orisai/nette-auth

Orisai Auth integration for Nette

1.1.0 2023-03-01 12:56 UTC

Requires

• php: >=7.4.0 <8.3.0
• nette/http: ^3.1.5
• orisai/auth: ^1.0.0|^2.0.0
• orisai/exceptions: ^1.0.0
• orisai/nette-di: ^1.0.7

Requires (Dev)

• brianium/paratest: ^6.3.0
• infection/infection: ^0.26.0
• orisai/coding-standard: ^3.0.0
• phpstan/extension-installer: ^1.0.0
• phpstan/phpstan: ^1.0.0
• phpstan/phpstan-deprecation-rules: ^1.0.0
• phpstan/phpstan-nette: ^1.0.0
• phpstan/phpstan-phpunit: ^1.0.0
• phpstan/phpstan-strict-rules: ^1.0.0
• phpunit/phpunit: ^9.5.0
• staabm/annotate-pull-request-from-checkstyle: ^1.7.0
• tracy/tracy: ^2.8.0

MPL-2.0

• Marek Bartoš

• authorization
• security
• Authentication
• login
• password
• nette
• auth
• acl
• Users
• Policy
• permissions
• rbac
• passwords
• role
• access-control
• abac
• orisai

README

Orisai Auth integration for Nette

📄 Check out our documentation.

💸 If you like Orisai, please make a donation. Thank you!

namespace App\Admin\Article\View;

use Orisai\Auth\Authentication\Identity;
use Orisai\Auth\Authentication\SimpleFirewall;

final class ArticleEditController
{

	private SimpleFirewall $firewall;

	public function __construct(SimpleFirewall $firewall)
	{
		$this->firewall = $firewall;
	}

	public function run(): void
	{
		if (!$this->firewall->isAllowed('administration.entry')) {
			// Not allowed
		}

		$article = /* get article by ID from request */;

		if (!$this->firewall->isAllowed('article.edit', $article)) {
			// Not allowed
		}

		// Is allowed
	}

}

use App\Core\Article\Article;
use Orisai\Auth\Authorization\Policy;
use Orisai\Auth\Authorization\PolicyContext;

/**
 * @phpstan-implements Policy<Article>
 */
final class ArticleEditPolicy implements Policy
{

	public static function getPrivilege(): string
	{
		return 'article.edit';
	}

	public static function getRequirementsClass(): string
	{
		return Article::class;
	}

	/**
	 * @param Article $requirements
	 */
	public function isAllowed(Identity $identity, object $requirements, PolicyContext $context): bool
	{
		$authorizer = $context->getAuthorizer();

		return $authorizer->hasPrivilege($identity, self::getPrivilege())
			&& $requirements->getAuthor()->getId() === $identity->getId();
	}

}