auth

Documentation

Index

• type AuthRequest
• type Authorizer
• type DashboardAuthorizer
  • func NewDashboardAuthorizer(url string, ca []byte) *DashboardAuthorizer
  • func (a *DashboardAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)
• type LdapAuthorizer
  • func (a *LdapAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)
• type MockAuthorizer
  • func NewMockAuthorizer(userPassMap map[string]string) *MockAuthorizer
  • func (a *MockAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)
• type PasswordSecretAuthorizer
  • func NewPasswordSecretAuthorizer(c client.Client) *PasswordSecretAuthorizer
  • func (a *PasswordSecretAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)

Types

type AuthRequest

type AuthRequest interface {
	GetPassword() string
	GetUserName() string
}

type Authorizer

type Authorizer interface {
	Authorize(ctx context.Context, msg AuthRequest) (bool, error)
}

type DashboardAuthorizer

type DashboardAuthorizer struct {
	URL    string
	Client *http.Client
}

DashboardAuthorizer authorize with cosmo-dashboard login API

func NewDashboardAuthorizer

func NewDashboardAuthorizer(url string, ca []byte) *DashboardAuthorizer

func (*DashboardAuthorizer) Authorize

func (a *DashboardAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)

type LdapAuthorizer

type LdapAuthorizer struct {
	// for connection
	URL                string // URI to your LDAP server/Domain Controller. ldap[s]://host_or_ip[:port]
	StartTLS           bool   // Enables StartTLS functionality
	TlsConfig          *tls.Config
	BindDN             string // [for Bind mode] ex: uid=%s,ou=users,dc=example,dc=com. "%s" is replaced by the user name.
	SearchBindDN       string // [for Search mode] The domain name to bind. ex: cn=admin,dc=example,dc=com
	SearchBindPassword string // [for Search mode] The password to bind.
	SearchBaseDN       string // [for Search mode] Base DN used for all LDAP queries. ex: dc=example,dc=com
	SearchFilter       string // [for Search mode] ex: "(sAMAccountname=%s)"  "%s" is replaced by the user name.
}

LdapAuthorizer authorize with cosmo user's password secret

func (*LdapAuthorizer) Authorize

func (a *LdapAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)

type MockAuthorizer

type MockAuthorizer struct {
	UserPassMap map[string]string // key: user, value: password
}

func NewMockAuthorizer

func NewMockAuthorizer(userPassMap map[string]string) *MockAuthorizer

func (*MockAuthorizer) Authorize

func (a *MockAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)

type PasswordSecretAuthorizer

type PasswordSecretAuthorizer struct {
	client.Client
}

PasswordSecretAuthorizer authorize with cosmo user's password secret

func NewPasswordSecretAuthorizer

func NewPasswordSecretAuthorizer(c client.Client) *PasswordSecretAuthorizer

func (*PasswordSecretAuthorizer) Authorize

func (a *PasswordSecretAuthorizer) Authorize(ctx context.Context, msg AuthRequest) (bool, error)