oso-cloud 1.5.0.pre → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 310422514ccb68c2540ae5a2ce16873be40e8d59a7c57861552d4589eb95ebb5
-  data.tar.gz: 0f75e291effa87ff7b6887c00202fa56938822f837dcd1feeaa257d9a6c931a4
+  metadata.gz: 8caffaaf6fc5b7f40897324bf031d6151d1a89f325c0a923faf90a83b69450db
+  data.tar.gz: 6bac277adc4fb5f09613b45bd4dfe234c20650b8109111315f7b34d5c1fa8889
 SHA512:
-  metadata.gz: 766038bec33959a1b400e2a63a3b5de71acfa3b55a6d24d88ebcf20dcf73f94251f05a3279120a8506901f8234191159355696442c43052860cd0a49eafcf5c2
-  data.tar.gz: 8932d721294ba88b589a64b75236af34ed7386bd7f5e18416f85a66358a3a84c737ed359e8a68d93c7d8491784b710d54ec5f4508dd67b8ee37ec30ab39568af
+  metadata.gz: 9ec6d213cd63d70183c7364607377dc65ad4d814c7274421d5420e27a2105b7dfa8ad5efcf3f11e0678acd7f2d182c6695126cc3202aba5b16560da2e88902b2
+  data.tar.gz: 3edaab02b6ac4614efd53e4674827ccd92a5680ad063b380cebc9373e4a195cee243cae0da100f51129d9a34913d3e8dd8e5aac3e8ef8c4fc91648602bdd2b00

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    oso-cloud (1.5.0.pre)
+    oso-cloud (1.5.0)
       faraday (~> 2.5.2)
       faraday-net_http_persistent (~> 2.0)
       faraday-retry (~> 2.0.0)
@@ -9,28 +9,7 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    activemodel (7.1.3)
-      activesupport (= 7.1.3)
-    activerecord (7.1.3)
-      activemodel (= 7.1.3)
-      activesupport (= 7.1.3)
-      timeout (>= 0.4.0)
-    activesupport (7.1.3)
-      base64
-      bigdecimal
-      concurrent-ruby (~> 1.0, >= 1.0.2)
-      connection_pool (>= 2.2.5)
-      drb
-      i18n (>= 1.6, < 2)
-      minitest (>= 5.1)
-      mutex_m
-      tzinfo (~> 2.0)
-    base64 (0.2.0)
-    bigdecimal (3.1.6)
-    concurrent-ruby (1.2.3)
     connection_pool (2.4.1)
-    drb (2.2.0)
-      ruby2_keywords
     faraday (2.5.2)
       faraday-net_http (>= 2.0, < 3.1)
       ruby2_keywords (>= 0.0.4)
@@ -40,28 +19,19 @@ GEM
       net-http-persistent (~> 4.0)
     faraday-retry (2.0.0)
       faraday (~> 2.0)
-    i18n (1.14.1)
-      concurrent-ruby (~> 1.0)
     minitest (5.18.0)
-    mutex_m (0.2.0)
     net-http-persistent (4.0.2)
       connection_pool (~> 2.2)
-    pg (1.5.4)
     rake (12.3.3)
     ruby2_keywords (0.0.5)
-    timeout (0.4.1)
-    tzinfo (2.0.6)
-      concurrent-ruby (~> 1.0)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  activerecord (~> 7.0)
   minitest (~> 5.15)
   oso-cloud!
-  pg (~> 1.0)
   rake (~> 12.0)
 
 BUNDLED WITH
-   2.5.6
+   2.3.13

data/lib/oso/api.rb

@@ -49,6 +49,43 @@ module OsoCloud
       end
     end
 
+    class PolicyMetadata
+      attr_reader :resources
+
+      def initialize(resources:)
+        @resources = resources.map do |k, v|
+          if v.is_a? ResourceMetadata
+            [k, v]
+          else
+            [k, ResourceMetadata.new(**v)]
+          end
+        end.to_h
+      end
+    end
+
+    class ResourceMetadata
+      attr_reader :roles, :permissions, :relations
+
+      def initialize(roles:, permissions:, relations:)
+        @roles = roles
+        @permissions = permissions
+        @relations = relations
+      end
+    end
+
+    # @!visibility private
+    class GetPolicyMetadataResult
+      attr_reader :metadata
+
+      def initialize(metadata:)
+        @metadata = if metadata.is_a? PolicyMetadata
+          metadata
+        else
+          PolicyMetadata.new(**metadata)
+        end
+      end
+    end
+
     # @!visibility private
     class Fact
       attr_reader :predicate, :args
@@ -202,38 +239,9 @@ module OsoCloud
       end
     end
 
-    # @!visibility private
-    class LocalAuthQuery
-      attr_reader :query, :data_bindings
-
-      def initialize(query:, data_bindings:)
-        @query = query
-        @data_bindings = data_bindings
-      end
-    end
-
-    # @!visibility private
-    class LocalListQuery
-      attr_reader :query, :data_bindings
-
-      def initialize(query:, data_bindings:)
-        @query = query
-        @data_bindings = data_bindings
-      end
-    end
-
-    # @!visibility private
-    class LocalQueryResult
-      attr_reader :sql
-
-      def initialize(sql:)
-        @sql = sql
-      end
-    end
-
     # @!visibility private
     class Api
-      def initialize(url: 'https://api.osohq.com', api_key: nil, data_bindings: nil, options: nil)
+      def initialize(url: 'https://api.osohq.com', api_key: nil, options: nil)
         @url = url
         @connection = Faraday.new(url: url) do |faraday|
           faraday.request :json
@@ -291,7 +299,6 @@ module OsoCloud
         @api_key = api_key
         @user_agent = "Oso Cloud (ruby #{RUBY_VERSION}p#{RUBY_PATCHLEVEL}; rv:#{VERSION})"
         @last_offset = nil
-        @data_bindings = IO.read(data_bindings) unless data_bindings.nil?
       end
 
       def fallback_eligible(path)
@@ -308,6 +315,12 @@ module OsoCloud
         GetPolicyResult.new(**result)
       end
 
+      def get_policy_metadata
+        url = '/policy_metadata'
+        result = GET(url, nil)
+        GetPolicyMetadataResult.new(**result)
+      end
+
       def post_policy(data)
         url = '/policy'
         result = POST(url, nil, data, true)
@@ -386,20 +399,6 @@ module OsoCloud
         StatsResult.new(**result)
       end
 
-      def post_authorize_query(query)
-        url = '/authorize_query'
-        data = LocalAuthQuery.new(query: query, data_bindings: @data_bindings)
-        result = POST(url, nil, data, false)
-        LocalQueryResult.new(**result)
-      end
-
-      def post_list_query(query)
-        url = '/list_query'
-        data = LocalListQuery.new(query: query, data_bindings: @data_bindings)
-        result = POST(url, nil, data, false)
-        LocalQueryResult.new(**result)
-      end
-
       def clear_data
         url = '/clear_data'
         result = POST(url, nil, nil, true)

data/lib/oso/oso.rb

@@ -28,8 +28,8 @@ module OsoCloud
   # Any other elements in the array, which together represent the fact's arguments,
   # can be "OsoCloud::Value" objects or strings.
   class Oso
-    def initialize(url: 'https://cloud.osohq.com', api_key: nil, fallback_url: nil, data_bindings: nil)
-      @api = OsoCloud::Core::Api.new(url: url, api_key: api_key, data_bindings: data_bindings, options: { :fallback_url => fallback_url })
+    def initialize(url: 'https://cloud.osohq.com', api_key: nil, fallback_url: nil)
+      @api = OsoCloud::Core::Api.new(url: url, api_key: api_key, options: { :fallback_url => fallback_url })
     end
 
     ##
@@ -45,6 +45,12 @@ module OsoCloud
       nil
     end
 
+    ##
+    #  Returns metadata about the currently active policy
+    def get_policy_metadata
+      @api.get_policy_metadata.metadata
+    end
+
     ##
     # Check a permission
     #
@@ -71,50 +77,6 @@ module OsoCloud
       result.allowed
     end
 
-    ##
-    # Check a permission depending on data both in Oso Cloud and stored in a local database
-    #
-    # Returns a SQL query to run against the local database
-    #
-    # @param actor [OsoCloud::Value]
-    # @param action [String]
-    # @param resource [OsoCloud::Value]
-    # @return [Array<String>]
-    def authorize_local(actor, action, resource)
-      actor_typed_id = actor.to_api_value
-      resource_typed_id = resource.to_api_value
-      result = @api.post_authorize_query(OsoCloud::Core::AuthorizeQuery.new(
-                                  actor_type: actor_typed_id.type,
-                                  actor_id: actor_typed_id.id,
-                                  action: action,
-                                  resource_type: resource_typed_id.type,
-                                  resource_id: resource_typed_id.id,
-                                  context_facts: []
-                                ))
-      result.sql
-    end
-
-    ##
-    # List authorized resources depending on data both in Oso Cloud and stored in a local database
-    #
-    # Returns a SQL query to run against the local database
-    #
-    # @param actor [OsoCloud::Value]
-    # @param action [String]
-    # @param resource_type [String]
-    # @return [Array<String>]
-    def list_local(actor, action, resource_type)
-      actor_typed_id = actor.to_api_value
-      result = @api.post_list_query(OsoCloud::Core::ListQuery.new(
-                      actor_type: actor_typed_id.type,
-                      actor_id: actor_typed_id.id,
-                      action: action,
-                      resource_type: resource_type,
-                      context_facts: []
-                    ))
-      result.sql
-    end
-
     ##
     # Check authorized resources
     #

data/lib/oso/version.rb

@@ -1,3 +1,3 @@
 module OsoCloud
-  VERSION = '1.5.0.pre'.freeze
+  VERSION = '1.5.0'.freeze
 end

data/oso-cloud.gemspec

@@ -24,6 +24,4 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'faraday-retry', '~> 2.0.0'
   spec.add_dependency 'faraday-net_http_persistent', '~> 2.0'
   spec.add_development_dependency 'minitest', '~> 5.15'
-  spec.add_development_dependency 'pg', '~> 1.0'
-  spec.add_development_dependency 'activerecord', '~> 7.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: oso-cloud
 version: !ruby/object:Gem::Version
-  version: 1.5.0.pre
+  version: 1.5.0
 platform: ruby
 authors:
 - Oso Security, Inc.
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-02-14 00:00:00.000000000 Z
+date: 2024-02-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -66,34 +66,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5.15'
-- !ruby/object:Gem::Dependency
-  name: pg
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.0'
-- !ruby/object:Gem::Dependency
-  name: activerecord
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '7.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '7.0'
 description: 
 email:
 - support@osohq.com
@@ -130,9 +102,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 3.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubygems_version: 3.2.33
 signing_key: