1
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2025-01-08 15:19:40 -05:00
denoland-deno/runtime
Steven Guerrero adc2f08c17
feat: Add configurable permissions for Workers (#8215)
This commit adds new option to "Worker" Web API that allows to 
configure permissions.

New "Worker.deno.permissions" option can be used to define limited
permissions to the worker thread by either:
- inherit set of parent thread permissions
- use limited subset of parent thread permissions
- revoke all permissions (full sandbox)

In order to achieve this functionality "CliModuleLoader"
was modified to accept "initial permissions", which are used
for top module loading (ie. uses parent thread permission set
to load top level module of a worker).
2021-01-06 21:31:16 +01:00
..
examples feat(cli/standalone): support runtime flags for deno compile (#8738) 2021-01-05 00:15:52 +01:00
js feat: Add configurable permissions for Workers (#8215) 2021-01-06 21:31:16 +01:00
ops feat: Add configurable permissions for Workers (#8215) 2021-01-06 21:31:16 +01:00
build.rs refactor: move WebSocket API to an op_crate (#9026) 2021-01-06 16:57:28 +01:00
Cargo.toml refactor: move WebSocket API to an op_crate (#9026) 2021-01-06 16:57:28 +01:00
colors.rs refactor: deno_runtime crate (#8640) 2020-12-13 19:45:53 +01:00
errors.rs refactor: rewrite ops to use ResourceTable2 (#8512) 2020-12-16 17:14:12 +01:00
fs_util.rs refactor: deno_runtime crate (#8640) 2020-12-13 19:45:53 +01:00
http_util.rs feat(cli/standalone): support runtime flags for deno compile (#8738) 2021-01-05 00:15:52 +01:00
inspector.rs refactor: move WebSocket API to an op_crate (#9026) 2021-01-06 16:57:28 +01:00
js.rs refactor: deno_runtime crate (#8640) 2020-12-13 19:45:53 +01:00
lib.rs refactor: move WebSocket API to an op_crate (#9026) 2021-01-06 16:57:28 +01:00
metrics.rs refactor: deno_runtime crate (#8640) 2020-12-13 19:45:53 +01:00
permissions.rs feat: Add configurable permissions for Workers (#8215) 2021-01-06 21:31:16 +01:00
README.md refactor: deno_runtime crate (#8640) 2020-12-13 19:45:53 +01:00
resolve_addr.rs refactor(runtime): return iterator from resolve_addr (#8891) 2020-12-29 20:19:28 -05:00
tokio_util.rs refactor: deno_runtime crate (#8640) 2020-12-13 19:45:53 +01:00
web_worker.rs refactor: move WebSocket API to an op_crate (#9026) 2021-01-06 16:57:28 +01:00
worker.rs refactor: move WebSocket API to an op_crate (#9026) 2021-01-06 16:57:28 +01:00

deno_runtime crate

crates docs

This is a slim version of the Deno CLI which removes typescript integration and various tooling (like lint and doc). Basically only JavaScript execution with Deno's operating system bindings (ops).

Stability

This crate is built using battle-tested modules that were originally in deno crate, however the API of this crate is subject to rapid and breaking changes.

MainWorker

The main API of this crate is MainWorker. MainWorker is a structure encapsulating deno_core::JsRuntime with a set of ops used to implement Deno namespace.

When creating a MainWorker implementors must call MainWorker::bootstrap to prepare JS runtime for use.

MainWorker is highly configurable and allows to customize many of the runtime's properties:

  • module loading implementation
  • error formatting
  • support for source maps
  • support for V8 inspector and Chrome Devtools debugger
  • HTTP client user agent, CA certificate
  • random number generator seed

Worker Web API

deno_runtime comes with support for Worker Web API. The Worker API is implemented using WebWorker structure.

When creating a new instance of MainWorker implementors must provide a callback function that is used when creating a new instance of Worker.

All WebWorker instances are decendents of MainWorker which is responsible for setting up communication with child worker. Each WebWorker spawns a new OS thread that is dedicated solely to that worker.