auth

Documentation

Index

• Constants
• func CSRFValidationHandler(handler http.Handler, rejector Rejector) http.Handler
• func CheckAdminHandler(handler http.Handler, rejector Rejector) http.Handler
• func CheckAuthenticationHandler(handler http.Handler, rejector Rejector) http.Handler
• func CheckAuthorizationHandler(handler http.Handler, rejector Rejector) http.Handler
• func IsCSRFRequired(r *http.Request) bool
• func NewCheckBuildReadAccessHandlerFactory(buildFactory db.BuildFactory) *checkBuildReadAccessHandlerFactory
• func NewCheckBuildWriteAccessHandlerFactory(buildFactory db.BuildFactory) *checkBuildWriteAccessHandlerFactory
• func NewCheckPipelineAccessHandlerFactory(teamFactory db.TeamFactory) *checkPipelineAccessHandlerFactory
• type CheckBuildReadAccessHandlerFactory
• type CheckBuildWriteAccessHandlerFactory
• type CheckPipelineAccessHandlerFactory
• type CheckWorkerTeamAccessHandlerFactory
  • func NewCheckWorkerTeamAccessHandlerFactory(workerFactory db.WorkerFactory) CheckWorkerTeamAccessHandlerFactory
• type CookieSetHandler
  • func (handler CookieSetHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)
• type Rejector
• type UnauthorizedRejector
  • func (UnauthorizedRejector) Forbidden(w http.ResponseWriter, r *http.Request)
  • func (UnauthorizedRejector) Unauthorized(w http.ResponseWriter, r *http.Request)

Constants

const AuthCookieName = "ATC-Authorization"

const BuildContextKey = "build"

const CSRFHeaderName = "X-Csrf-Token"

const CSRFRequiredKey = "CSRFRequired"

const PipelineContextKey = "pipeline"

const TokenTypeBearer = "Bearer"

Functions

func CSRFValidationHandler

func CSRFValidationHandler(
	handler http.Handler,
	rejector Rejector,
) http.Handler

func CheckAdminHandler

func CheckAdminHandler(
	handler http.Handler,
	rejector Rejector,
) http.Handler

func CheckAuthenticationHandler

func CheckAuthenticationHandler(
	handler http.Handler,
	rejector Rejector,
) http.Handler

func CheckAuthorizationHandler

func CheckAuthorizationHandler(
	handler http.Handler,
	rejector Rejector,
) http.Handler

func IsCSRFRequired

func IsCSRFRequired(r *http.Request) bool

func NewCheckBuildReadAccessHandlerFactory

func NewCheckBuildReadAccessHandlerFactory(
	buildFactory db.BuildFactory,
) *checkBuildReadAccessHandlerFactory

func NewCheckBuildWriteAccessHandlerFactory

func NewCheckBuildWriteAccessHandlerFactory(
	buildFactory db.BuildFactory,
) *checkBuildWriteAccessHandlerFactory

func NewCheckPipelineAccessHandlerFactory

func NewCheckPipelineAccessHandlerFactory(
	teamFactory db.TeamFactory,
) *checkPipelineAccessHandlerFactory

Types

type CheckBuildReadAccessHandlerFactory

type CheckBuildReadAccessHandlerFactory interface {
	AnyJobHandler(delegateHandler http.Handler, rejector Rejector) http.Handler
	CheckIfPrivateJobHandler(delegateHandler http.Handler, rejector Rejector) http.Handler
}

type CheckBuildWriteAccessHandlerFactory

type CheckBuildWriteAccessHandlerFactory interface {
	HandlerFor(delegateHandler http.Handler, rejector Rejector) http.Handler
}

type CheckPipelineAccessHandlerFactory

type CheckPipelineAccessHandlerFactory interface {
	HandlerFor(pipelineScopedHandler http.Handler, rejector Rejector) http.Handler
}

type CheckWorkerTeamAccessHandlerFactory

type CheckWorkerTeamAccessHandlerFactory interface {
	HandlerFor(pipelineScopedHandler http.Handler, rejector Rejector) http.Handler
}

func NewCheckWorkerTeamAccessHandlerFactory

func NewCheckWorkerTeamAccessHandlerFactory(
	workerFactory db.WorkerFactory,
) CheckWorkerTeamAccessHandlerFactory

type CookieSetHandler

type CookieSetHandler struct {
	Handler http.Handler
}

func (CookieSetHandler) ServeHTTP

func (handler CookieSetHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type Rejector

type Rejector interface {
	Unauthorized(http.ResponseWriter, *http.Request)
	Forbidden(http.ResponseWriter, *http.Request)
}

type UnauthorizedRejector

type UnauthorizedRejector struct{}

func (UnauthorizedRejector) Forbidden

func (UnauthorizedRejector) Forbidden(w http.ResponseWriter, r *http.Request)

func (UnauthorizedRejector) Unauthorized

func (UnauthorizedRejector) Unauthorized(w http.ResponseWriter, r *http.Request)