Method resolve_variable

nodedb/src/control/security/auth_context.rs:253–304

Resolve a `$auth. ` reference to its concrete value. Returns `None` if the field doesn't exist or is empty (deny by default).

(&self, field: &str)

    ///
    /// Returns `None` if the field doesn't exist or is empty (deny by default).
    pub fn resolve_variable(&self, field: &str) -> Option<serde_json::Value> {
        match field {
            "id" => Some(serde_json::Value::String(self.id.clone())),
            "username" => Some(serde_json::Value::String(self.username.clone())),
            "email" => self
                .email
                .as_ref()
                .map(|e| serde_json::Value::String(e.clone())),
            "tenant_id" => Some(serde_json::json!(self.tenant_id.as_u64())),
            "org_id" => self
                .org_id
                .as_ref()
                .map(|o| serde_json::Value::String(o.clone())),
            "org_ids" => Some(serde_json::Value::Array(
                self.org_ids
                    .iter()
                    .map(|s| serde_json::Value::String(s.clone()))
                    .collect(),
            )),
            "roles" => Some(serde_json::Value::Array(
                self.roles
                    .iter()
                    .map(|s| serde_json::Value::String(s.clone()))
                    .collect(),
            )),
            "groups" => Some(serde_json::Value::Array(
                self.groups
                    .iter()
                    .map(|s| serde_json::Value::String(s.clone()))
                    .collect(),
            )),
            "permissions" => Some(serde_json::Value::Array(
                self.permissions
                    .iter()
                    .map(|s| serde_json::Value::String(s.clone()))
                    .collect(),
            )),
            "status" => Some(serde_json::Value::String(self.status.to_string())),
            "auth_method" => Some(serde_json::Value::String(format!("{:?}", self.auth_method))),
            "auth_time" => self.auth_time.map(|t| serde_json::json!(t)),
            "session_id" => Some(serde_json::Value::String(self.session_id.clone())),
            "database_id" => self.database_id.map(|d| serde_json::json!(d.as_u64())),
            // Metadata sub-fields: $auth.metadata.<key>
            other if other.starts_with("metadata.") => {
                let key = &other["metadata.".len()..];
                self.metadata
                    .get(key)
                    .map(|v| serde_json::Value::String(v.clone()))
            }
            _ => None,
        }
    }

    /// Whether this context represents a superuser.
    pub fn is_superuser(&self) -> bool {