authz

Documentation

Index

• func NewAuthorizer(e *plcsvr.Enforcer) websvr.FilterFunc
• type BasicAuthorizer
  • func (a *BasicAuthorizer) CheckPermission(r *http.Request) (bool, error)
  • func (a *BasicAuthorizer) GetUserName(r *http.Request) string
  • func (a *BasicAuthorizer) RequirePermission(w http.ResponseWriter)

Functions

func NewAuthorizer

func NewAuthorizer(e *plcsvr.Enforcer) websvr.FilterFunc

NewAuthorizer returns the authorizer. Use a Bhojpur Policy enforcer as input

Types

type BasicAuthorizer

type BasicAuthorizer struct {
	// contains filtered or unexported fields
}

BasicAuthorizer stores the Bhojpur Policy handler

func (*BasicAuthorizer) CheckPermission

func (a *BasicAuthorizer) CheckPermission(r *http.Request) (bool, error)

CheckPermission checks the user/method/path combination from the request. Returns true (permission granted) or false (permission forbidden)

func (*BasicAuthorizer) GetUserName

func (a *BasicAuthorizer) GetUserName(r *http.Request) string

GetUserName gets the user name from the request. Currently, only HTTP basic authentication is supported

func (*BasicAuthorizer) RequirePermission

func (a *BasicAuthorizer) RequirePermission(w http.ResponseWriter)

RequirePermission returns the 403 Forbidden to the client