auth

Jul 19, 2024

Changes in this version

+ const AnonymousAuthServiceName

+ const BasicAuthServiceName

+ const KubernetesAuthServiceName

+ const OidcAuthServiceName

+ func CreateGrpcMiddlewareAuthFunction(authService AuthService) func(ctx context.Context) (context.Context, error)

+ func CreateHttpMiddlewareAuthFunction(authService AuthService) func(w http.ResponseWriter, r *http.Request) (context.Context, error)

+ type MultiAuthService struct

+ func NewMultiAuthService(authServices []AuthService) *MultiAuthService

+ func (multi *MultiAuthService) Authenticate(ctx context.Context, authHeader string) (Principal, error)

type Principal

+ GetAuthMethod func() string

type StaticPrincipal

+ func (p *StaticPrincipal) GetAuthMethod() string

May 19, 2024

Changes in this version

+ const EveryoneGroup

+ func CreateMiddlewareAuthFunction(authServices []AuthService) grpc_auth.AuthFunc

+ func WithPrincipal(ctx context.Context, principal Principal) context.Context

+ type ActionAuthorizer interface

+ AuthorizeAction func(ctx *armadacontext.Context, perm permission.Permission) error

+ AuthorizeQueueAction func(ctx *armadacontext.Context, queue queue.Queue, anyPerm permission.Permission, ...) error

+ type AnonymousAuthService struct

+ func (AnonymousAuthService) Authenticate(ctx context.Context) (Principal, error)

+ func (authService *AnonymousAuthService) Name() string

+ type AuthService interface

+ Authenticate func(ctx context.Context) (Principal, error)

+ Name func() string

+ type Authorizer struct

+ func NewAuthorizer(permissionChecker PermissionChecker) *Authorizer

+ func (b *Authorizer) AuthorizeAction(ctx *armadacontext.Context, perm permission.Permission) error

+ func (b *Authorizer) AuthorizeQueueAction(ctx *armadacontext.Context, queue queue.Queue, anyPerm permission.Permission, ...) error

+ type BasicAuthService struct

+ func NewBasicAuthService(users map[string]configuration.UserInfo) *BasicAuthService

+ func (authService *BasicAuthService) Authenticate(ctx context.Context) (Principal, error)

+ func (authService *BasicAuthService) Name() string

+ type CacheData struct

+ Name string

+ Valid bool

+ type KubernetesNativeAuthService struct

+ Clock clock.Clock

+ InvalidTokenExpiry int64

+ KidMappingFileLocation string

+ TokenCache *cache.Cache

+ TokenReviewer TokenReviewer

+ func NewKubernetesNativeAuthService(config configuration.KubernetesAuthConfig) KubernetesNativeAuthService

+ func (authService *KubernetesNativeAuthService) Authenticate(ctx context.Context) (Principal, error)

+ func (authService *KubernetesNativeAuthService) Name() string

+ type KubernetesTokenReviewer struct

+ func (reviewer *KubernetesTokenReviewer) ReviewToken(ctx context.Context, clusterUrl string, token string, ca []byte) (*authv1.TokenReview, error)

+ type OpenIdAuthService struct

+ func NewOpenIdAuthService(verifier *oidc.IDTokenVerifier, groupsClaim string) *OpenIdAuthService

+ func NewOpenIdAuthServiceForProvider(ctx context.Context, config *configuration.OpenIdAuthenticationConfig) (*OpenIdAuthService, error)

+ func (authService *OpenIdAuthService) Authenticate(ctx context.Context) (Principal, error)

+ func (authService *OpenIdAuthService) Name() string

+ type Owned interface

+ GetGroupOwners func() []string

+ GetUserOwners func() []string

+ type PermissionChecker interface

+ UserHasPermission func(ctx context.Context, perm permission.Permission) bool

+ UserOwns func(ctx context.Context, obj Owned) (owned bool, ownershipGroups []string)

+ type PermissionClaimQueries map[permission.Permission]string

+ type Principal interface

+ GetGroupNames func() []string

+ GetName func() string

+ HasClaim func(claim string) bool

+ HasScope func(scope string) bool

+ IsInGroup func(group string) bool

+ func GetPrincipal(ctx context.Context) Principal

+ type PrincipalPermissionChecker struct

+ func NewPrincipalPermissionChecker(permissionGroupMap map[permission.Permission][]string, ...) *PrincipalPermissionChecker

+ func (checker *PrincipalPermissionChecker) UserHasPermission(ctx context.Context, perm permission.Permission) bool

+ func (checker *PrincipalPermissionChecker) UserOwns(ctx context.Context, obj Owned) (owned bool, ownershipGroups []string)

+ type StaticPrincipal struct

+ func NewStaticPrincipal(name string, groups []string) *StaticPrincipal

+ func NewStaticPrincipalWithScopesAndClaims(name string, groups []string, scopes []string, claims []string) *StaticPrincipal

+ func (p *StaticPrincipal) GetGroupNames() []string

+ func (p *StaticPrincipal) GetName() string

+ func (p *StaticPrincipal) HasClaim(claim string) bool

+ func (p *StaticPrincipal) HasScope(scope string) bool

+ func (p *StaticPrincipal) IsInGroup(group string) bool

+ type TokenReviewer interface

+ ReviewToken func(ctx context.Context, clusterUrl string, token string, ca []byte) (*authv1.TokenReview, error)

Jan 23, 2023

Changes in this version

+ func ConfigureAuth(config configuration.AuthConfig) []authorization.AuthService