oceanbox/openfga
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Add del and add user scripts

Browse Source
This commit is contained in:
Moritz Jörg
2025-10-29 08:56:58 +01:00
parent 8f5be0c091
commit 8346812c51
3 changed files with 52 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
scripts/adduser.sh
View File

@@ -9,30 +9,31 @@ case $1 in
esac
done
IFS=',' read user group <<< "$1"
IFS=',' read -r user group <<< "$1"
file=${2:-""}
if [ -n "$file" ]; then
grep -q $user $file
if [ $? = 0 ]; then
if rg -q "$user" "$file"; then
echo "user $user already exists"
exit 1
fi
echo "" >> $file
echo "user,$user,registered,user,$user,," >> $file
echo "user,$user,active,user,$user,," >> $file
echo "user,$user,member,group,$group,," >> $file
{
echo ""
echo "user,\"$user\",registered,user,$user,,"
echo "user,\"$user\",active,user,$user,,"
echo "user,\"$user\",member,group,$group,,"
} >> "$file"
fga tuple write user:$user registered user:$user
fga tuple write user:$user active user:$user
fga tuple write user:$user member group:$group
elif [ $fga = true ]; then
echo "fga tuple write user:$user registered user:$user"
echo "fga tuple write user:$user active user:$user"
echo "fga tuple write user:$user member group:$group"
fga tuple write user:"$user" registered user:"$user"
fga tuple write user:"$user" active user:"$user"
fga tuple write user:"$user" member group:"$group"
elif [ "$fga" = true ]; then
echo "fga tuple write user:\"$user\" registered user:\"$user\""
echo "fga tuple write user:\"$user\" active user:\"$user\""
echo "fga tuple write user:\"$user\" member group:\"$group\""
else
echo "user,$user,registered,user,$user,,"
echo "user,$user,active,user,$user,,"
echo "user,$user,member,group,$group,,"
echo "user,\"$user\",registered,user,\"$user\",,"
echo "user,\"$user\",active,user,\"$user\",,"
echo "user,\"$user\",member,group,\"$group\",,"
fi

26
scripts/deluser.sh
View File

@@ -1,27 +1,27 @@
#!/bin/sh
user=${1:-"unknown"}
file=${2:-""}
group=${2:-"uknown"}
file=${3:-""}
if [ -n "$file" ]; then
grep -q $user $file
if [ $? = 1 ]; then
echo "user $user doesn't exists"
if rg -q "$user" "$file"; then
echo "user \"$user\" doesn't exists"
exit 1
fi
sed -n "/$user/{p; d}" $file
sed -n "/$user/{p; d}" "$file"
echo "Are you sure? (y/n)"
read yesno
read -r yesno
case $yesno in
y|yes)
sed -i "/$user/d" $file
fga tuple delete user:$user registered user:$user
fga tuple delete user:$user active user:$user
fga tuple delete user:$user member group:$group
sed -i "/$user/d" "$file"
fga tuple delete user:"$user" registered user:"$user"
fga tuple delete user:"$user" active user:"$user"
fga tuple delete user:"$user" member group:"$group"
;;
esac
else
echo "fga tuple delete user:$user registered user:$user"
echo "fga tuple delete user:$user active user:$user"
echo "fga tuple delete user:$user member group:$group"
echo "fga tuple delete user:\"$user\" registered user:\"$user\""
echo "fga tuple delete user:\"$user\" active user:\"$user\""
echo "fga tuple delete user:\"$user\" member group:\"$group\""
fi

21
shell.nix
View File

@@ -2,9 +2,30 @@
sources ? import ./npins,
pkgs ? import sources.nixpkgs { },
}:
let
addUser = pkgs.writeShellApplication rec {
name = "deluser";
runtimeInputs = [
pkgs.openfga-cli
pkgs.ripgrep
pkgs.sedutil
];
text = builtins.readFile ./scripts/${name}.sh;
};
delUser = pkgs.writeShellApplication rec {
name = "adduser";
runtimeInputs = [
pkgs.openfga-cli
pkgs.ripgrep
];
text = builtins.readFile ./scripts/${name}.sh;
};
in
pkgs.mkShellNoCC {
packages = [
pkgs.openfga-cli
addUser
delUser
];
FGA_API_URL = "https://openfga.srv.oceanbox.io";
FGA_STORE_ID = "01JKTZXMP7ANN4GG2P5W8Y56M6";