support fuzzy match

Author: tianxiaoliang

.github/workflows/golangci-lint.yml

@@ -16,4 +16,4 @@ jobs:
         uses: golangci/golangci-lint-action@v2
         with:
           version: v1.29
-          args: --skip-dirs=discovery --out-format=colored-line-number  --skip-files=.*_test.go$
+          args: --skip-dirs=discovery  --skip-files=.*_test.go$

go.sum

@@ -4,13 +4,17 @@ github.com/deckarep/golang-set v1.7.1 h1:SCQV0S6gTtp6itiFrTqI+pfmJ4LN85S1YzhDf9r
 github.com/deckarep/golang-set v1.7.1/go.mod h1:93vsz/8Wt4joVM7c2AVqh+YRMiUSc14yDtF28KmMOgQ=
 github.com/gogo/protobuf v1.3.1 h1:DqDEcV5aeaTmdFBePNpYsp3FlcVH/2ISVVM9Qf8PSls=
 github.com/gogo/protobuf v1.3.1/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
+github.com/kisielk/errcheck v1.2.0 h1:reN85Pxc5larApoH1keMBiu2GWtPqXQ1nc9gx+jOU+E=
 github.com/kisielk/errcheck v1.2.0/go.mod h1:/BMXB+zMLi60iA8Vv6Ksmxu/1UDYcXs4uQLJ+jE2L00=
+github.com/kisielk/gotool v1.0.0 h1:AV2c/EiW3KqPNT9ZKl07ehoAGi4C5/01Cfbblndcapg=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0 h1:4G4v2dO3VZwixGIRoQ5Lfboy6nUhCyYzaqnIAPPhYs4=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/tools v0.0.0-20181030221726-6c7e314b6563 h1:NIou6eNFigscvKJmsbyez16S2cIS6idossORlFtSt2E=
 golang.org/x/tools v0.0.0-20181030221726-6c7e314b6563/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

rbac/resource_map.go

@@ -17,21 +17,36 @@
 
 package rbac
 
-//as a user, he only understand resource of this system,
-//but to decouple authorization code from business code,
+import "strings"
+
+//as a user of a backend service, he only understands resource of this service,
+//to decouple authorization code from business code,
 //a middleware should handle all the authorization logic, and this middleware only understand rest API,
 //a resource mapping helps to maintain relations between api and resource.
 var resourceMap = map[string]string{}
 
+//PartialMap saves api partial matching
+var PartialMap = map[string]string{}
+
 func GetResource(api string) string {
 	r, ok := resourceMap[api]
-	if !ok {
-		return resourceMap["*"]
+	if ok {
+		return r
+	}
+	for partialAPI, resource := range PartialMap {
+		if strings.Contains(api, partialAPI) {
+			return resource
+		}
 	}
-	return r
+	return resourceMap["*"]
 }
 
-// MapResource save the mapping from api to resource
+// MapResource saves the mapping from api to resource, it must be exactly match
 func MapResource(api, resource string) {
 	resourceMap[api] = resource
 }
+
+// PartialMapResource saves the mapping from api to resource, it is partial match
+func PartialMapResource(api, resource string) {
+	PartialMap[api] = resource
+}

rbac/resource_map_test.go

@@ -38,4 +38,9 @@ func TestGetResource(t *testing.T) {
 		res := rbac.GetResource("/v1/a/1")
 		assert.Empty(t, res)
 	})
+	t.Run("given partial string and resource mapping,return right resource", func(t *testing.T) {
+		rbac.PartialMapResource("part", "partRes")
+		res := rbac.GetResource("/part/service/some")
+		assert.Equal(t, "partRes", res)
+	})
 }