From 7fd0b7695eb15c9ecf1e0ca9d40b2d3058e8e5d5 Mon Sep 17 00:00:00 2001 From: LittleSheep Date: Sun, 27 Oct 2024 13:08:30 +0800 Subject: [PATCH] :sparkles: Add perm check helper in Nex.Sec --- pkg/nex/sec/perms.go | 66 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 66 insertions(+) create mode 100644 pkg/nex/sec/perms.go diff --git a/pkg/nex/sec/perms.go b/pkg/nex/sec/perms.go new file mode 100644 index 0000000..0cbdb7f --- /dev/null +++ b/pkg/nex/sec/perms.go @@ -0,0 +1,66 @@ +package sec + +import ( + "fmt" + "reflect" +) + +func (v UserInfo) HasPermNode(requiredKey string, requiredValue any) bool { + if heldValue, ok := v.PermNodes[requiredKey]; ok { + return comparePermNode(heldValue, requiredValue) + } + return false +} + +func (v UserInfo) HasPermNodeWithDefault(requiredKey string, requiredValue any, defaultValue any) bool { + if heldValue, ok := v.PermNodes[requiredKey]; ok { + return comparePermNode(heldValue, requiredValue) + } + return comparePermNode(defaultValue, requiredValue) +} + +func comparePermNode(held any, required any) bool { + isNumeric := func(val reflect.Value) bool { + kind := val.Kind() + return kind >= reflect.Int && kind <= reflect.Uint64 || kind >= reflect.Float32 && kind <= reflect.Float64 + } + + toFloat64 := func(val reflect.Value) float64 { + switch val.Kind() { + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + return float64(val.Int()) + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64: + return float64(val.Uint()) + case reflect.Float32, reflect.Float64: + return val.Float() + default: + panic(fmt.Sprintf("non-numeric value of kind %s", val.Kind())) + } + } + + heldValue := reflect.ValueOf(held) + requiredValue := reflect.ValueOf(required) + + switch heldValue.Kind() { + case reflect.String: + if heldValue.String() == requiredValue.String() { + return true + } + case reflect.Slice, reflect.Array: + for i := 0; i < heldValue.Len(); i++ { + if reflect.DeepEqual(heldValue.Index(i).Interface(), required) { + return true + } + } + default: + if isNumeric(heldValue) && isNumeric(requiredValue) { + return toFloat64(heldValue) >= toFloat64(requiredValue) + } + + if reflect.DeepEqual(held, required) { + return true + } + } + + return false +}