authz

Documentation

Index

• type Authz
  • func New(log log.Logger, next http.Handler, userIDHeaderKey string, ...) *Authz
  • func (c Authz) Info() *middleware.MiddlewareInfo
  • func (c *Authz) ServeHTTP(rw http.ResponseWriter, req *http.Request)
• type Config
• type GroupService
• type Permission
• type ResourceService
• type UserService

Types

type Authz

type Authz struct {
	// contains filtered or unexported fields
}

func New

func New(
	log log.Logger,
	next http.Handler,
	userIDHeaderKey string,
	resourceService ResourceService,
	userService UserService,
	groupService GroupService) *Authz

func (Authz) Info

func (c Authz) Info() *middleware.MiddlewareInfo

func (*Authz) ServeHTTP

func (c *Authz) ServeHTTP(rw http.ResponseWriter, req *http.Request)

type Config

type Config struct {
	Actions     []string                        `yaml:"actions" mapstructure:"actions"`
	Permissions []Permission                    `yaml:"permissions" mapstructure:"permissions"`
	Attributes  map[string]middleware.Attribute `yaml:"attributes" mapstructure:"attributes"`
}

type GroupService

type GroupService interface {
	GetBySlug(ctx context.Context, slug string) (group.Group, error)
}

type Permission

type Permission struct {
	Name       string                `yaml:"name" mapstructure:"name"`
	Namespace  string                `yaml:"namespace" mapstructure:"namespace"`
	Attribute  string                `yaml:"attribute" mapstructure:"attribute"`
	Expression expression.Expression `yaml:"expression" mapstructure:"expression"`
}

type ResourceService

type ResourceService interface {
	CheckAuthz(ctx context.Context, resource resource.Resource, act action.Action) (bool, error)
}

type UserService

type UserService interface {
	FetchCurrentUser(ctx context.Context) (user.User, error)
}