coderd

Documentation

Index

• Constants
• Variables
• func NewEnforcer(userWorkspaceLimit int) workspacequota.Enforcer
• type API
  • func New(ctx context.Context, options *Options) (*API, error)
  • func (api *API) Authorize(r *http.Request, action rbac.Action, object rbac.Objecter) bool
  • func (api *API) Close() error
• type Options
• type SCIMUser

Constants

const (
	PubsubEventLicenses = "licenses"
)

Variables

var Keys = map[string]ed25519.PublicKey{"2022-08-12": ed25519.PublicKey(key20220812)}

Functions

func NewEnforcer

func NewEnforcer(userWorkspaceLimit int) workspacequota.Enforcer

Types

type API

type API struct {
	AGPL *coderd.API
	*Options
	// contains filtered or unexported fields
}

func New

func New(ctx context.Context, options *Options) (*API, error)

New constructs an Enterprise coderd API instance. This handler is designed to wrap the AGPL Coder code and layer Enterprise functionality on top as much as possible.

func (*API) Authorize

func (api *API) Authorize(r *http.Request, action rbac.Action, object rbac.Objecter) bool

func (*API) Close

func (api *API) Close() error

type Options

type Options struct {
	*coderd.Options

	RBACEnabled  bool
	AuditLogging bool
	// Whether to block non-browser connections.
	BrowserOnly        bool
	SCIMAPIKey         []byte
	UserWorkspaceQuota int

	EntitlementsUpdateInterval time.Duration
	Keys                       map[string]ed25519.PublicKey
}

type SCIMUser

type SCIMUser struct {
	Schemas  []string `json:"schemas"`
	ID       string   `json:"id"`
	UserName string   `json:"userName"`
	Name     struct {
		GivenName  string `json:"givenName"`
		FamilyName string `json:"familyName"`
	} `json:"name"`
	Emails []struct {
		Primary bool   `json:"primary"`
		Value   string `json:"value"`
		Type    string `json:"type"`
		Display string `json:"display"`
	} `json:"emails"`
	Active bool          `json:"active"`
	Groups []interface{} `json:"groups"`
	Meta   struct {
		ResourceType string `json:"resourceType"`
	} `json:"meta"`
}

We currently use our own struct instead of using the SCIM package. This was done mostly because the SCIM package was almost impossible to use. We only need these fields, so it was much simpler to use our own struct. This was tested only with Okta.