debian-mirror-gitlab/lib/api/scope.rb

27 lines
712 B
Ruby
Raw Normal View History

2018-12-05 23:21:45 +05:30
# frozen_string_literal: true
2017-09-10 17:25:29 +05:30
# Encapsulate a scope used for authorization, such as `api`, or `read_user`
2022-04-04 11:22:00 +05:30
# See Gitlab::Auth for the set of available scopes, and their purposes.
2017-09-10 17:25:29 +05:30
module API
class Scope
attr_reader :name, :if
def initialize(name, options = {})
@name = name.to_sym
@if = options[:if]
end
# Are the `scopes` passed in sufficient to adequately authorize the passed
# request for the scope represented by the current instance of this class?
def sufficient?(scopes, request)
scopes.include?(self.name) && verify_if_condition(request)
end
private
def verify_if_condition(request)
self.if.nil? || self.if.call(request)
end
end
end