mirror of
https://github.com/CommunitySolidServer/CommunitySolidServer.git
synced 2024-10-03 14:55:10 +00:00

This was only used for the WAC-Allow header and greatly simplifies how we use permissions.
46 lines
1.7 KiB
TypeScript
46 lines
1.7 KiB
TypeScript
import { UnionHandler } from '../util/handlers/UnionHandler';
|
|
import { IdentifierMap } from '../util/map/IdentifierMap';
|
|
import { getDefault } from '../util/map/MapUtil';
|
|
import type { PermissionReader } from './PermissionReader';
|
|
import type { PermissionMap, PermissionSet } from './permissions/Permissions';
|
|
|
|
/**
|
|
* Combines the results of multiple PermissionReaders.
|
|
* Every permission in every credential type is handled according to the rule `false` \> `true` \> `undefined`.
|
|
*/
|
|
export class UnionPermissionReader extends UnionHandler<PermissionReader> {
|
|
public constructor(readers: PermissionReader[]) {
|
|
super(readers);
|
|
}
|
|
|
|
protected async combine(results: PermissionMap[]): Promise<PermissionMap> {
|
|
const result: PermissionMap = new IdentifierMap();
|
|
for (const permissionMap of results) {
|
|
this.mergePermissionMaps(permissionMap, result);
|
|
}
|
|
return result;
|
|
}
|
|
|
|
/**
|
|
* Merges all entries of the given map into the result map.
|
|
*/
|
|
private mergePermissionMaps(permissionMap: PermissionMap, result: PermissionMap): void {
|
|
for (const [ identifier, permissionSet ] of permissionMap) {
|
|
const resultSet = getDefault(result, identifier, (): PermissionSet => ({}));
|
|
result.set(identifier, this.mergePermissions(permissionSet, resultSet));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Adds the given permissions to the result object according to the combination rules of the class.
|
|
*/
|
|
private mergePermissions(permissions: PermissionSet, result: PermissionSet): PermissionSet {
|
|
for (const [ key, value ] of Object.entries(permissions) as [ keyof PermissionSet, boolean | undefined ][]) {
|
|
if (typeof value !== 'undefined' && result[key] !== false) {
|
|
result[key] = value;
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
}
|