TgsGraphQLAuthorizeAttribute.cs

Go to the documentation of this file.

using System;
using System.Collections.Generic;
using System.Linq;
 
using HotChocolate.Authorization;
 
using Tgstation.Server.Api.Rights;
 
namespace Tgstation.Server.Host.Security
{
#pragma warning disable CA1019
    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method | AttributeTargets.Property, AllowMultiple = true, Inherited = true)]
    sealed class TgsGraphQLAuthorizeAttribute : AuthorizeAttribute
    {
        public RightsType? RightsType { get; }
 
        public TgsGraphQLAuthorizeAttribute()
            : this(Enumerable.Empty<string>())
        {
        }
 
        public TgsGraphQLAuthorizeAttribute(AdministrationRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Administration;
        }
 
        public TgsGraphQLAuthorizeAttribute(InstanceManagerRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.InstanceManager;
        }
 
        public TgsGraphQLAuthorizeAttribute(RepositoryRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Repository;
        }
 
        public TgsGraphQLAuthorizeAttribute(EngineRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Engine;
        }
 
        public TgsGraphQLAuthorizeAttribute(DreamMakerRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.DreamMaker;
        }
 
        public TgsGraphQLAuthorizeAttribute(DreamDaemonRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.DreamDaemon;
        }
 
        public TgsGraphQLAuthorizeAttribute(ChatBotRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.ChatBots;
        }
 
        public TgsGraphQLAuthorizeAttribute(ConfigurationRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Configuration;
        }
 
        public TgsGraphQLAuthorizeAttribute(InstancePermissionSetRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.InstancePermissionSet;
        }
 
        private TgsGraphQLAuthorizeAttribute(IEnumerable<string> roleNames)
        {
            var listRoles = roleNames.ToList();
            listRoles.Add(TgsAuthorizeAttribute.UserEnabledRole);
            Roles = [.. listRoles];
            Apply = ApplyPolicy.Validation;
        }
    }
}