Cerbos Rust SDK

Rust 客户端库用于 Cerbos：一个开源核心、语言无关、可扩展的授权解决方案，通过编写应用程序资源的上下文感知访问控制策略，使用户权限和授权易于实现和管理。

• Cerbos 网站
• Cerbos 文档
• Cerbos GitHub 仓库
• Cerbos Slack 社区

使用方法

cargo add cerbos

客户端可以通过实例化 CerbosAsyncClient 或 CerbosSyncClient 分别以异步或同步方式使用。

use cerbos::sdk::attr::attr;
use cerbos::sdk::model::{Principal, Resource};
use cerbos::sdk::{CerbosAsyncClient, CerbosClientOptions, CerbosEndpoint, Result};

#[tokio::main]
async fn main() -> Result<()> {
    let opt = CerbosClientOptions::new(CerbosEndpoint::HostPort("localhost", 3593));
    let mut client = CerbosAsyncClient::new(opt).await?;

    let principal = Principal::new("alice", ["employee"])
        .with_policy_version("20210210")
        .with_attributes([
            attr("department", "marketing"),
            attr("geography", "GB"),
            attr("team", "design"),
        ]);

    let resource = Resource::new("XX125", "leave_request")
        .with_policy_version("20210210")
        .with_attributes([
            attr("department", "marketing"),
            attr("geography", "GB"),
            attr("team", "design"),
            attr("owner", "alice"),
            attr("approved", true),
            attr("id", "XX125"),
        ]);

    let resp = client
        .is_allowed("view:public", principal, resource, None)
        .await?;

    println!("Allowed={:?}", resp);

    Ok(())
}

开发

运行测试

cerbos run --set=storage.disk.directory=resources/store -- cargo test