mirror of
https://github.com/CommunitySolidServer/CommunitySolidServer.git
synced 2024-10-03 14:55:10 +00:00
feat: Use PermissionReaders to determine available permissions
These readers will determine which permissions are available for the incoming credentials. Their results then get combined in a UnionReader and authorized in a PermissionBasedAuthorizer
This commit is contained in:
@@ -5,7 +5,7 @@ import { AuthenticatedLdpHandler } from '../../../src/ldp/AuthenticatedLdpHandle
|
||||
import { ResetResponseDescription } from '../../../src/ldp/http/response/ResetResponseDescription';
|
||||
import type { ResponseDescription } from '../../../src/ldp/http/response/ResponseDescription';
|
||||
import type { Operation } from '../../../src/ldp/operations/Operation';
|
||||
import { AccessMode } from '../../../src/ldp/permissions/PermissionSet';
|
||||
import { AccessMode } from '../../../src/ldp/permissions/Permissions';
|
||||
import type { RepresentationPreferences } from '../../../src/ldp/representation/RepresentationPreferences';
|
||||
import * as LogUtil from '../../../src/logging/LogUtil';
|
||||
import type { HttpRequest } from '../../../src/server/HttpRequest';
|
||||
|
||||
@@ -40,4 +40,15 @@ describe('A WacAllowMetadataWriter', (): void => {
|
||||
'wac-allow': 'user="read write"',
|
||||
});
|
||||
});
|
||||
|
||||
it('applies public modes to user modes.', async(): Promise<void> => {
|
||||
const metadata = new RepresentationMetadata({
|
||||
[AUTH.publicMode]: [ ACL.terms.Read, ACL.terms.Write ],
|
||||
});
|
||||
await expect(writer.handle({ response, metadata })).resolves.toBeUndefined();
|
||||
|
||||
expect(response.getHeaders()).toEqual({
|
||||
'wac-allow': 'user="read write",public="read write"',
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
import type { AuxiliaryIdentifierStrategy } from '../../../../src/ldp/auxiliary/AuxiliaryIdentifierStrategy';
|
||||
import { AclModesExtractor } from '../../../../src/ldp/permissions/AclModesExtractor';
|
||||
import { AccessMode } from '../../../../src/ldp/permissions/PermissionSet';
|
||||
import { AccessMode } from '../../../../src/ldp/permissions/Permissions';
|
||||
import { NotImplementedHttpError } from '../../../../src/util/errors/NotImplementedHttpError';
|
||||
|
||||
describe('An AclModesExtractor', (): void => {
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
import type { Operation } from '../../../../src/ldp/operations/Operation';
|
||||
import { MethodModesExtractor } from '../../../../src/ldp/permissions/MethodModesExtractor';
|
||||
import { AccessMode } from '../../../../src/ldp/permissions/PermissionSet';
|
||||
import { AccessMode } from '../../../../src/ldp/permissions/Permissions';
|
||||
import { NotImplementedHttpError } from '../../../../src/util/errors/NotImplementedHttpError';
|
||||
|
||||
describe('A MethodModesExtractor', (): void => {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
import { Factory } from 'sparqlalgebrajs';
|
||||
import type { SparqlUpdatePatch } from '../../../../src/ldp/http/SparqlUpdatePatch';
|
||||
import type { Operation } from '../../../../src/ldp/operations/Operation';
|
||||
import { AccessMode } from '../../../../src/ldp/permissions/PermissionSet';
|
||||
import { AccessMode } from '../../../../src/ldp/permissions/Permissions';
|
||||
import { SparqlPatchModesExtractor } from '../../../../src/ldp/permissions/SparqlPatchModesExtractor';
|
||||
import { NotImplementedHttpError } from '../../../../src/util/errors/NotImplementedHttpError';
|
||||
|
||||
|
||||
Reference in New Issue
Block a user