cedar-go/internal/json/json.go at d6277580e2cdfd4d06c0bf1738003994b0dc0d2c · strongdm/cedar-go · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
package json

import (
	"encoding/json"

	"github.com/cedar-policy/cedar-go/types"
)

type policyJSON struct {
	Annotations map[string]string `json:"annotations,omitempty"`
	Effect      string            `json:"effect"`
	Principal   scopeJSON         `json:"principal"`
	Action      scopeJSON         `json:"action"`
	Resource    scopeJSON         `json:"resource"`
	Conditions  []conditionJSON   `json:"conditions,omitempty"`
}

// scopeInJSON uses the implicit form of EntityUID JSON serialization to match the Rust SDK
type scopeInJSON struct {
	Entity types.ImplicitlyMarshaledEntityUID `json:"entity"`
}

// scopeJSON uses the implicit form of EntityUID JSON serialization to match the Rust SDK
type scopeJSON struct {
	Op         string                               `json:"op"`
	Entity     *types.ImplicitlyMarshaledEntityUID  `json:"entity,omitempty"`
	Entities   []types.ImplicitlyMarshaledEntityUID `json:"entities,omitempty"`
	EntityType string                               `json:"entity_type,omitempty"`
	In         *scopeInJSON                         `json:"in,omitempty"`
}

type conditionJSON struct {
	Kind string   `json:"kind"`
	Body nodeJSON `json:"body"`
}

type binaryJSON struct {
	Left  nodeJSON `json:"left"`
	Right nodeJSON `json:"right"`
}

type unaryJSON struct {
	Arg nodeJSON `json:"arg"`
}

type strJSON struct {
	Left nodeJSON `json:"left"`
	Attr string   `json:"attr"`
}

type likeJSON struct {
	Left    nodeJSON      `json:"left"`
	Pattern types.Pattern `json:"pattern"`
}

type isJSON struct {
	Left       nodeJSON  `json:"left"`
	EntityType string    `json:"entity_type"`
	In         *nodeJSON `json:"in,omitempty"`
}

type ifThenElseJSON struct {
	If   nodeJSON `json:"if"`
	Then nodeJSON `json:"then"`
	Else nodeJSON `json:"else"`
}

type arrayJSON []nodeJSON

type recordJSON map[string]*nodeJSON

type extensionJSON map[string]arrayJSON

type valueJSON struct {
	v types.Value
}

func (e *valueJSON) MarshalJSON() ([]byte, error) {
	return json.Marshal(e.v)
}

func (e *valueJSON) UnmarshalJSON(b []byte) error {
	return types.UnmarshalJSON(b, &e.v)
}

type nodeJSON struct {
	// Value
	Value *valueJSON `json:"Value,omitempty"` // could be any

	// Var
	Var *string `json:"Var,omitempty"`

	// Slot
	// Unknown

	// !, neg, and isEmpty operators
	Not     *unaryJSON `json:"!,omitempty"`
	Negate  *unaryJSON `json:"neg,omitempty"`
	IsEmpty *unaryJSON `json:"isEmpty,omitempty"`

	// Binary operators: ==, !=, in, <, <=, >, >=, &&, ||, +, -, *, contains, containsAll, containsAny, getTag, hasTag
	Equals             *binaryJSON `json:"==,omitempty"`
	NotEquals          *binaryJSON `json:"!=,omitempty"`
	In                 *binaryJSON `json:"in,omitempty"`
	LessThan           *binaryJSON `json:"<,omitempty"`
	LessThanOrEqual    *binaryJSON `json:"<=,omitempty"`
	GreaterThan        *binaryJSON `json:">,omitempty"`
	GreaterThanOrEqual *binaryJSON `json:">=,omitempty"`
	And                *binaryJSON `json:"&&,omitempty"`
	Or                 *binaryJSON `json:"||,omitempty"`
	Add                *binaryJSON `json:"+,omitempty"`
	Subtract           *binaryJSON `json:"-,omitempty"` //nolint:staticcheck // "-,omitempty" means field name is "-" with omitempty, not skip
	Multiply           *binaryJSON `json:"*,omitempty"`
	Contains           *binaryJSON `json:"contains,omitempty"`
	ContainsAll        *binaryJSON `json:"containsAll,omitempty"`
	ContainsAny        *binaryJSON `json:"containsAny,omitempty"`
	GetTag             *binaryJSON `json:"getTag,omitempty"`
	HasTag             *binaryJSON `json:"hasTag,omitempty"`

	// ., has
	Access *strJSON `json:".,omitempty"`
	Has    *strJSON `json:"has,omitempty"`

	// is
	Is *isJSON `json:"is,omitempty"`

	// like
	Like *likeJSON `json:"like,omitempty"`

	// if-then-else
	IfThenElse *ifThenElseJSON `json:"if-then-else,omitempty"`

	// Set
	Set *arrayJSON `json:"Set,omitempty"`

	// Record
	Record *recordJSON `json:"Record,omitempty"`

	// Any other method: decimal, datetime, duration, ip, lessThan, lessThanOrEqual, greaterThan, greaterThanOrEqual, isIpv4, isIpv6, isLoopback, isMulticast, isInRange, toDate, toTime, toDays, toHours, toMinutes, toSeconds, toMilliseconds, offset, durationSince
	ExtensionCall extensionJSON `json:"-"`
}