|
71
|
1 /**
|
|
|
2 * Advanced authorization plugin for Orthanc
|
|
|
3 * Copyright (C) 2017-2023 Osimis S.A., Belgium
|
|
|
4 *
|
|
|
5 * This program is free software: you can redistribute it and/or
|
|
|
6 * modify it under the terms of the GNU Affero General Public License
|
|
|
7 * as published by the Free Software Foundation, either version 3 of
|
|
|
8 * the License, or (at your option) any later version.
|
|
|
9 *
|
|
|
10 * This program is distributed in the hope that it will be useful, but
|
|
|
11 * WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
13 * Affero General Public License for more details.
|
|
|
14 *
|
|
|
15 * You should have received a copy of the GNU Affero General Public License
|
|
|
16 * along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
17 **/
|
|
|
18
|
|
|
19 #pragma once
|
|
|
20
|
|
|
21 #include "IAuthorizationService.h"
|
|
|
22
|
|
|
23
|
|
|
24 namespace OrthancPlugins
|
|
|
25 {
|
|
|
26 class CachedAuthorizationService;
|
|
|
27
|
|
|
28 class BaseAuthorizationService : public IAuthorizationService
|
|
|
29 {
|
|
|
30 friend CachedAuthorizationService;
|
|
|
31 protected:
|
|
|
32 virtual bool IsGrantedInternal(unsigned int& validity,
|
|
|
33 OrthancPluginHttpMethod method,
|
|
|
34 const AccessedResource& access,
|
|
|
35 const Token* token,
|
|
|
36 const std::string& tokenValue) = 0;
|
|
|
37
|
|
|
38 virtual bool GetUserProfileInternal(unsigned int& validity,
|
|
109
|
39 UserProfile& profile /* out */,
|
|
71
|
40 const Token* token,
|
|
|
41 const std::string& tokenValue) = 0;
|
|
|
42
|
|
|
43 virtual bool HasUserPermissionInternal(unsigned int& validity,
|
|
|
44 const std::string& permission,
|
|
113
|
45 const UserProfile& profile) = 0;
|
|
71
|
46
|
|
|
47 public:
|
|
|
48 virtual ~BaseAuthorizationService()
|
|
|
49 {
|
|
|
50 }
|
|
|
51
|
|
|
52 virtual bool IsGranted(unsigned int& validity,
|
|
|
53 OrthancPluginHttpMethod method,
|
|
|
54 const AccessedResource& access,
|
|
|
55 const Token& token,
|
|
|
56 const std::string& tokenValue)
|
|
|
57 {
|
|
|
58 return IsGrantedInternal(validity, method, access, &token, tokenValue);
|
|
|
59 }
|
|
|
60
|
|
|
61 virtual bool IsGrantedToAnonymousUser(unsigned int& validity,
|
|
|
62 OrthancPluginHttpMethod method,
|
|
|
63 const AccessedResource& access)
|
|
|
64 {
|
|
|
65 return IsGrantedInternal(validity, method, access, NULL, "");
|
|
|
66 }
|
|
|
67
|
|
|
68 virtual bool GetUserProfile(unsigned int& validity,
|
|
109
|
69 UserProfile& profile /* out */,
|
|
71
|
70 const Token& token,
|
|
|
71 const std::string& tokenValue)
|
|
|
72 {
|
|
|
73 return GetUserProfileInternal(validity, profile, &token, tokenValue);
|
|
|
74 }
|
|
|
75
|
|
|
76 virtual bool GetAnonymousUserProfile(unsigned int& validity /* out */,
|
|
109
|
77 UserProfile& profile /* out */)
|
|
71
|
78 {
|
|
|
79 return GetUserProfileInternal(validity, profile, NULL, "");
|
|
|
80 }
|
|
|
81
|
|
|
82 virtual bool HasUserPermission(unsigned int& validity /* out */,
|
|
|
83 const std::set<std::string>& anyOfPermissions,
|
|
113
|
84 const UserProfile& profile)
|
|
71
|
85 {
|
|
74
|
86 if (anyOfPermissions.size() == 0)
|
|
|
87 {
|
|
|
88 return true;
|
|
|
89 }
|
|
|
90
|
|
71
|
91 for (std::set<std::string>::const_iterator it = anyOfPermissions.begin(); it != anyOfPermissions.end(); ++it)
|
|
|
92 {
|
|
113
|
93 if (HasUserPermissionInternal(validity, *it, profile))
|
|
71
|
94 {
|
|
|
95 return true;
|
|
|
96 }
|
|
|
97 }
|
|
|
98 return false;
|
|
|
99 }
|
|
|
100
|
|
|
101 virtual bool HasAnonymousUserPermission(unsigned int& validity /* out */,
|
|
|
102 const std::set<std::string>& anyOfPermissions)
|
|
|
103 {
|
|
74
|
104 if (anyOfPermissions.size() == 0)
|
|
|
105 {
|
|
|
106 return true;
|
|
|
107 }
|
|
|
108
|
|
113
|
109 UserProfile anonymousUserProfile;
|
|
|
110 anonymousUserProfile.tokenType = TokenType_None;
|
|
|
111
|
|
71
|
112 for (std::set<std::string>::const_iterator it = anyOfPermissions.begin(); it != anyOfPermissions.end(); ++it)
|
|
|
113 {
|
|
113
|
114 if (HasUserPermissionInternal(validity, *it, anonymousUserProfile))
|
|
71
|
115 {
|
|
|
116 return true;
|
|
|
117 }
|
|
|
118 }
|
|
|
119 return false;
|
|
|
120 }
|
|
|
121 };
|
|
|
122 }
|
