]
+        exists
+      end
+      results
+    end
+
+    def list(actor, action, resource_type, context_facts = [])
       actor_typed_id = extract_typed_id actor
       result = POST('list', {
         actor_type: actor_typed_id.type, actor_id: actor_typed_id.id,
         action: action,
         resource_type: resource_type,
+        context_facts: facts_to_params(context_facts)
+      })
+      results = result['results']
+      results
+    end
+
+    def actions(actor, resource, context_facts = [])
+      actor_typed_id = extract_typed_id actor
+      resource_typed_id = extract_typed_id resource
+      result = POST('actions', {
+        actor_type: actor_typed_id.type, actor_id: actor_typed_id.id,
+        resource_type: resource_typed_id.type, resource_id: resource_typed_id.id,
+        context_facts: facts_to_params(context_facts)
       })
       results = result['results']
       results
@@ -44,11 +93,7 @@ module Oso
     end
 
     def bulk_tell(facts)
-      params = facts.map { |predicate, *args|
-        typed_args = args.map { |a| extract_typed_id a}
-        { predicate: predicate, args: typed_args }
-      }
-      POST('bulk_load', params)
+      POST('bulk_load', facts_to_params(facts))
     end
 
     def delete(predicate, *args)
@@ -57,11 +102,7 @@ module Oso
     end
 
     def bulk_delete(facts)
-      params = facts.map { |predicate, *args|
-        typed_args = args.map { |a| extract_typed_id a}
-        { predicate: predicate, args: typed_args }
-      }
-      POST('bulk_delete', params)
+      POST('bulk_delete', facts_to_params(facts))
     end
 
     def get(predicate, *args)
@@ -141,6 +182,13 @@ module Oso
       extract_typed_id(x)
     end
 
+    def facts_to_params(facts)
+      facts.map { |predicate, *args|
+        typed_args = args.map { |a| extract_typed_id a}
+        { predicate: predicate, args: typed_args }
+      }
+    end
+
     TypedId = Struct.new(:type, :id, keyword_init: true) do
       def to_json(*args)
         to_h.to_json(*args)

data/lib/oso/version.rb

@@ -1,3 +1,3 @@
 module Oso
-  VERSION = '0.3.1'.freeze
+  VERSION = '0.6.0'.freeze
 end

data/oso-cloud.gemspec

@@ -8,7 +8,7 @@ Gem::Specification.new do |spec|
   spec.summary       = 'Oso authorization library.'
   spec.homepage      = 'https://www.osohq.com/'
 
-  spec.required_ruby_version = Gem::Requirement.new('>= 2.3.0')
+  spec.required_ruby_version = Gem::Requirement.new('>= 2.7.0')
 
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: oso-cloud
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.6.0
 platform: ruby
 authors:
 - Oso Security, Inc.
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-05-16 00:00:00.000000000 Z
+date: 2022-06-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest
@@ -52,7 +52,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.3.0
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="