diff --git a/Dockerfile b/Dockerfile index 7a0e2039a3eb05b4b7904790c29609d5cdeeddeb..dd63aac69db868fde3255482950d74a24dcd36c4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -24,6 +24,7 @@ COPY custom src/custom COPY logo.svg src/images/logo.svg COPY favicon.ico public/favicon.ico COPY colors.ts src/stylesheets/emotion/colors.ts +COPY src/utils/policy.ts src/utils/policy.ts RUN yarn build diff --git a/src/utils/policy.ts b/src/utils/policy.ts new file mode 100644 index 0000000000000000000000000000000000000000..bc839fea4e231b5f7813a6a2834ccf115a5c97f1 --- /dev/null +++ b/src/utils/policy.ts @@ -0,0 +1,18 @@ +import { loadPolicy } from "@open-policy-agent/opa-wasm"; +import { ENV } from "env"; +import { join } from "lodash"; + +export async function createPolicyCheck(user?: Partial<Oidc.Profile>) { + if (!user) { + return () => true; + } + try { + function allowed(resource: string): boolean { + return true; + } + return allowed; + } catch { + console.error("policy evaluation error"); + return (_: string) => false; + } +}