feat(jans-cedarling): Support JSON logic for principal boolean operations

[rmarinn]

Is your feature request related to a problem? Please describe.

The current CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION bootstrap property is restrictive, allowing only basic AND or OR operations to combine the results of multiple principals. This limitation prevents the implementation of more complex decision-making logic or the inclusion of additional custom principals.

Describe the solution you'd like

Replace the CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION property with a new CEDARLING_PRINCIPAL_BOOLEAN_OPERATION property that accepts a JSON Logic expression. This enhancement would enable users to define more flexible and complex logic for combining principal results.

Examples

1. Current AND in JSON Logic:

{
    "and" : [
        {"==": [{"var": "Jans::Workload"}, "ALLOW"]},
        {"==": [{"var": "Jans::User"}, "ALLOW"]}
    ] 
}

2. Current OR in JSON Logic:

{
    "and" : [
        {"==": [{"var": "Jans::Workload"}, "ALLOW"]},
        {"==": [{"var": "Jans::User"}, "ALLOW"]}
    ] 
}

3. Complex Decision Tree Example: An ALLOW decision is returned only if either the Jans::Workload or Jans::User principal is allowed, and a custom principal (Another::Custom) is also allowed:

{
    "and" : [
        {"or": [
            {"==": [{"var": "Jans::Workload"}, "ALLOW"]},
            {"==": [{"var": "Jans::User"}, "ALLOW"]}
        ]},
        {"==": [{"var": "Another::Custom"}, "ALLOW"]}
    ] 
}

JSON Logic for Rust

There are multiple crates that we can try and use to parse the JSON logic:

• datalogic-rs: around 4k recent downloads
• jsonlogic-rs: around 3k recent downloads
• jsonlogic: around 1.5k recent downloads

It also seems like jsonlogic isn't really being maintained anymore.

Describe alternatives you've considered

N/A

Additional context

To explore and test JSON Logic expressions, visit: https://jsonlogic.com/play.html

Example Rule:

{
    "and" : [
        {"==": [{"var": "Jans::Workload"}, "ALLOW" ] },
        {"==": [{"var": "Jans::User"}, "ALLOW" ] }
    ] 
}

Example data:

{
    "Jans::User" : "ALLOW",
    "Jans::Workload" : "ALLOW"
}