authorizer

Documentation

Index

• Variables
• func NewAuthorizeModular(app *gfspapp.GfSpBaseApp, cfg *gfspconfig.GfSpConfig) (coremodule.Modular, error)
• type AuthorizeModular
  • func (a *AuthorizeModular) Name() string
  • func (a *AuthorizeModular) ReleaseResource(ctx context.Context, span rcmgr.ResourceScopeSpan)
  • func (a *AuthorizeModular) ReserveResource(ctx context.Context, state *rcmgr.ScopeStat) (rcmgr.ResourceScopeSpan, error)
  • func (a *AuthorizeModular) Start(ctx context.Context) error
  • func (a *AuthorizeModular) Stop(ctx context.Context) error
  • func (a *AuthorizeModular) VerifyAuthorize(ctx context.Context, authType coremodule.AuthOpType, ...) (bool, error)

Variables

var (
	ErrUnsupportedAuthType = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20001, "unsupported auth op type")
	ErrMismatchSp          = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20002, "mismatched primary sp")
	ErrNotCreatedState     = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20003, "object has not been created state")
	ErrNotSealedState      = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20004, "object has not been sealed")
	ErrPaymentState        = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20005, "payment account is not active")
	ErrNoSuchAccount       = gfsperrors.Register(module.AuthorizationModularName, http.StatusNotFound, 20006, "no such account")
	ErrNoSuchBucket        = gfsperrors.Register(module.AuthorizationModularName, http.StatusNotFound, 20007, "no such bucket")
	ErrRepeatedBucket      = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20008, "repeated bucket")
	ErrRepeatedObject      = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20009, "repeated object")
	ErrNoPermission        = gfsperrors.Register(module.AuthorizationModularName, http.StatusBadRequest, 20010, "no permission")
	ErrConsensus           = gfsperrors.Register(module.AuthorizationModularName, http.StatusInternalServerError, 25002, "server slipped away, try again later")
)

Functions

func NewAuthorizeModular

func NewAuthorizeModular(app *gfspapp.GfSpBaseApp, cfg *gfspconfig.GfSpConfig) (coremodule.Modular, error)

Types

type AuthorizeModular

type AuthorizeModular struct {
	// contains filtered or unexported fields
}

func (*AuthorizeModular) Name

func (a *AuthorizeModular) Name() string

func (*AuthorizeModular) ReleaseResource

func (a *AuthorizeModular) ReleaseResource(
	ctx context.Context,
	span rcmgr.ResourceScopeSpan)

func (*AuthorizeModular) ReserveResource

func (a *AuthorizeModular) ReserveResource(
	ctx context.Context,
	state *rcmgr.ScopeStat) (
	rcmgr.ResourceScopeSpan,
	error)

func (*AuthorizeModular) Start

func (a *AuthorizeModular) Start(ctx context.Context) error

func (*AuthorizeModular) Stop

func (a *AuthorizeModular) Stop(ctx context.Context) error

func (*AuthorizeModular) VerifyAuthorize

func (a *AuthorizeModular) VerifyAuthorize(
	ctx context.Context,
	authType coremodule.AuthOpType,
	account, bucket, object string) (
	bool, error)

VerifyAuthorize verifies the account has the operation's permission. TODO:: supports permission path verification and query