chore: use cedar policy cli to format and lint cedar policies

1 files changed, 38 insertions, 42 deletions

diff --git a/etc/authzd/policy0.cedar b/etc/authzd/policy0.cedar
index e67f0db5..9410eced 100644
--- a/etc/authzd/policy0.cedar
+++ b/etc/authzd/policy0.cedar
@@ -1,46 +1,42 @@
-permit(principal, action == Action::"check", resource)
-when {
-  context has bearer_token &&
-    context.bearer_token == "valid-token"
-};
+permit (
+  principal,
+  action == Action::"check",
+  resource
+)
+when { context has bearer_token && context.bearer_token == "valid-token" };
 
-permit(principal, action, resource)
-when {
-  context has path && context has method && context.method == "GET" && (
-    context.path like "*.css" ||
-    context.path like "*.js" ||
-    context.path like "*.ico" ||
-    context.path like "*.png" ||
-    context.path like "*.jpg" ||
-    context.path like "*.jpeg" ||
-    context.path like "*.gif" ||
-    context.path like "*.bmp" ||
-    context.path like "*.html"
-  )
+permit (principal, action, resource)
+when
+{
+  context has path &&
+  context has method &&
+  context.method == "GET" &&
+  (context.path like "*.css" ||
+   context.path like "*.js" ||
+   context.path like "*.ico" ||
+   context.path like "*.png" ||
+   context.path like "*.jpg" ||
+   context.path like "*.jpeg" ||
+   context.path like "*.gif" ||
+   context.path like "*.bmp" ||
+   context.path like "*.html")
 };
 
-permit(principal, action, resource)
-when {
-  context has host && context has method && context has path && (
-    (
-      context.host == "sparkle.runway.gitlab.net" ||
-      context.host == "sparkle.staging.runway.gitlab.net" ||
-      context.host like "localhost:*"
-    ) && (
-      (
-        context.method == "GET" && (
-          context.path == "/" ||
-          context.path == "/callback" ||
-          context.path == "/dashboard/nav" ||
-          context.path == "/health" ||
-          context.path == "/signout" ||
-          context.path == "/sparkles"
-        )
-      ) || (
-        context.method == "POST" && (
-          context.path == "/sparkles/restore"
-        )
-      )
-    )
-  )
+permit (principal, action, resource)
+when
+{
+  context has host &&
+  context has method &&
+  context has path &&
+  ((context.host == "sparkle.runway.gitlab.net" ||
+    context.host == "sparkle.staging.runway.gitlab.net" ||
+    context.host like "localhost:*") &&
+   ((context.method == "GET" &&
+     (context.path == "/" ||
+      context.path == "/callback" ||
+      context.path == "/dashboard/nav" ||
+      context.path == "/health" ||
+      context.path == "/signout" ||
+      context.path == "/sparkles")) ||
+    (context.method == "POST" && (context.path == "/sparkles/restore"))))
 };