tba-concrete-authorization-policy-combiner-default 0.4.0.dev2__tar.gz

tba_concrete_authorization_policy_combiner_default-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,35 @@
+Metadata-Version: 2.4
+Name: tba-concrete-authorization-policy-combiner-default
+Version: 0.4.0.dev2
+Summary: Default concrete authorization policy combiner.
+License-Expression: Apache-2.0
+Keywords: tigrbl,identity,auth,security
+Requires-Python: >=3.10,<3.15
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Typing :: Typed
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Dist: tba-bases-authorization-policy (==0.4.0.dev2)
+Requires-Dist: tba-contracts-identity (==0.4.0.dev2)
+Project-URL: Homepage, https://github.com/tigrbl/tigrbl_auth
+Project-URL: PyPI, https://pypi.org/project/tba-concrete-authorization-policy-combiner-default/
+Project-URL: Repository, https://github.com/tigrbl/tigrbl_auth
+Project-URL: Source, https://github.com/tigrbl/tigrbl_auth/tree/master/pkgs/10-concrete/tba-concrete-authorization-policy-combiner-default
+Project-URL: SSOT, https://github.com/tigrbl/tigrbl_auth/blob/master/.ssot/registry.json
+Description-Content-Type: text/markdown
+
+# tba-concrete-authorization-policy-combiner-default
+
+Default concrete authorization policy combiner.
+
+Import root: `tba_concrete_authorization_policy_combiner_default`.
+

tba_concrete_authorization_policy_combiner_default-0.4.0.dev2/README.md

@@ -0,0 +1,5 @@
+# tba-concrete-authorization-policy-combiner-default
+
+Default concrete authorization policy combiner.
+
+Import root: `tba_concrete_authorization_policy_combiner_default`.

tba_concrete_authorization_policy_combiner_default-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,41 @@
+[project]
+name = "tba-concrete-authorization-policy-combiner-default"
+version = "0.4.0.dev2"
+description = "Default concrete authorization policy combiner."
+readme = "README.md"
+requires-python = ">=3.10,<3.15"
+license = "Apache-2.0"
+keywords = ["tigrbl", "identity", "auth", "security"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: 3 :: Only",
+    "Typing :: Typed",
+    "Topic :: Security",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+]
+dependencies = [
+    "tba-bases-authorization-policy==0.4.0.dev2",
+    "tba-contracts-identity==0.4.0.dev2",
+]
+
+[project.urls]
+Homepage = "https://github.com/tigrbl/tigrbl_auth"
+Repository = "https://github.com/tigrbl/tigrbl_auth"
+Source = "https://github.com/tigrbl/tigrbl_auth/tree/master/pkgs/10-concrete/tba-concrete-authorization-policy-combiner-default"
+SSOT = "https://github.com/tigrbl/tigrbl_auth/blob/master/.ssot/registry.json"
+PyPI = "https://pypi.org/project/tba-concrete-authorization-policy-combiner-default/"
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+packages = [{ include = "tba_concrete_authorization_policy_combiner_default", from = "src" }]

tba_concrete_authorization_policy_combiner_default-0.4.0.dev2/src/tba_concrete_authorization_policy_combiner_default/__init__.py

@@ -0,0 +1,31 @@
+"""Concrete policy combining algorithms."""
+
+from __future__ import annotations
+
+from tba_bases_authorization_policy import PolicyCombinerBase
+from tba_contracts_identity.policy import CombiningAlgorithmKind, PolicyCombineRequest, PolicyDecision
+
+
+class DefaultPolicyCombiner(PolicyCombinerBase):
+    def combine(self, request: PolicyCombineRequest, /) -> PolicyDecision:
+        if not request.decisions:
+            return PolicyDecision(False, "no policy decision", ())
+        if request.algorithm is CombiningAlgorithmKind.FIRST_APPLICABLE:
+            return request.decisions[0]
+        if request.algorithm is CombiningAlgorithmKind.PERMIT_OVERRIDES:
+            for decision in request.decisions:
+                if decision.allowed:
+                    return decision
+            return request.decisions[0]
+        if request.algorithm is CombiningAlgorithmKind.ONLY_ONE_APPLICABLE:
+            applicable = [decision for decision in request.decisions if decision.matched]
+            if len(applicable) == 1:
+                return applicable[0]
+            return PolicyDecision(False, "only-one-applicable policy count mismatch", ())
+        for decision in request.decisions:
+            if not decision.allowed:
+                return decision
+        return request.decisions[0]
+
+
+__all__ = ["DefaultPolicyCombiner"]