auth

README

auth

认证服务，存储和管理账号、规则(RBAC)。

首先需要切换名字空间

micro login --namespace io.goeasy default password

查看权限规则

micro auth list rules

查看账号

micro auth list accounts

增加权限规则

缺省的规则，允许匿名请求。为了关闭缺省的规则，我们增加一条规则。

micro auth create rule --scope '' --priority 1 --resource '*:*:*' --access denied deny-public

增加一条规则，允许具名用户请求，访问范围是 normal。访问范围（Scope）类似用户组，一个用户可以有多个访问范围（Scope）。用参数 --priority 指定更大的优先级。

micro auth create rule --scope normal --priority 1000 --resource '*:*:*' normal-any

增加用户

创建一个新用户，ID 是 user001，设定其访问范围是 normal。

micro auth create account --secret 123456 --scopes normal user001

创建成功后，获取用户 user001 的访问令牌。

micro token --secret 123456 user001

参考教程

• 远程调用（RPC）的认证授权

规则示例

$ micro auth list rules
ID			Scope			Access		Resource							Priority
portal			<public>		GRANTED		service:io.goeasy.service:/portal/*				100
placeholder		<public>		GRANTED		service:io.goeasy.service:/placeholder				100
uploads-auth		<public>		DENIED		service:io.goeasy.service:/o/upload/*				101
uploads			<public>		GRANTED		service:io.goeasy.service:/o/*					100
metrics			<public>		GRANTED		service:io.goeasy.service:/metrics				100
favicon			<public>		GRANTED		service:io.goeasy.service:/favicon.ico				100
root			<public>		GRANTED		service:io.goeasy.service:/					100
wx-renew-token		<public>		GRANTED		service:io.goeasy.service.liveuser:Wx.RenewToken		100
wx-login		<public>		GRANTED		service:io.goeasy.service.liveuser:Wx.Login			100
comet-sub		<public>		GRANTED		service:io.goeasy.service.comet:Comet.Subscribe			100
admin-any		admin			GRANTED		*:*:*								1000
normal-any		normal			GRANTED		*:*:*								1000
deny-public		<public>		DENIED		*:*:*								1
default			<public>		GRANTED		*:*:*								0

Documentation

Index

• Constants
• type Server
  • func NewServer() *Server
  • func (s *Server) Name() string
  • func (s *Server) Run()

Constants

const (
	ServiceName = "auth"
)

Types

type Server

type Server struct {
	Namespace      string   `json:"namespace"`
	Production     bool     `json:"production"`
	LogOutputPaths []string `json:"logging_output_paths"`
}

func NewServer

func NewServer() *Server

func (*Server) Name

func (s *Server) Name() string

func (*Server) Run

func (s *Server) Run()