rpcauth

Oct 24, 2024

Changes in this version

type PeerAuthInput

+ Unix *UnixAuthInput

+ type UnixAuthInput struct

+ Gids []int

+ GroupNames []string

+ Uid int

+ UserName string

+ func UnixInputFrom(authInfo credentials.AuthInfo) *UnixAuthInput

+ type UnixPeerAuthInfo struct

+ Credentials UnixPeerCredentials

+ func (UnixPeerAuthInfo) AuthType() string

+ type UnixPeerCredentials struct

+ Gids []int

+ GroupNames []string

+ Uid int

+ UserName string

Nov 15, 2023

Changes in this version

+ func AddPeerToContext(ctx context.Context, p *PeerAuthInput) context.Context

type RPCAuthInput

+ Approvers []*PrincipalAuthInput

+ TargetConn grpc.ClientConnInterface

Nov 3, 2023

Changes in this version

type RPCAuthzHook

+ func PeerPrincipalFromCertHook() RPCAuthzHook

Aug 2, 2022

Changes in this version

+ type EnvironmentInput struct

+ NonHostPolicyCheck bool

type RPCAuthInput

+ Environment *EnvironmentInput

Jul 18, 2022

Changes in this version

type RPCAuthInput

+ func (r RPCAuthInput) MarshalLog() interface{}

+ type RPCAuthInputForLogging struct

+ Extensions string

+ Host *HostAuthInput

+ Message string

+ MessageType string

+ Metadata metadata.MD

+ Method string

+ Peer *PeerAuthInput

Apr 12, 2022

Changes in this version

type Authorizer

+ func (g *Authorizer) AuthorizeClient(ctx context.Context, method string, req, reply interface{}, ...) error

+ func (g *Authorizer) AuthorizeClientStream(ctx context.Context, desc *grpc.StreamDesc, cc *grpc.ClientConn, method string, ...) (grpc.ClientStream, error)

type RPCAuthInput

+ Extensions json.RawMessage

Mar 4, 2022

Changes in this version

type HostAuthInput

+ Cert *CertAuthInput

Feb 16, 2022

Changes in this version

+ const ReqJustKey

+ var ErrJustification = status.Error(codes.FailedPrecondition, "missing justification")

type RPCAuthzHook

+ func JustificationHook(justificationFunc func(string) error) RPCAuthzHook

Feb 2, 2022

Changes in this version

+ type Authorizer struct

+ func New(policy *opa.AuthzPolicy, authzHooks ...RPCAuthzHook) *Authorizer

+ func NewWithPolicy(ctx context.Context, policy string, authzHooks ...RPCAuthzHook) (*Authorizer, error)

+ func (g *Authorizer) Authorize(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, ...) (interface{}, error)

+ func (g *Authorizer) AuthorizeStream(srv interface{}, ss grpc.ServerStream, info *grpc.StreamServerInfo, ...) error

+ func (g *Authorizer) Eval(ctx context.Context, input *RPCAuthInput) error

+ type CertAuthInput struct

+ DNSNames []string

+ Issuer pkix.Name

+ SPIFFEID string

+ Subject pkix.Name

+ func CertInputFrom(authInfo credentials.AuthInfo) *CertAuthInput

+ type HookPredicate func(*RPCAuthInput) bool

+ type HostAuthInput struct

+ Net *NetAuthInput

+ Principal *PrincipalAuthInput

+ type NetAuthInput struct

+ Address string

+ Network string

+ Port string

+ func NetInputFromAddr(addr net.Addr) *NetAuthInput

+ type PeerAuthInput struct

+ Cert *CertAuthInput

+ Net *NetAuthInput

+ Principal *PrincipalAuthInput

+ func PeerInputFromContext(ctx context.Context) *PeerAuthInput

+ type PrincipalAuthInput struct

+ Groups []string

+ ID string

+ type RPCAuthInput struct

+ Host *HostAuthInput

+ Message json.RawMessage

+ MessageType string

+ Metadata metadata.MD

+ Method string

+ Peer *PeerAuthInput

+ func NewRPCAuthInput(ctx context.Context, method string, req proto.Message) (*RPCAuthInput, error)

+ type RPCAuthzHook interface

+ Hook func(context.Context, *RPCAuthInput) error

+ func HookIf(hook RPCAuthzHook, condition HookPredicate) RPCAuthzHook

+ func HostNetHook(addr net.Addr) RPCAuthzHook

+ type RPCAuthzHookFunc func(context.Context, *RPCAuthInput) error

+ func (r RPCAuthzHookFunc) Hook(ctx context.Context, input *RPCAuthInput) error