authorization

Documentation

Index

• Variables
• type Authorizer
  • func NewAuthorizer(client AuthzClientInterface, tracer tracing.TracingInterface, ...) *Authorizer
  • func (a *Authorizer) Check(ctx context.Context, user string, relation string, object string) (bool, error)
  • func (a *Authorizer) FilterObjects(ctx context.Context, user string, relation string, objectType string, ...) ([]string, error)
  • func (a *Authorizer) ListObjects(ctx context.Context, user string, relation string, objectType string) ([]string, error)
  • func (a *Authorizer) ValidateModel(ctx context.Context) error
• type AuthorizerInterface
• type AuthzClientInterface

Variables

var AuthModel = `` /* 710-byte string literal not displayed */

var ErrInvalidAuthModel = fmt.Errorf("Invalid authorization model schema")

Types

type Authorizer

type Authorizer struct {
	Client AuthzClientInterface
	// contains filtered or unexported fields
}

func NewAuthorizer

func NewAuthorizer(client AuthzClientInterface, tracer tracing.TracingInterface, monitor monitoring.MonitorInterface, logger logging.LoggerInterface) *Authorizer

func (*Authorizer) Check

func (a *Authorizer) Check(ctx context.Context, user string, relation string, object string) (bool, error)

func (*Authorizer) FilterObjects

func (a *Authorizer) FilterObjects(ctx context.Context, user string, relation string, objectType string, objs []string) ([]string, error)

func (*Authorizer) ListObjects

func (a *Authorizer) ListObjects(ctx context.Context, user string, relation string, objectType string) ([]string, error)

func (*Authorizer) ValidateModel

func (a *Authorizer) ValidateModel(ctx context.Context) error

type AuthorizerInterface

type AuthorizerInterface interface {
	ListObjects(context.Context, string, string, string) ([]string, error)
	Check(context.Context, string, string, string) (bool, error)
	FilterObjects(context.Context, string, string, string, []string) ([]string, error)
	ValidateModel(context.Context) error
}

type AuthzClientInterface

type AuthzClientInterface interface {
	ListObjects(context.Context, string, string, string) ([]string, error)
	Check(context.Context, string, string, string) (bool, error)
	ReadModel(context.Context) (*fga.AuthorizationModel, error)
	CompareModel(context.Context, fga.AuthorizationModel) (bool, error)
}