mirror of
https://github.com/bitechdev/ResolveSpec.git
synced 2026-10-01 19:20:31 +00:00
Hein
ad2f54693f
Guard() rejects unauthenticated callers (no guest/optional mode); Setup*/New* helpers take a SecurityList and have explicit *Unauthenticated variants. Model rules now reach the security hooks, create checks CanCreate (security.CheckModelCreateAllowed), create/update validate keys against the model's writable columns, update sets only given keys (NULL allowed), update and delete go through row security via a new BeforeScan hook, and the annotation tool is opt-in (Config.EnableAnnotations) and runs BeforeHandle.
92 lines
2.5 KiB
Go
92 lines
2.5 KiB
Go
package resolvemcp
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/bitechdev/ResolveSpec/pkg/modelregistry"
|
|
"github.com/bitechdev/ResolveSpec/pkg/security"
|
|
)
|
|
|
|
type contextKey string
|
|
|
|
const (
|
|
contextKeySchema contextKey = "schema"
|
|
contextKeyEntity contextKey = "entity"
|
|
contextKeyTableName contextKey = "tableName"
|
|
contextKeyModel contextKey = "model"
|
|
contextKeyModelPtr contextKey = "modelPtr"
|
|
)
|
|
|
|
func WithSchema(ctx context.Context, schema string) context.Context {
|
|
return context.WithValue(ctx, contextKeySchema, schema)
|
|
}
|
|
|
|
func GetSchema(ctx context.Context) string {
|
|
if v := ctx.Value(contextKeySchema); v != nil {
|
|
return v.(string)
|
|
}
|
|
return ""
|
|
}
|
|
|
|
func WithEntity(ctx context.Context, entity string) context.Context {
|
|
return context.WithValue(ctx, contextKeyEntity, entity)
|
|
}
|
|
|
|
func GetEntity(ctx context.Context) string {
|
|
if v := ctx.Value(contextKeyEntity); v != nil {
|
|
return v.(string)
|
|
}
|
|
return ""
|
|
}
|
|
|
|
func WithTableName(ctx context.Context, tableName string) context.Context {
|
|
return context.WithValue(ctx, contextKeyTableName, tableName)
|
|
}
|
|
|
|
func GetTableName(ctx context.Context) string {
|
|
if v := ctx.Value(contextKeyTableName); v != nil {
|
|
return v.(string)
|
|
}
|
|
return ""
|
|
}
|
|
|
|
func WithModel(ctx context.Context, model interface{}) context.Context {
|
|
return context.WithValue(ctx, contextKeyModel, model)
|
|
}
|
|
|
|
func GetModel(ctx context.Context) interface{} {
|
|
return ctx.Value(contextKeyModel)
|
|
}
|
|
|
|
func WithModelPtr(ctx context.Context, modelPtr interface{}) context.Context {
|
|
return context.WithValue(ctx, contextKeyModelPtr, modelPtr)
|
|
}
|
|
|
|
func GetModelPtr(ctx context.Context) interface{} {
|
|
return ctx.Value(contextKeyModelPtr)
|
|
}
|
|
|
|
func withRequestData(ctx context.Context, schema, entity, tableName string, model, modelPtr interface{}) context.Context {
|
|
ctx = WithSchema(ctx, schema)
|
|
ctx = WithEntity(ctx, entity)
|
|
ctx = WithTableName(ctx, tableName)
|
|
ctx = WithModel(ctx, model)
|
|
ctx = WithModelPtr(ctx, modelPtr)
|
|
return ctx
|
|
}
|
|
|
|
// withModelRules puts the handler registry's rules for the model into the context, where the
|
|
// security hooks look them up first. The handler registry is private, so without this the
|
|
// hooks would not see rules set by RegisterModelWithRules / SetModelRules.
|
|
func (h *Handler) withModelRules(ctx context.Context, schema, entity string) context.Context {
|
|
reg, ok := h.registry.(*modelregistry.DefaultModelRegistry)
|
|
if !ok {
|
|
return ctx
|
|
}
|
|
rules, err := reg.GetModelRules(buildModelName(schema, entity))
|
|
if err != nil {
|
|
return ctx
|
|
}
|
|
return context.WithValue(ctx, security.ModelRulesKey, rules)
|
|
}
|