authorization

Documentation

Index

• Constants
• Variables
• type AccessDecisionManager
• type AccessDecisionVoter
• type AffirmativeBasedADM
  • func NewAffirmativeBasedADM(voters ...AccessDecisionVoter) *AffirmativeBasedADM
  • func (a AffirmativeBasedADM) Decide(authentication authen.Authentication, ...) error
  • func (a AffirmativeBasedADM) Supports(authority authority.GrantedAuthority) bool
• type RoleVoterADV
  • func NewRoleVoterADV() *RoleVoterADV
  • func (r RoleVoterADV) Supports(authority authority.GrantedAuthority) bool
  • func (r RoleVoterADV) Vote(auth authen.Authentication, restrictedAuthorities []authority.GrantedAuthority) VotingResult
• type VotingResult

Constants

const RolePrefix = "ROLE_"

Variables

var (
	AccessDenied = exception.New(http.StatusForbidden, "Access is denied")
)

Types

type AccessDecisionManager

type AccessDecisionManager interface {

	// Supports Indicates whether this AccessDecisionManager is able
	// to process authorization requests presented with the passed authorization.GrantedAuthority
	Supports(authority authority.GrantedAuthority) bool

	// Decide Resolves an access control decision for the passed parameters.
	Decide(authentication authen.Authentication, restrictedAuthorities []authority.GrantedAuthority) error
}

type AccessDecisionVoter

type AccessDecisionVoter interface {

	// Supports Indicates whether this AccessDecisionVoter
	// is able to vote on the passed GrantedAuthority
	Supports(authority authority.GrantedAuthority) bool

	// Vote Indicates whether access is granted or not.
	// The decision must be affirmative VotingGranted, negative VotingDenied
	// or the AccessDecisionVoter can abstain VotingAbstain from voting.
	Vote(authentication authen.Authentication, restrictedAuthorities []authority.GrantedAuthority) VotingResult
}

AccessDecisionVoter Indicates a class is responsible for voting on authorization decisions. The coordination of voting is performed by an AccessDecisionManager

type AffirmativeBasedADM

type AffirmativeBasedADM struct {
	// contains filtered or unexported fields
}

func NewAffirmativeBasedADM

func NewAffirmativeBasedADM(voters ...AccessDecisionVoter) *AffirmativeBasedADM

func (AffirmativeBasedADM) Decide

func (a AffirmativeBasedADM) Decide(authentication authen.Authentication, restrictedAuthorities []authority.GrantedAuthority) error

func (AffirmativeBasedADM) Supports

func (a AffirmativeBasedADM) Supports(authority authority.GrantedAuthority) bool

type RoleVoterADV

type RoleVoterADV struct {
}

func NewRoleVoterADV

func NewRoleVoterADV() *RoleVoterADV

func (RoleVoterADV) Supports

func (r RoleVoterADV) Supports(authority authority.GrantedAuthority) bool

func (RoleVoterADV) Vote

func (r RoleVoterADV) Vote(auth authen.Authentication, restrictedAuthorities []authority.GrantedAuthority) VotingResult

type VotingResult

type VotingResult int

const (
	VotingGranted VotingResult = 1
	VotingAbstain VotingResult = 0
	VotingDenied  VotingResult = -1
)