authorizer

Documentation

Overview

Package authorizer provides authorization handlers to the server.

Index

• func Decision(ref func() ast.Ref) func(*Basic)
• func EnablePrintStatements(yes bool) func(r *Basic)
• func GetBodyOnContext(ctx context.Context) (interface{}, bool)
• func InterQueryCache(interQueryCache cache.InterQueryCache) func(*Basic)
• func NewBasic(inner http.Handler, compiler func() *ast.Compiler, store storage.Store, ...) http.Handler
• func PrintHook(printHook print.Hook) func(*Basic)
• func Runtime(term *ast.Term) func(*Basic)
• func SetBodyOnContext(ctx context.Context, x interface{}) context.Context
• type Basic
  • func (h *Basic) ServeHTTP(w http.ResponseWriter, r *http.Request)

Functions

func Decision

func Decision(ref func() ast.Ref) func(*Basic)

Decision returns an argument that sets the path of the authorization decision to query.

func EnablePrintStatements

func EnablePrintStatements(yes bool) func(r *Basic)

EnablePrintStatements enables print() calls. If this option is not provided, print() calls will be erased from the policy. This option only applies to queries and policies that passed as raw strings, i.e., this function will not have any affect if the caller supplies the ast.Compiler instance.

func GetBodyOnContext

func GetBodyOnContext(ctx context.Context) (interface{}, bool)

GetBodyOnContext returns the parsed input from the request context if it exists. The authorizer saves the parsed input on the context when it runs.

func InterQueryCache

func InterQueryCache(interQueryCache cache.InterQueryCache) func(*Basic)

InterQueryCache enables the inter-query cache on the authorizer

func NewBasic

func NewBasic(inner http.Handler, compiler func() *ast.Compiler, store storage.Store, opts ...func(*Basic)) http.Handler

NewBasic returns a new Basic object.

func PrintHook

func PrintHook(printHook print.Hook) func(*Basic)

PrintHook sets the object to use for handling print statement outputs.

func Runtime

func Runtime(term *ast.Term) func(*Basic)

Runtime returns an argument that sets the runtime on the authorizer.

func SetBodyOnContext

func SetBodyOnContext(ctx context.Context, x interface{}) context.Context

SetBodyOnContext adds the parsed input value to the context. This function is only exposed for test purposes.

Types

type Basic

type Basic struct {
	// contains filtered or unexported fields
}

Basic provides policy-based authorization over incoming requests.

func (*Basic) ServeHTTP

func (h *Basic) ServeHTTP(w http.ResponseWriter, r *http.Request)