rejecter.go

package cel

import (
	"fmt"
	"time"

	"github.com/devopsfaith/krakend-cel/internal"
	"github.com/devopsfaith/krakend/config"
	"github.com/devopsfaith/krakend/logging"
	"github.com/google/cel-go/cel"
)

func NewRejecter(l logging.Logger, cfg *config.EndpointConfig) *Rejecter {
	def, ok := internal.ConfigGetter(cfg.ExtraConfig)
	if !ok {
		return nil
	}

	p := internal.NewCheckExpressionParser(l)
	evaluators, err := p.ParseJWT(def)
	if err != nil {
		l.Debug("CEL: error building the JWT rejecter:", err.Error())
		return nil
	}

	return &Rejecter{
		name:       cfg.Endpoint,
		evaluators: evaluators,
		logger:     l,
	}
}

type Rejecter struct {
	name       string
	evaluators []cel.Program
	logger     logging.Logger
}

func (r *Rejecter) Reject(data map[string]interface{}) bool {
	now := timeNow().Format(time.RFC3339)
	reqActivation := map[string]interface{}{
		internal.JwtKey: data,
		internal.NowKey: now,
	}
	for i, eval := range r.evaluators {
		res, _, err := eval.Eval(reqActivation)
		resultMsg := fmt.Sprintf("CEL: %s rejecter #%d result: %v - err: %v", r.name, i, res, err)

		if v, ok := res.Value().(bool); !ok || !v {
			r.logger.Info(resultMsg)
			return true
		}
		r.logger.Debug(resultMsg)
	}
	return false
}