Function json_stateful_is_authorized

CedarJavaFFI/src/interface.rs:372–479

(input: &str)

}

fn json_stateful_is_authorized(input: &str) -> serde_json::Result<String> {
    let call: StatefulAuthCall = serde_json::from_str(input)?;

    // Look up cached policy set
    let policies = CACHED_POLICY_SETS
        .get(&call.preparsed_policy_set_id)
        .map(|r| r.clone());
    let policies = match policies {
        Some(p) => p,
        None => {
            return serde_json::to_string(&make_auth_failure(format!(
                "preparsed policy set '{}' not found",
                call.preparsed_policy_set_id
            )));
        }
    };

    // Look up cached schema (optional)
    let schema = if let Some(ref schema_name) = call.preparsed_schema_name {
        let s = CACHED_SCHEMAS.get(schema_name).map(|r| r.clone());
        match s {
            Some(schema) => Some(schema),
            None => {
                return serde_json::to_string(&make_auth_failure(format!(
                    "preparsed schema '{}' not found",
                    schema_name
                )));
            }
        }
    } else {
        None
    };

    // Parse principal, action, resource via FFI EntityUid type
    let principal: FfiEntityUid = match serde_json::from_value(call.principal) {
        Ok(p) => p,
        Err(e) => {
            return serde_json::to_string(&make_auth_failure(format!(
                "failed to parse principal: {e}"
            )));
        }
    };
    let action: FfiEntityUid = match serde_json::from_value(call.action) {
        Ok(a) => a,
        Err(e) => {
            return serde_json::to_string(&make_auth_failure(format!(
                "failed to parse action: {e}"
            )));
        }
    };
    let resource: FfiEntityUid = match serde_json::from_value(call.resource) {
        Ok(r) => r,
        Err(e) => {
            return serde_json::to_string(&make_auth_failure(format!(
                "failed to parse resource: {e}"
            )));
        }
    };