authorization

Documentation

Index

• Variables
• type ActionResourcePolicy
  • func (p ActionResourcePolicy) Authorize(ctx context.Context, userID string, authorizer AuthorizerClient, ...) error
• type AuthorizerClient
• type Middleware
  • func New(opts ...Option) *Middleware
  • func (m *Middleware) Middleware() func(http.Handler) http.Handler
  • func (m *Middleware) SetPolicy(route *mux.Route, policy Policy) *Middleware
• type MultiPolicy
  • func (policies MultiPolicy) Authorize(ctx context.Context, userID string, authorizer AuthorizerClient, ...) error
• type Option
  • func WithAuthorizerClient(client AuthorizerClient) Option
• type Policy
• type ResourceExtractor

Variables

var (
	ErrNoAuthenticationMiddleware = errors.New("unable to extract user id from context, missing authentication middleware?")
)

Types

type ActionResourcePolicy

type ActionResourcePolicy struct {
	Action            string
	ResourceExtractor ResourceExtractor
}

func (ActionResourcePolicy) Authorize

func (p ActionResourcePolicy) Authorize(ctx context.Context, userID string, authorizer AuthorizerClient, r *http.Request) error

type AuthorizerClient

type AuthorizerClient interface {
	IsAuthorizedWithReasonWithContext(ctx context.Context, userID, action string, resource *proto.Origin) (bool, string, error)
}

type Middleware

type Middleware struct {
	Tracer middleware.Tracer
	// contains filtered or unexported fields
}

func New

func New(opts ...Option) *Middleware

func (*Middleware) Middleware

func (m *Middleware) Middleware() func(http.Handler) http.Handler

func (*Middleware) SetPolicy

func (m *Middleware) SetPolicy(route *mux.Route, policy Policy) *Middleware

type MultiPolicy

type MultiPolicy []Policy

func (MultiPolicy) Authorize

func (policies MultiPolicy) Authorize(ctx context.Context, userID string, authorizer AuthorizerClient, r *http.Request) error

type Option

type Option func(*Middleware)

func WithAuthorizerClient

func WithAuthorizerClient(client AuthorizerClient) Option

type Policy

type Policy interface {
	Authorize(ctx context.Context, userID string, authorizer AuthorizerClient, r *http.Request) error
}

type ResourceExtractor

type ResourceExtractor func(ctx context.Context, r *http.Request) (*proto.Origin, error)