access

Documentation

Index

• Variables
• func AllRequired(permissions, required []string) bool
• func CreateAPIToken(c *gin.Context, token *models.APIToken) (body string, err error)
• func CreateDestination(c *gin.Context, destination *models.Destination) error
• func CreateGrant(c *gin.Context, grant *models.Grant) error
• func CreateGroup(c *gin.Context, group *models.Group) error
• func CreateProvider(c *gin.Context, provider *models.Provider) error
• func CreateUser(c *gin.Context, user *models.User) error
• func CreateUserToken(c *gin.Context) (token *models.Token, err error)
• func CurrentUser(c *gin.Context) *models.User
• func DeleteAPIToken(c *gin.Context, id uid.ID) error
• func DeleteAllUserAPITokens(c *gin.Context) error
• func DeleteDestination(c *gin.Context, id uid.ID) error
• func DeleteGrant(c *gin.Context, id uid.ID) error
• func DeleteProvider(c *gin.Context, id uid.ID) error
• func ExchangeAuthCodeForAPIToken(c *gin.Context, code string, provider *models.Provider, oidc authn.OIDC, ...) (*models.User, string, error)
• func GetDestination(c *gin.Context, id uid.ID) (*models.Destination, error)
• func GetGrant(c *gin.Context, id uid.ID) (*models.Grant, error)
• func GetGroup(c *gin.Context, id uid.ID) (*models.Group, error)
• func GetProvider(c *gin.Context, id uid.ID) (*models.Provider, error)
• func GetUser(c *gin.Context, id uid.ID) (*models.User, error)
• func ListAPITokens(c *gin.Context) ([]models.APIToken, error)
• func ListDestinations(c *gin.Context, uniqueID, name string) ([]models.Destination, error)
• func ListGrants(c *gin.Context, identity string, resource string, privilege string) ([]models.Grant, error)
• func ListGroupGrants(c *gin.Context, groupID uid.ID) ([]models.Grant, error)
• func ListGroups(c *gin.Context, name string, providerID uid.ID) ([]models.Group, error)
• func ListProviders(c *gin.Context, name string) ([]models.Provider, error)
• func ListUserGrants(c *gin.Context, userID uid.ID) ([]models.Grant, error)
• func ListUserGroups(c *gin.Context, userID uid.ID) ([]models.Group, error)
• func ListUsers(c *gin.Context, email string, providerID uid.ID) ([]models.User, error)
• func RetrieveUserProviderTokens(c *gin.Context) (*models.ProviderToken, error)
• func SaveDestination(c *gin.Context, destination *models.Destination) error
• func SaveProvider(c *gin.Context, provider *models.Provider) error
• func UpdateProviderToken(c *gin.Context, providerToken *models.ProviderToken) error
• func UpdateUserInfo(c *gin.Context, info *authn.UserInfo, user *models.User, ...) error
• type Permission

Variables

var DefaultUserPermissions = strings.Join([]string{
	string(PermissionUserRead),
	string(PermissionGroupRead),
	string(PermissionDestinationRead),
	string(PermissionGrantRead),
}, " ")

Functions

func AllRequired

func AllRequired(permissions, required []string) bool

AllRequired checks if a a set of permissions contains all the required permissions

func CreateAPIToken

func CreateAPIToken(c *gin.Context, token *models.APIToken) (body string, err error)

func CreateDestination

func CreateDestination(c *gin.Context, destination *models.Destination) error

func CreateGrant

func CreateGrant(c *gin.Context, grant *models.Grant) error

func CreateGroup

func CreateGroup(c *gin.Context, group *models.Group) error

func CreateProvider

func CreateProvider(c *gin.Context, provider *models.Provider) error

func CreateUser

func CreateUser(c *gin.Context, user *models.User) error

func CreateUserToken

func CreateUserToken(c *gin.Context) (token *models.Token, err error)

func CurrentUser

func CurrentUser(c *gin.Context) *models.User

func DeleteAPIToken

func DeleteAPIToken(c *gin.Context, id uid.ID) error

func DeleteAllUserAPITokens

func DeleteAllUserAPITokens(c *gin.Context) error

func DeleteDestination

func DeleteDestination(c *gin.Context, id uid.ID) error

func DeleteGrant

func DeleteGrant(c *gin.Context, id uid.ID) error

func DeleteProvider

func DeleteProvider(c *gin.Context, id uid.ID) error

func ExchangeAuthCodeForAPIToken

func ExchangeAuthCodeForAPIToken(c *gin.Context, code string, provider *models.Provider, oidc authn.OIDC, sessionDuration time.Duration) (*models.User, string, error)

func GetDestination

func GetDestination(c *gin.Context, id uid.ID) (*models.Destination, error)

func GetGrant

func GetGrant(c *gin.Context, id uid.ID) (*models.Grant, error)

func GetGroup

func GetGroup(c *gin.Context, id uid.ID) (*models.Group, error)

func GetProvider

func GetProvider(c *gin.Context, id uid.ID) (*models.Provider, error)

func GetUser

func GetUser(c *gin.Context, id uid.ID) (*models.User, error)

func ListAPITokens

func ListAPITokens(c *gin.Context) ([]models.APIToken, error)

func ListDestinations

func ListDestinations(c *gin.Context, uniqueID, name string) ([]models.Destination, error)

func ListGrants

func ListGrants(c *gin.Context, identity string, resource string, privilege string) ([]models.Grant, error)

func ListGroupGrants

func ListGroupGrants(c *gin.Context, groupID uid.ID) ([]models.Grant, error)

func ListGroups

func ListGroups(c *gin.Context, name string, providerID uid.ID) ([]models.Group, error)

func ListProviders

func ListProviders(c *gin.Context, name string) ([]models.Provider, error)

func ListUserGrants

func ListUserGrants(c *gin.Context, userID uid.ID) ([]models.Grant, error)

func ListUserGroups

func ListUserGroups(c *gin.Context, userID uid.ID) ([]models.Group, error)

func ListUsers

func ListUsers(c *gin.Context, email string, providerID uid.ID) ([]models.User, error)

func RetrieveUserProviderTokens

func RetrieveUserProviderTokens(c *gin.Context) (*models.ProviderToken, error)

RetrieveUserProviderTokens gets the provider tokens that the current session token was created for

func SaveDestination

func SaveDestination(c *gin.Context, destination *models.Destination) error

func SaveProvider

func SaveProvider(c *gin.Context, provider *models.Provider) error

func UpdateProviderToken

func UpdateProviderToken(c *gin.Context, providerToken *models.ProviderToken) error

UpdateProviderToken overwrites an existing set of provider tokens

func UpdateUserInfo

func UpdateUserInfo(c *gin.Context, info *authn.UserInfo, user *models.User, provider *models.Provider) error

Types

type Permission

type Permission string

const (
	PermissionAll       Permission = "*"
	PermissionAllInfra  Permission = "infra.*"
	PermissionAllCreate Permission = "infra.*.create"
	PermissionAllRead   Permission = "infra.*.read"
	PermissionAllUpdate Permission = "infra.*.update"
	PermissionAllDelete Permission = "infra.*.delete"
)

const (
	PermissionAPIToken       Permission = "infra.apitoken.*"
	PermissionAPITokenCreate Permission = "infra.apitoken.create"
	PermissionAPITokenRead   Permission = "infra.apitoken.read"
	PermissionAPITokenDelete Permission = "infra.apitoken.delete"
)

const (
	PermissionDestination       Permission = "infra.destination.*"
	PermissionDestinationCreate Permission = "infra.destination.create"
	PermissionDestinationRead   Permission = "infra.destination.read"
	PermissionDestinationUpdate Permission = "infra.destination.update"
	PermissionDestinationDelete Permission = "infra.destination.delete"
)

const (
	PermissionGrant       Permission = "infra.grant.*"
	PermissionGrantCreate Permission = "infra.grant.create"
	PermissionGrantRead   Permission = "infra.grant.read"
	PermissionGrantUpdate Permission = "infra.grant.update"
	PermissionGrantDelete Permission = "infra.grant.delete"
)

const (
	PermissionGroup       Permission = "infra.group.*"
	PermissionGroupCreate Permission = "infra.group.create"
	PermissionGroupRead   Permission = "infra.group.read"
	PermissionGroupUpdate Permission = "infra.group.update"
	PermissionGroupDelete Permission = "infra.group.delete"
)

const (
	PermissionProvider       Permission = "infra.provider.*"
	PermissionProviderCreate Permission = "infra.provider.create"
	PermissionProviderRead   Permission = "infra.provider.read"
	PermissionProviderUpdate Permission = "infra.provider.update"
	PermissionProviderDelete Permission = "infra.provider.delete"
)

const (
	PermissionToken       Permission = "infra.token.*"
	PermissionTokenCreate Permission = "infra.token.create"
)

const (
	PermissionUser       Permission = "infra.user.*"
	PermissionUserCreate Permission = "infra.user.create"
	PermissionUserRead   Permission = "infra.user.read"
	PermissionUserUpdate Permission = "infra.user.update"
	PermissionUserDelete Permission = "infra.user.delete"
)