authorizer

Documentation

Index

• Constants
• func IsPersonalAccessReviewFromSAR(sar *authorizationapi.SubjectAccessReview) bool
• func NewAuthorizer(delegate kauthorizer.Authorizer, forbiddenMessageMaker ForbiddenMessageMaker) authorizer.Authorizer
• type AuthorizationAttributeBuilder
  • func NewAuthorizationAttributeBuilder(contextMapper apirequest.RequestContextMapper, infoFactory RequestInfoFactory) AuthorizationAttributeBuilder
• type ForbiddenMessageMaker
• type ForbiddenMessageResolver
  • func NewForbiddenMessageResolver(projectRequestForbiddenTemplate string) *ForbiddenMessageResolver
  • func (m *ForbiddenMessageResolver) MakeMessage(attrs authorizer.Attributes) (string, error)
• type RequestInfoFactory
  • func NewBrowserSafeRequestInfoResolver(contextMapper apirequest.RequestContextMapper, authenticatedGroups sets.String, ...) RequestInfoFactory
  • func NewPersonalSARRequestInfoResolver(infoFactory RequestInfoFactory) RequestInfoFactory
  • func NewProjectRequestInfoResolver(infoFactory RequestInfoFactory) RequestInfoFactory
• type SubjectLocator
  • func NewSubjectLocator(delegate authorizerrbac.SubjectLocator) SubjectLocator

Constants

const DefaultProjectRequestForbidden = "You may not request a new project via this API."

Functions

func IsPersonalAccessReviewFromSAR

func IsPersonalAccessReviewFromSAR(sar *authorizationapi.SubjectAccessReview) bool

IsPersonalAccessReviewFromSAR this variant handles the case where we have an SAR

func NewAuthorizer

func NewAuthorizer(delegate kauthorizer.Authorizer, forbiddenMessageMaker ForbiddenMessageMaker) authorizer.Authorizer

Types

type AuthorizationAttributeBuilder

type AuthorizationAttributeBuilder interface {
	GetAttributes(request *http.Request) (authorizer.Attributes, error)
}

func NewAuthorizationAttributeBuilder

func NewAuthorizationAttributeBuilder(contextMapper apirequest.RequestContextMapper, infoFactory RequestInfoFactory) AuthorizationAttributeBuilder

type ForbiddenMessageMaker

type ForbiddenMessageMaker interface {
	MakeMessage(attrs authorizer.Attributes) (string, error)
}

ForbiddenMessageMaker creates a forbidden message from Attributes

type ForbiddenMessageResolver

type ForbiddenMessageResolver struct {
	// contains filtered or unexported fields
}

func NewForbiddenMessageResolver

func NewForbiddenMessageResolver(projectRequestForbiddenTemplate string) *ForbiddenMessageResolver

func (*ForbiddenMessageResolver) MakeMessage

func (m *ForbiddenMessageResolver) MakeMessage(attrs authorizer.Attributes) (string, error)

type RequestInfoFactory

type RequestInfoFactory interface {
	NewRequestInfo(req *http.Request) (*apirequest.RequestInfo, error)
}

func NewBrowserSafeRequestInfoResolver

func NewBrowserSafeRequestInfoResolver(contextMapper apirequest.RequestContextMapper, authenticatedGroups sets.String, infoFactory RequestInfoFactory) RequestInfoFactory

func NewPersonalSARRequestInfoResolver

func NewPersonalSARRequestInfoResolver(infoFactory RequestInfoFactory) RequestInfoFactory

func NewProjectRequestInfoResolver

func NewProjectRequestInfoResolver(infoFactory RequestInfoFactory) RequestInfoFactory

type SubjectLocator

type SubjectLocator interface {
	GetAllowedSubjects(attributes authorizer.Attributes) (sets.String, sets.String, error)
}

func NewSubjectLocator

func NewSubjectLocator(delegate authorizerrbac.SubjectLocator) SubjectLocator