mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
Remove dependency on jsonwebtoken which brings in the ring crate. Ring crate triggers governance violations. Support for JWT will be implemented in future using a more governance compliant crate. BREAKING CHANGE Prior to this PR, support for jwt builtins was minimially implemented. Only io.jwt.decode and io.jwt.decode_verify was implemented. With this PR, those builtins will no longer be available. They are planned to be implemented in the future. In the meantime, they can be brought back in via Engine::add_extension. Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
131 lines
3.3 KiB
Rust
131 lines
3.3 KiB
Rust
// Copyright (c) Microsoft Corporation.
|
|
// Licensed under the MIT License.
|
|
|
|
use crate::ast::{Expr, Ref};
|
|
use crate::builtins;
|
|
use crate::builtins::utils::ensure_args_count;
|
|
use crate::*;
|
|
|
|
use crate::lexer::Span;
|
|
use crate::value::Value;
|
|
|
|
use alloc::collections::BTreeMap;
|
|
|
|
use anyhow::Result;
|
|
|
|
pub fn register(m: &mut builtins::BuiltinsMap<&'static str, builtins::BuiltinFcn>) {
|
|
m.insert("opa.runtime", (opa_runtime, 0));
|
|
}
|
|
|
|
fn opa_runtime(span: &Span, params: &[Ref<Expr>], args: &[Value], _strict: bool) -> Result<Value> {
|
|
let name = "opa.runtime";
|
|
ensure_args_count(span, name, params, args, 0)?;
|
|
let mut obj = BTreeMap::new();
|
|
|
|
obj.insert(
|
|
Value::String("commit".into()),
|
|
Value::String(env!("GIT_HASH").into()),
|
|
);
|
|
|
|
obj.insert(
|
|
Value::String("regorus-version".into()),
|
|
Value::String(env!("CARGO_PKG_VERSION").into()),
|
|
);
|
|
|
|
obj.insert(
|
|
Value::String("version".into()),
|
|
Value::String("0.60.0".into()),
|
|
);
|
|
|
|
// Emitting environment variables could lead to confidential data being leaked.
|
|
#[cfg(feature = "std")]
|
|
if false {
|
|
obj.insert(
|
|
Value::String("env".into()),
|
|
Value::from_map(
|
|
std::env::vars()
|
|
.map(|(k, v)| (Value::String(k.into()), Value::String(v.into())))
|
|
.collect(),
|
|
),
|
|
);
|
|
}
|
|
|
|
let features = [
|
|
#[cfg(feature = "base64")]
|
|
"base64",
|
|
#[cfg(feature = "base64url")]
|
|
"base64url",
|
|
#[cfg(feature = "crypto")]
|
|
"crypto",
|
|
#[cfg(feature = "deprecated")]
|
|
"deprecated",
|
|
#[cfg(feature = "glob")]
|
|
"glob",
|
|
#[cfg(feature = "graph")]
|
|
"graph",
|
|
#[cfg(feature = "hex")]
|
|
"hex",
|
|
#[cfg(feature = "http")]
|
|
"http",
|
|
#[cfg(feature = "jsonschema")]
|
|
"jsonschema",
|
|
#[cfg(feature = "opa-runtime")]
|
|
"opa-runtime",
|
|
#[cfg(feature = "regex")]
|
|
"regex",
|
|
#[cfg(feature = "semver")]
|
|
"semver",
|
|
#[cfg(feature = "time")]
|
|
"time",
|
|
#[cfg(feature = "uuid")]
|
|
"uuid",
|
|
#[cfg(feature = "urlquery")]
|
|
"urlquery",
|
|
#[cfg(feature = "yaml")]
|
|
"yaml",
|
|
"",
|
|
];
|
|
|
|
let features = &features[..features.len() - 1];
|
|
obj.insert(
|
|
Value::String("features".into()),
|
|
Value::from_array(
|
|
features
|
|
.iter()
|
|
.map(|f| Value::String(f.to_string().into()))
|
|
.collect(),
|
|
),
|
|
);
|
|
|
|
let mut builtins: Vec<&&str> = builtins::BUILTINS.keys().collect();
|
|
builtins.sort();
|
|
|
|
obj.insert(
|
|
Value::String("builtins".into()),
|
|
Value::from_array(
|
|
builtins
|
|
.iter()
|
|
.map(|f| Value::String(f.to_string().into()))
|
|
.collect(),
|
|
),
|
|
);
|
|
|
|
#[cfg(feature = "deprecated")]
|
|
{
|
|
let mut deprecated: Vec<&&str> = builtins::deprecated::DEPRECATED.keys().collect();
|
|
deprecated.sort();
|
|
|
|
obj.insert(
|
|
Value::String("deprecated".into()),
|
|
Value::from_array(
|
|
deprecated
|
|
.iter()
|
|
.map(|f| Value::String(f.to_string().into()))
|
|
.collect(),
|
|
),
|
|
);
|
|
}
|
|
|
|
Ok(Value::from_map(obj))
|
|
}
|