Acl.h

Go to the documentation of this file.

/*
 * Copyright (C) 1996-2025 The Squid Software Foundation and contributors
 *
 * Squid software is distributed under GPLv2+ license and includes
 * contributions from numerous individuals and organizations.
 * Please see the COPYING and CONTRIBUTORS files for details.
 */
 
#ifndef SQUID_SRC_ACL_ACL_H
#define SQUID_SRC_ACL_ACL_H
 
#include "acl/forward.h"
#include "defines.h"
#include "dlink.h"
#include "sbuf/SBuf.h"
 
#include <algorithm>
#include <optional>
#include <ostream>
 
namespace Acl {
 
using TypeName = const char *;
using Maker = Node *(*)(TypeName typeName);
void RegisterMaker(TypeName typeName, Maker maker);
 
void SetKey(SBuf &keyStorage, const char *keyParameterName, const char *newKey);
 
}  // namespace Acl
 
typedef enum {
    // Authorization ACL result states
    ACCESS_DENIED,
    ACCESS_ALLOWED,
    ACCESS_DUNNO,
 
    // Authentication Acl::Node result states
    ACCESS_AUTH_REQUIRED,    // Missing Credentials
} aclMatchCode;
 
namespace Acl {
 
class Answer
{
public:
    // TODO: Find a good way to avoid implicit conversion (without explicitly
    // casting every ACCESS_ argument in implicit constructor calls).
    Answer(const aclMatchCode aCode, int aKind = 0): code(aCode), kind(aKind) {}
 
    Answer() = default;
 
    bool operator ==(const aclMatchCode aCode) const {
        return code == aCode;
    }
 
    bool operator !=(const aclMatchCode aCode) const {
        return !(*this == aCode);
    }
 
    bool operator ==(const Answer &allow) const {
        return code == allow.code && kind == allow.kind;
    }
 
    operator aclMatchCode() const {
        return code;
    }
 
    bool allowed() const { return code == ACCESS_ALLOWED; }
 
    bool denied() const { return code == ACCESS_DENIED; }
 
    bool conflicted() const { return !allowed() && !denied(); }
 
    const SBuf &lastCheckDescription() const;
 
    aclMatchCode code = ACCESS_DUNNO; 
 
    int kind = 0;
 
    bool implicit = false;
 
    std::optional<SBuf> lastCheckedName;
};
 
inline std::ostream &
operator <<(std::ostream &o, const Answer &a)
{
    switch (a) {
    case ACCESS_DENIED:
        o << "DENIED";
        break;
    case ACCESS_ALLOWED:
        o << "ALLOWED";
        break;
    case ACCESS_DUNNO:
        o << "DUNNO";
        break;
    case ACCESS_AUTH_REQUIRED:
        o << "AUTH_REQUIRED";
        break;
    }
    return o;
}
 
void DumpNamedAcls(std::ostream &, const char *directiveName, NamedAcls *);
 
void FreeNamedAcls(NamedAcls **);
 
} // namespace Acl
 
class acl_proxy_auth_match_cache
{
    MEMPROXY_CLASS(acl_proxy_auth_match_cache);
 
public:
    acl_proxy_auth_match_cache(int matchRv, void * aclData) :
        matchrv(matchRv),
        acl_data(aclData)
    {}
 
    dlink_node link;
    int matchrv;
    void *acl_data;
};
 
#endif /* SQUID_SRC_ACL_ACL_H */