builtin parity with OPA

srenatus commented 4 years ago

[x] abs
[x] all
[x] and
[x] any
[x] array.concat
[x] array.slice
[ ] assign
[x] base64.decode
[x] base64.encode
[ ] base64.is_valid
[x] base64url.decode
[x] base64url.encode
[x] bits.and
[x] bits.lsh
[x] bits.negate
[x] bits.or
[x] bits.rsh
[x] bits.xor
[ ] cast_array
[ ] cast_boolean
[ ] cast_null
[ ] cast_object
[ ] cast_set
[ ] cast_string
[x] concat
[x] contains
[x] count
[ ] crypto.md5
[ ] crypto.sha1
[ ] crypto.sha256
[ ] crypto.x509.parse_certificate_request
[ ] crypto.x509.parse_certificates
[x] div
[x] endswith
[ ] eq
[ ] equal
[x] format_int
[ ] glob.match
[ ] glob.quote_meta
[x] graph.reachable
[x] gt
[x] gte
[ ] http.send
[x] indexof
[x] intersection
[x] io.jwt.decode
[x] io.jwt.decode_verify
[x] io.jwt.encode_sign
[ ] io.jwt.encode_sign_raw
[ ] io.jwt.verify_es256
[ ] io.jwt.verify_es384
[ ] io.jwt.verify_es512
[ ] io.jwt.verify_hs256
[ ] io.jwt.verify_hs384
[ ] io.jwt.verify_hs512
[ ] io.jwt.verify_ps256
[ ] io.jwt.verify_ps384
[ ] io.jwt.verify_ps512
[ ] io.jwt.verify_rs256
[ ] io.jwt.verify_rs384
[ ] io.jwt.verify_rs512
[x] is_array
[x] is_boolean
[ ] is_null
[x] is_number
[x] is_object
[x] is_set
[x] is_string
[ ] json.filter
[x] json.marshal
[ ] json.remove
[x] json.unmarshal
[x] lower
[x] lt
[x] lte
[x] max
[x] min
[x] minus
[x] mul
[x] neq
[ ] net.cidr_contains
[ ] net.cidr_contains_matches
[ ] net.cidr_expand
[ ] net.cidr_intersects
[ ] net.cidr_merge
[ ] net.cidr_overlap
[x] numbers.range
[x] object.filter
[x] object.get
[x] object.remove
[ ] object.union
[ ] opa.runtime
[x] or
[x] plus
[x] product
[x] re_match
[ ] regex.find_all_string_submatch_n
[ ] regex.find_n
[ ] regex.globs_match
[x] regex.is_valid
[x] regex.match
[x] regex.split
[ ] regex.template_match
[ ] rego.parse_module
[x] rem
[x] replace
[ ] round
[ ] semver.compare
[ ] semver.is_valid
[ ] set_diff
[x] sort
[x] split
[x] sprintf
[x] startswith
[ ] strings.replace_n
[x] substring
[x] sum
[ ] time.add_date
[ ] time.clock
[x] time.date
[x] time.now_ns
[ ] time.parse_duration_ns
[ ] time.parse_ns
[x] time.parse_rfc3339_ns
[ ] time.weekday
[x] to_number
[x] trace
[x] trim
[x] trim_left
[x] trim_prefix
[x] trim_right
[x] trim_space
[x] trim_suffix
[x] type_name
[x] union
[ ] units.parse_bytes
[x] upper
[ ] urlquery.decode
[ ] urlquery.decode_object
[ ] urlquery.encode
[ ] urlquery.encode_object
[ ] uuid.rfc4122
[x] walk
[x] yaml.marshal
[x] yaml.unmarshal

Made using this command:

jq -rn --argjson fregot "$(cat extra/capabilities-master.json)" --argjson opa "$(cat v0.24.0.json)" '$opa.builtins[].name | if . | IN($fregot.builtins[].name) then "- [x] \(.)" else "- [ ] \(.)" end'

using the capabilities file of OPA v0.24.0.

srenatus commented 4 years ago

Guess my awk'ing was a bit flawed here. There's an object.union in OPA but not in this list...

srenatus commented 4 years ago

OPA has a capabilities JSON doc now that could be used instead. I believe it would also be nice if fregot exported one of those.

👉 https://github.com/open-policy-agent/opa/pull/2571

srenatus commented 4 years ago

✔️ Updated the issue, using the capabilities doc.

jaspervdj-luminal commented 4 years ago

The capabilities doc is really neat. I think we should be able to support that. One annoyance is that there's issues serializing the types of builtins in fregot because they can be small programs -- see e.g. https://github.com/fugue/fregot/commit/eebc2dfd3691d9ef9ae5438e44cd1c44841e105b where I was experimenting with that.

Getting something out where we either drop the types or we just have any there should not be very hard though.

jaspervdj-luminal commented 3 years ago

@srenatus fregot now also exports a capabilities document: https://github.com/fugue/fregot/blob/master/extra/capabilities-v0.12.3.json.

My previous comment was wrong: due to the refactoring in #250 fregot can now also export the same type description format as OPA.

srenatus commented 3 years ago

@jaspervdj-luminal that's cool, it made it so much easier to check supported builtins across the implementations. Updated the issue above. 🎉

gusfcarvalho commented 1 year ago

Hey all! Are there any plans to include crypto.x509 in fregot?

fugue / fregot

builtin parity with OPA #224