| | | 1 | | using Elsa.ExternalAuthentication.Contracts; |
| | | 2 | | using Elsa.ExternalAuthentication.Models; |
| | | 3 | | using Elsa.Identity.Contracts; |
| | | 4 | | using Elsa.Identity.Models; |
| | | 5 | | |
| | | 6 | | namespace Elsa.ExternalAuthentication.Permissions; |
| | | 7 | | |
| | 18 | 8 | | public sealed class ElsaRolePermissionGrantSource(IUserProvider userProvider, IRoleProvider roleProvider) : IPermissionG |
| | | 9 | | { |
| | | 10 | | public const string SourceType = "elsa-roles"; |
| | 22 | 11 | | public string Type => SourceType; |
| | | 12 | | |
| | 0 | 13 | | public PermissionGrantSourceDescriptor Describe() => new(Type, "Elsa roles", "Grants the permissions assigned to the |
| | | 14 | | |
| | | 15 | | public async ValueTask<PermissionGrantResult> GetGrantsAsync(PermissionGrantContext context, CancellationToken cance |
| | | 16 | | { |
| | 2 | 17 | | var user = await userProvider.FindAsync(new() |
| | 2 | 18 | | { Id = context.UserId }, cancellationToken); |
| | 2 | 19 | | if (user is null || !string.Equals(user.TenantId, context.TargetTenantId, StringComparison.Ordinal)) |
| | 0 | 20 | | return new([], [new("user_not_available", "The Elsa user is not available in the target tenant.")]); |
| | | 21 | | |
| | 2 | 22 | | var roles = await roleProvider.FindManyAsync(new() |
| | 2 | 23 | | { Ids = user.Roles.ToArray() }, cancellationToken); |
| | 2 | 24 | | var grants = roles |
| | 2 | 25 | | .Where(x => string.Equals(x.TenantId, context.TargetTenantId, StringComparison.Ordinal)) |
| | 2 | 26 | | .OrderBy(x => x.Id, StringComparer.Ordinal) |
| | 14 | 27 | | .SelectMany(role => role.Permissions.Where(permission => !string.IsNullOrWhiteSpace(permission)).OrderBy(per |
| | 2 | 28 | | .ToArray(); |
| | 2 | 29 | | return new(grants, []); |
| | 2 | 30 | | } |
| | | 31 | | } |