const Casbin = require('casbin');
const { CasbinDynamoDBAdapter } = require('casbin-dynamodb-adapter');

(async () => {
  try {
    // Create adapter with configuration
    const adapter = await CasbinDynamoDBAdapter.newAdapter({
      region: 'us-east-1',
      tableName: 'casbin-rules'
      // Uses default: hashKey: 'id' (MD5 hash primary key)
      // AWS SDK uses IAM roles automatically (ECS, EC2, Lambda)
      // Credentials only needed for LocalStack:
      // endpoint: 'http://localhost:4566',
      // credentials: { accessKeyId: 'test', secretAccessKey: 'test' }
    });

    const enforcer = await Casbin.newEnforcer('model.conf', adapter);

    // Load policies from the database
    await enforcer.loadPolicy();

    // Add a policy
    await enforcer.addPolicy('alice', 'data1', 'read');

    // Check permissions
    const isMatched = enforcer.enforce('alice', 'data1', 'read');
    console.log(isMatched);

    await enforcer.removePolicy('alice', 'data1', 'read');

    // Save policies back to the database
    await enforcer.savePolicy();
  } catch (e) {
    console.error(e);
  }
})();

const Casbin = require('casbin');
const { CasbinDynamoDBAdapter } = require('casbin-dynamodb-adapter');
const AWS = require('aws-sdk');

const client = new AWS.DynamoDB.DocumentClient();

(async () => {
  try {
    const opts = {
      tableName: 'casbin-rules',
      hashKey: 'id'
    };
    const enforcer = await Casbin.newEnforcer('model.conf', new CasbinDynamoDBAdapter(client, opts));

    // Load policies from the database
    await enforcer.loadPolicy();

    // Add a policy
    await enforcer.addPolicy('alice', 'data1', 'read');

    // Check permissions
    const isMatched = enforcer.enforce('alice', 'data1', 'read');
    console.log(isMatched);

    await enforcer.removePolicy('alice', 'data1', 'read');

    // Save policies back to the database
    await enforcer.savePolicy();
  } catch (e) {
    console.error(e);
  }
})();