permit-sdk 0.0.1

data/lib/openapi_client/models/webhook_update.rb

@@ -0,0 +1,230 @@
+=begin
+#Permit.io API
+
+# Authorization as a service 
+
+The version of the OpenAPI document: 2.0.0
+
+Generated by: https://openapi-generator.tech
+OpenAPI Generator version: 6.2.1
+
+=end
+
+require 'date'
+require 'time'
+
+module OpenapiClient
+  class WebhookUpdate
+    # The url to POST the webhook to
+    attr_accessor :url
+
+    # An optional bearer token to use to authenticate the request
+    attr_accessor :bearer_token
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'url' => :'url',
+        :'bearer_token' => :'bearer_token'
+      }
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'url' => :'String',
+        :'bearer_token' => :'String'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `OpenapiClient::WebhookUpdate` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `OpenapiClient::WebhookUpdate`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'url')
+        self.url = attributes[:'url']
+      end
+
+      if attributes.key?(:'bearer_token')
+        self.bearer_token = attributes[:'bearer_token']
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      invalid_properties = Array.new
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      true
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          url == o.url &&
+          bearer_token == o.bearer_token
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [url, bearer_token].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      new.build_from_hash(attributes)
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      self.class.openapi_types.each_pair do |key, type|
+        if attributes[self.class.attribute_map[key]].nil? && self.class.openapi_nullable.include?(key)
+          self.send("#{key}=", nil)
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[self.class.attribute_map[key]].is_a?(Array)
+            self.send("#{key}=", attributes[self.class.attribute_map[key]].map { |v| _deserialize($1, v) })
+          end
+        elsif !attributes[self.class.attribute_map[key]].nil?
+          self.send("#{key}=", _deserialize(type, attributes[self.class.attribute_map[key]]))
+        end
+      end
+
+      self
+    end
+
+    # Deserializes the data based on type
+    # @param string type Data type
+    # @param string value Value to be deserialized
+    # @return [Object] Deserialized data
+    def _deserialize(type, value)
+      case type.to_sym
+      when :Time
+        Time.parse(value)
+      when :Date
+        Date.parse(value)
+      when :String
+        value.to_s
+      when :Integer
+        value.to_i
+      when :Float
+        value.to_f
+      when :Boolean
+        if value.to_s =~ /\A(true|t|yes|y|1)\z/i
+          true
+        else
+          false
+        end
+      when :Object
+        # generic object (usually a Hash), return directly
+        value
+      when /\AArray<(?<inner_type>.+)>\z/
+        inner_type = Regexp.last_match[:inner_type]
+        value.map { |v| _deserialize(inner_type, v) }
+      when /\AHash<(?<k_type>.+?), (?<v_type>.+)>\z/
+        k_type = Regexp.last_match[:k_type]
+        v_type = Regexp.last_match[:v_type]
+        {}.tap do |hash|
+          value.each do |k, v|
+            hash[_deserialize(k_type, k)] = _deserialize(v_type, v)
+          end
+        end
+      else # model
+        # models (e.g. Pet) or oneOf
+        klass = OpenapiClient.const_get(type)
+        klass.respond_to?(:openapi_one_of) ? klass.build(value) : klass.build_from_hash(value)
+      end
+    end
+
+    # Returns the string representation of the object
+    # @return [String] String presentation of the object
+    def to_s
+      to_hash.to_s
+    end
+
+    # to_body is an alias to to_hash (backward compatibility)
+    # @return [Hash] Returns the object in the form of hash
+    def to_body
+      to_hash
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+    # Outputs non-array value in the form of hash
+    # For object, use to_hash. Otherwise, just return the value
+    # @param [Object] value Any valid value
+    # @return [Hash] Returns the value in the form of hash
+    def _to_hash(value)
+      if value.is_a?(Array)
+        value.compact.map { |v| _to_hash(v) }
+      elsif value.is_a?(Hash)
+        {}.tap do |hash|
+          value.each { |k, v| hash[k] = _to_hash(v) }
+        end
+      elsif value.respond_to? :to_hash
+        value.to_hash
+      else
+        value
+      end
+    end
+
+  end
+
+end

data/lib/openapi_client/version.rb

@@ -0,0 +1,15 @@
+=begin
+#Permit.io API
+
+# Authorization as a service 
+
+The version of the OpenAPI document: 2.0.0
+
+Generated by: https://openapi-generator.tech
+OpenAPI Generator version: 6.2.1
+
+=end
+
+module OpenapiClient
+  VERSION = '1.0.0'
+end

data/lib/openapi_client.rb

@@ -0,0 +1,220 @@
+=begin
+#Permit.io API
+
+# Authorization as a service 
+
+The version of the OpenAPI document: 2.0.0
+
+Generated by: https://openapi-generator.tech
+OpenAPI Generator version: 6.2.1
+
+=end
+
+# Common files
+require 'openapi_client/api_client'
+require 'openapi_client/api_error'
+require 'openapi_client/version'
+require 'openapi_client/configuration'
+
+# Models
+require 'openapi_client/models/api_key_create'
+require 'openapi_client/models/api_key_owner_type'
+require 'openapi_client/models/api_key_read'
+require 'openapi_client/models/api_key_scope_read'
+require 'openapi_client/models/action_block_editable'
+require 'openapi_client/models/action_block_read'
+require 'openapi_client/models/action_object'
+require 'openapi_client/models/actor'
+require 'openapi_client/models/add_role_permissions'
+require 'openapi_client/models/attribute_block_editable'
+require 'openapi_client/models/attribute_block_read'
+require 'openapi_client/models/attribute_type'
+require 'openapi_client/models/attributes'
+require 'openapi_client/models/audit_log'
+require 'openapi_client/models/audit_log_objects'
+require 'openapi_client/models/authn_me_api_key_read'
+require 'openapi_client/models/authn_me_member_read'
+require 'openapi_client/models/authn_me_read'
+require 'openapi_client/models/authn_me_user_read'
+require 'openapi_client/models/condition_set_create'
+require 'openapi_client/models/condition_set_read'
+require 'openapi_client/models/condition_set_rule_create'
+require 'openapi_client/models/condition_set_rule_read'
+require 'openapi_client/models/condition_set_rule_remove'
+require 'openapi_client/models/condition_set_type'
+require 'openapi_client/models/condition_set_update'
+require 'openapi_client/models/data_source_config'
+require 'openapi_client/models/data_source_entry'
+require 'openapi_client/models/detailed_audit_log'
+require 'openapi_client/models/dev_login'
+require 'openapi_client/models/dummy_engine_model'
+require 'openapi_client/models/elements_config_create'
+require 'openapi_client/models/elements_config_read'
+require 'openapi_client/models/elements_config_runtime_read'
+require 'openapi_client/models/elements_config_update'
+require 'openapi_client/models/elements_env_type_read'
+require 'openapi_client/models/elements_env_type_update'
+require 'openapi_client/models/elements_permission_level'
+require 'openapi_client/models/elements_role_read'
+require 'openapi_client/models/elements_type'
+require 'openapi_client/models/elements_user_create'
+require 'openapi_client/models/elements_user_role_create'
+require 'openapi_client/models/elements_user_role_remove'
+require 'openapi_client/models/embedded_login_request_output'
+require 'openapi_client/models/engine'
+require 'openapi_client/models/environment_create'
+require 'openapi_client/models/environment_object'
+require 'openapi_client/models/environment_read'
+require 'openapi_client/models/environment_stats'
+require 'openapi_client/models/environment_update'
+require 'openapi_client/models/failed_invite'
+require 'openapi_client/models/full_data'
+require 'openapi_client/models/http_validation_error'
+require 'openapi_client/models/identity_read'
+require 'openapi_client/models/invite_attempt_result'
+require 'openapi_client/models/invite_create'
+require 'openapi_client/models/invite_read'
+require 'openapi_client/models/invite_status'
+require 'openapi_client/models/labels'
+require 'openapi_client/models/language_instructions'
+require 'openapi_client/models/location_inner'
+require 'openapi_client/models/login_result'
+require 'openapi_client/models/member_access_level'
+require 'openapi_client/models/member_access_obj'
+require 'openapi_client/models/multi_invite_result'
+require 'openapi_client/models/opa_decision_log'
+require 'openapi_client/models/opa_engine_decision_log'
+require 'openapi_client/models/opal_client'
+require 'openapi_client/models/opa_labels'
+require 'openapi_client/models/opa_metrics'
+require 'openapi_client/models/onboarding_step'
+require 'openapi_client/models/org_member_read'
+require 'openapi_client/models/org_member_update'
+require 'openapi_client/models/organization_create'
+require 'openapi_client/models/organization_object'
+require 'openapi_client/models/organization_read'
+require 'openapi_client/models/organization_read_with_api_key'
+require 'openapi_client/models/organization_update'
+require 'openapi_client/models/pdp_config_object'
+require 'openapi_client/models/pdp_config_read'
+require 'openapi_client/models/pdp_context'
+require 'openapi_client/models/pdp_state'
+require 'openapi_client/models/pdp_state_update'
+require 'openapi_client/models/paginated_result_api_key_read'
+require 'openapi_client/models/paginated_result_audit_log'
+require 'openapi_client/models/paginated_result_elements_config_read'
+require 'openapi_client/models/paginated_result_opa_decision_log'
+require 'openapi_client/models/paginated_result_user_read'
+require 'openapi_client/models/pdp'
+require 'openapi_client/models/pdp_config_object'
+require 'openapi_client/models/pdp_values'
+require 'openapi_client/models/permission_level_role_read'
+require 'openapi_client/models/policy_repo_create'
+require 'openapi_client/models/policy_repo_read'
+require 'openapi_client/models/policy_repo_status'
+require 'openapi_client/models/programming_language'
+require 'openapi_client/models/project_create'
+require 'openapi_client/models/project_object'
+require 'openapi_client/models/project_read'
+require 'openapi_client/models/project_update'
+require 'openapi_client/models/raw_data'
+require 'openapi_client/models/relationship_tuple_object'
+require 'openapi_client/models/remote_config'
+require 'openapi_client/models/remove_role_permissions'
+require 'openapi_client/models/resource_action_create'
+require 'openapi_client/models/resource_action_read'
+require 'openapi_client/models/resource_action_update'
+require 'openapi_client/models/resource_attribute_create'
+require 'openapi_client/models/resource_attribute_read'
+require 'openapi_client/models/resource_attribute_update'
+require 'openapi_client/models/resource_attributes'
+require 'openapi_client/models/resource_create'
+require 'openapi_client/models/resource_id'
+require 'openapi_client/models/resource_instance_create'
+require 'openapi_client/models/resource_instance_read'
+require 'openapi_client/models/resource_instance_update'
+require 'openapi_client/models/resource_read'
+require 'openapi_client/models/resource_replace'
+require 'openapi_client/models/resource_role_create'
+require 'openapi_client/models/resource_role_read'
+require 'openapi_client/models/resource_role_update'
+require 'openapi_client/models/resource_type_object'
+require 'openapi_client/models/resource_update'
+require 'openapi_client/models/role_assignment_create'
+require 'openapi_client/models/role_assignment_read'
+require 'openapi_client/models/role_assignment_remove'
+require 'openapi_client/models/role_block'
+require 'openapi_client/models/role_create'
+require 'openapi_client/models/role_data'
+require 'openapi_client/models/role_read'
+require 'openapi_client/models/role_update'
+require 'openapi_client/models/ssh_auth_data'
+require 'openapi_client/models/settings'
+require 'openapi_client/models/statistics'
+require 'openapi_client/models/tenant_create'
+require 'openapi_client/models/tenant_object'
+require 'openapi_client/models/tenant_read'
+require 'openapi_client/models/tenant_update'
+require 'openapi_client/models/user_create'
+require 'openapi_client/models/user_data'
+require 'openapi_client/models/user_login_request_input'
+require 'openapi_client/models/user_object'
+require 'openapi_client/models/user_read'
+require 'openapi_client/models/user_role'
+require 'openapi_client/models/user_role_create'
+require 'openapi_client/models/user_role_remove'
+require 'openapi_client/models/user_update'
+require 'openapi_client/models/validation_error'
+require 'openapi_client/models/webhook_create'
+require 'openapi_client/models/webhook_read'
+require 'openapi_client/models/webhook_update'
+
+# APIs
+require 'openapi_client/api/api_keys_api'
+require 'openapi_client/api/audit_elements_data_api'
+require 'openapi_client/api/audit_logs_api'
+require 'openapi_client/api/authentication_api'
+require 'openapi_client/api/condition_set_rules_api'
+require 'openapi_client/api/condition_sets_api'
+require 'openapi_client/api/decision_logs_api'
+require 'openapi_client/api/decision_logs_ingress_api'
+require 'openapi_client/api/default_api'
+require 'openapi_client/api/elements_configs_api'
+require 'openapi_client/api/environments_api'
+require 'openapi_client/api/instructions_api'
+require 'openapi_client/api/members_api'
+require 'openapi_client/api/opal_data_api'
+require 'openapi_client/api/organizations_api'
+require 'openapi_client/api/policy_api'
+require 'openapi_client/api/policy_decision_points_api'
+require 'openapi_client/api/policy_git_repositories_api'
+require 'openapi_client/api/projects_api'
+require 'openapi_client/api/resource_actions_api'
+require 'openapi_client/api/resource_attributes_api'
+require 'openapi_client/api/resource_instances_api'
+require 'openapi_client/api/resource_roles_api'
+require 'openapi_client/api/resources_api'
+require 'openapi_client/api/role_assignments_api'
+require 'openapi_client/api/roles_api'
+require 'openapi_client/api/tenants_api'
+require 'openapi_client/api/user_attributes_api'
+require 'openapi_client/api/users_api'
+require 'openapi_client/api/users_elements_data_api'
+
+module OpenapiClient
+  class << self
+    # Customize default settings for the SDK using block.
+    #   OpenapiClient.configure do |config|
+    #     config.username = "xxx"
+    #     config.password = "xxx"
+    #   end
+    # If no block given, return the default Configuration object.
+    def configure
+      if block_given?
+        yield(Configuration.default)
+      else
+        Configuration.default
+      end
+    end
+  end
+end

data/lib/permit.rb

@@ -0,0 +1,58 @@
+require 'Logger'
+require 'net/http'
+require_relative 'config'
+require_relative 'api/api'
+
+class Permit
+  attr_accessor :config, :logger, :api, :elements, :enforcement
+  DEFAULT_API_URL = 'https://api.permit.io'.freeze
+  DEFAULT_PDP_URL = 'http://localhost:7766'.freeze
+  DEFAULT_TENANT = "default"
+
+  def initialize(token, api_url = DEFAULT_API_URL, pdp_url = DEFAULT_PDP_URL, debug = false, logger = Logger.new(STDOUT))
+    @config = PermitConfig.new(token, api_url, pdp_url, nil, debug, logger)
+    @api = PermitApiClient.new(@config, logger)
+    # @elements = PermitElements.new
+    # @enforcement = PermitEnforcer.new
+  end
+
+  def check(user, action, resource, context = {})
+    normalized_user = if user.is_a?(String)
+                        { key: user }
+                      else
+                        user
+                      end
+    normalized_resource = if resource.is_a?(String)
+                            { type: resource.split(":").first, key: resource.split(":").last, tenant: DEFAULT_TENANT }
+                          else
+                            resource
+                          end
+
+    input = {
+      user: normalized_user,
+      action: action,
+      resource: normalized_resource,
+      context: context
+    }
+    uri = URI("#{self.config.pdp_url}/allowed")
+    req = Net::HTTP::Post.new(uri, 'Content-Type' => 'application/json')
+    req['Authorization'] = "Bearer #{config.token}"
+    req.body = input.to_json
+
+    res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
+      http.request(req)
+    end
+
+    if res.code != '200'
+      raise "Permit SDK got unexpected status code: #{res.code}, please check your Permit SDK class init and PDP container are configured correctly. \nRead more about setting up the PDP at https://docs.permit.io/reference/SDKs/Ruby/quickstart_ruby"
+    end
+
+    content = JSON.parse(res.body)
+    content["allow"]
+
+  end
+
+  def sync_user(user)
+    self.api.users.sync_user(user)
+  end
+end