mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-23 19:49:13 +02:00
ppl: add support for http_path and http_method (#2813)
* ppl: add support for http_path and http_method * fix import ordering
This commit is contained in:
parent
54ec88fb93
commit
2d04106e6d
13 changed files with 257 additions and 18 deletions
43
pkg/policy/criteria/http_method.go
Normal file
43
pkg/policy/criteria/http_method.go
Normal file
|
@ -0,0 +1,43 @@
|
|||
package criteria
|
||||
|
||||
import (
|
||||
"github.com/open-policy-agent/opa/ast"
|
||||
|
||||
"github.com/pomerium/pomerium/pkg/policy/parser"
|
||||
)
|
||||
|
||||
type httpMethodCriterion struct {
|
||||
g *Generator
|
||||
}
|
||||
|
||||
func (httpMethodCriterion) DataType() CriterionDataType {
|
||||
return CriterionDataTypeStringMatcher
|
||||
}
|
||||
|
||||
func (httpMethodCriterion) Name() string {
|
||||
return "http_method"
|
||||
}
|
||||
|
||||
func (c httpMethodCriterion) GenerateRule(_ string, data parser.Value) (*ast.Rule, []*ast.Rule, error) {
|
||||
var body ast.Body
|
||||
ref := ast.RefTerm(ast.VarTerm("input"), ast.VarTerm("http"), ast.VarTerm("method"))
|
||||
err := matchString(&body, ref, data)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
rule := NewCriterionRule(c.g, c.Name(),
|
||||
ReasonHTTPMethodOK, ReasonHTTPMethodUnauthorized,
|
||||
body)
|
||||
|
||||
return rule, nil, nil
|
||||
}
|
||||
|
||||
// HTTPMethod returns a Criterion which matches an HTTP method.
|
||||
func HTTPMethod(generator *Generator) Criterion {
|
||||
return httpMethodCriterion{g: generator}
|
||||
}
|
||||
|
||||
func init() {
|
||||
Register(HTTPMethod)
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue