// Copyright 2018-2021 the Deno authors. All rights reserved. MIT license. use crate::permissions::Permissions; use deno_core::error::custom_error; use deno_core::error::uri_error; use deno_core::error::AnyError; use deno_core::url; use deno_core::OpState; use deno_core::ZeroCopyBuf; use serde::Deserialize; use std::path::Path; pub fn init(rt: &mut deno_core::JsRuntime) { super::reg_sync(rt, "op_query_permission", op_query_permission); super::reg_sync(rt, "op_revoke_permission", op_revoke_permission); super::reg_sync(rt, "op_request_permission", op_request_permission); } #[derive(Deserialize)] pub struct PermissionArgs { name: String, path: Option, host: Option, variable: Option, command: Option, } pub fn op_query_permission( state: &mut OpState, args: PermissionArgs, _zero_copy: Option, ) -> Result { let permissions = state.borrow::(); let path = args.path.as_deref(); let perm = match args.name.as_ref() { "read" => permissions.read.query(path.as_deref().map(Path::new)), "write" => permissions.write.query(path.as_deref().map(Path::new)), "net" => permissions.net.query( match args.host.as_deref() { None => None, Some(h) => Some(parse_host(h)?), } .as_ref(), ), "env" => permissions.env.query(args.variable.as_deref()), "run" => permissions.run.query(args.command.as_deref()), "plugin" => permissions.plugin.query(), "hrtime" => permissions.hrtime.query(), n => { return Err(custom_error( "ReferenceError", format!("No such permission name: {}", n), )) } }; Ok(perm.to_string()) } pub fn op_revoke_permission( state: &mut OpState, args: PermissionArgs, _zero_copy: Option, ) -> Result { let permissions = state.borrow_mut::(); let path = args.path.as_deref(); let perm = match args.name.as_ref() { "read" => permissions.read.revoke(path.as_deref().map(Path::new)), "write" => permissions.write.revoke(path.as_deref().map(Path::new)), "net" => permissions.net.revoke( match args.host.as_deref() { None => None, Some(h) => Some(parse_host(h)?), } .as_ref(), ), "env" => permissions.env.revoke(args.variable.as_deref()), "run" => permissions.run.revoke(args.command.as_deref()), "plugin" => permissions.plugin.revoke(), "hrtime" => permissions.hrtime.revoke(), n => { return Err(custom_error( "ReferenceError", format!("No such permission name: {}", n), )) } }; Ok(perm.to_string()) } pub fn op_request_permission( state: &mut OpState, args: PermissionArgs, _zero_copy: Option, ) -> Result { let permissions = state.borrow_mut::(); let path = args.path.as_deref(); let perm = match args.name.as_ref() { "read" => permissions.read.request(path.as_deref().map(Path::new)), "write" => permissions.write.request(path.as_deref().map(Path::new)), "net" => permissions.net.request( match args.host.as_deref() { None => None, Some(h) => Some(parse_host(h)?), } .as_ref(), ), "env" => permissions.env.request(args.variable.as_deref()), "run" => permissions.run.request(args.command.as_deref()), "plugin" => permissions.plugin.request(), "hrtime" => permissions.hrtime.request(), n => { return Err(custom_error( "ReferenceError", format!("No such permission name: {}", n), )) } }; Ok(perm.to_string()) } fn parse_host(host_str: &str) -> Result<(String, Option), AnyError> { let url = url::Url::parse(&format!("http://{}/", host_str)) .map_err(|_| uri_error("Invalid host"))?; if url.path() != "/" { return Err(uri_error("Invalid host")); } let hostname = url.host_str().unwrap(); Ok((hostname.to_string(), url.port())) }