प्रमाणीकरण और प्राधिकरण

-module(auth_service).
-behaviour(gen_server).

-export([start_link/0, login/2]).
-export([init/1, handle_call/3, handle_cast/2, handle_info/2,
             terminate/2, code_change/3]).

% Client API
start_link() ->
    gen_server:start_link({local, ?MODULE}, ?MODULE, [], []).

login(Username, Password) ->
    gen_server:call(?MODULE, {login, Username, Password}).

% GenServer Callbacks
init([]) ->
    % Store a simple user/pass for demonstration
    Users = #{<<"user">> => <<"pass">>},
    {ok, Users}.

handle_call({login, Username, Password}, _From, State) ->
    case maps:get(Username, State, undefined) of
        Password ->
            {reply, {ok, <<"authenticated">>}, State};
        _ ->
            {reply, {error, <<"invalid_credentials">>}, State}
    end;
handle_call(_Request, _From, State) ->
    {reply, {error, unknown_request}, State}.

handle_cast(_Msg, State) ->
    {noreply, State}.

handle_info(_Info, State) ->
    {noreply, State}.

terminate(_Reason, _State) ->
    ok.

code_change(_OldVsn, State, _Extra) ->
    {ok, State}.

-module(auth_service).
-behaviour(gen_server).

-export([start_link/0, login/2, check_permission/2]).
-export([init/1, handle_call/3, handle_cast/2, handle_info/2,
             terminate/2, code_change/3]).

% Client API
start_link() ->
    gen_server:start_link({local, ?MODULE}, ?MODULE, [], []).

login(Username, Password) ->
    gen_server:call(?MODULE, {login, Username, Password}).

check_permission(Username, Permission) ->
    gen_server:call(?MODULE, {check_permission, Username, Permission}).

% GenServer Callbacks
init([]) ->
    Users = #{
        <<"user">> => #{
            password => <<"pass">>,
            roles => [<<"viewer">>, <<"editor">>]
        },
        <<"admin">> => #{
            password => <<"admin_pass">>,
            roles => [<<"admin">>, <<"viewer">>]
        }
    },
    Roles = #{
        <<"viewer">> => [<<"read_data">>],
        <<"editor">> => [<<"read_data">>, <<"write_data">>],
        <<"admin">> => [<<"read_data">>, <<"write_data">>, <<"delete_data">>]
    },
    {ok, #{users => Users, roles => Roles}}.

handle_call({login, Username, Password}, _From, State) ->
    Users = maps:get(users, State),
    case maps:get(Username, Users, undefined) of
        #{password := Password} ->
            {reply, {ok, <<"authenticated">>}, State};
        _ ->
            {reply, {error, <<"invalid_credentials">>}, State}
    end;

handle_call({check_permission, Username, Permission}, _From, State) ->
    Users = maps:get(users, State),
    Roles = maps:get(roles, State),
    case maps:get(Username, Users, undefined) of
        #{roles := UserRoles} ->
            HasPermission = lists:any(
                fun(Role) ->
                    case maps:get(Role, Roles, []) of
                        RolePermissions when is_list(RolePermissions) ->
                            lists:member(Permission, RolePermissions);
                        _ -> false
                    end
                end,
                UserRoles
            ),
            {reply, HasPermission, State};
        _ ->
            {reply, false, State} % User not found or not authenticated
    end;

handle_call(_Request, _From, State) ->
    {reply, {error, unknown_request}, State}.

handle_cast(_Msg, State) ->
    {noreply, State}.

handle_info(_Info, State) ->
    {noreply, State}.

terminate(_Reason, _State) ->
    ok.

code_change(_OldVsn, State, _Extra) ->
    {ok, State}.