tba-concrete-authorization-scope-set-matcher 0.4.0.dev2__tar.gz

tba_concrete_authorization_scope_set_matcher-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,13 @@
+Metadata-Version: 2.4
+Name: tba-concrete-authorization-scope-set-matcher
+Version: 0.4.0.dev2
+Summary: 
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-bases-authorization-policy (==0.4.0.dev2)
+Requires-Dist: tba-contracts-identity (==0.4.0.dev2)

tba_concrete_authorization_scope_set_matcher-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,10 @@
+[project]
+name="tba-concrete-authorization-scope-set-matcher"
+version="0.4.0.dev2"
+requires-python=">=3.10,<3.15"
+dependencies=["tba-contracts-identity==0.4.0.dev2","tba-bases-authorization-policy==0.4.0.dev2"]
+[build-system]
+requires=["poetry-core>=1.0.0"]
+build-backend="poetry.core.masonry.api"
+[tool.poetry]
+packages=[{include="tba_concrete_authorization_scope_set_matcher",from="src"}]

tba_concrete_authorization_scope_set_matcher-0.4.0.dev2/src/tba_concrete_authorization_scope_set_matcher/__init__.py

@@ -0,0 +1,23 @@
+from tba_bases_authorization_policy import ScopeMatcherBase
+from tba_contracts_identity.authorization_scopes import (
+    ScopeMatchRequest,
+    ScopeMatchResult,
+)
+
+
+class ScopeSetMatcher(ScopeMatcherBase):
+    def match(self, request: ScopeMatchRequest, /) -> ScopeMatchResult:
+        granted = set(request.granted)
+        required = set(request.required)
+        if request.mode == "any":
+            allowed = not required or bool(granted & required)
+            missing = () if allowed else tuple(sorted(required))
+        else:
+            missing = tuple(sorted(required - granted))
+            allowed = not missing
+        return ScopeMatchResult(
+            allowed, tuple(sorted(granted)), tuple(sorted(required)), missing
+        )
+
+
+__all__ = ["ScopeSetMatcher"]