token-server: Delegation config import, validation and evaluation.

tokenserver/appengine/utils/identityset/identityset.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 // Package identityset implements a set-like structure for identity.Identity.
 package identityset
 
 import (
         "fmt"
+        "sort"
         "strings"
 
         "golang.org/x/net/context"
 
         "github.com/luci/luci-go/server/auth"
         "github.com/luci/luci-go/server/auth/identity"
 )
 
 type identSet map[identity.Identity]struct{}
 type groupSet map[string]struct{}
@@ skipping 124 matching lines @@
 
 // IsSuperset returns true if this set is a super set of another set.
 //
 // Two equal sets are considered supersets of each other.
 //
 // 'nil' receiver and argument values are valid and represent empty sets.
 func (s *Set) IsSuperset(subset *Set) bool {
         return subset.IsSubset(s)
 }
 
+// ToStrings returns a sorted list of strings representing this set.
+//
+// See 'FromStrings' for the format of this list.
+func (s *Set) ToStrings() []string {
+        if s.IsEmpty() {
+                return []string{}
+        }
+        if s.All {
+                return []string{"*"}
+        }
+        out := make([]string, 0, len(s.IDs)+len(s.Groups))
+        for ident := range s.IDs {
+                out = append(out, string(ident))
+        }
+        for group := range s.Groups {
+                out = append(out, "group:"+group)
+        }
+        sort.Strings(out)
+        return out
+}
+
 // FromStrings constructs a Set by parsing a slice of strings.
 //
 // Each string is either:
 //  * "<kind>:<id>" identity string.
 //  * "group:<name>" group reference.
 //  * "*" token to mean "All identities".
 //
 // Any string that matches 'skip' predicate is skipped.
 func FromStrings(str []string, skip func(string) bool) (*Set, error) {
         set := &Set{}
@@ skipping 93 matching lines @@
         for origID := range orig.IDs {
                 extended[origID] = struct{}{}
         }
         extended[id] = struct{}{}
 
         return &Set{
                 IDs:    extended,
                 Groups: orig.Groups,
         }
 }