authz

Documentation

Index

• Variables
• type Authorizer
• type AuthorizerAllow
  • func NewAuthorizerAllow(c configuration.Provider) *AuthorizerAllow
  • func (a *AuthorizerAllow) Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, ...) error
  • func (a *AuthorizerAllow) GetID() string
  • func (a *AuthorizerAllow) Validate() error
• type AuthorizerDeny
  • func NewAuthorizerDeny(c configuration.Provider) *AuthorizerDeny
  • func (a *AuthorizerDeny) Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, ...) error
  • func (a *AuthorizerDeny) GetID() string
  • func (a *AuthorizerDeny) Validate() error
• type AuthorizerKetoEngineACPORY
  • func NewAuthorizerKetoEngineACPORY(c configuration.Provider) *AuthorizerKetoEngineACPORY
  • func (a *AuthorizerKetoEngineACPORY) Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, ...) error
  • func (a *AuthorizerKetoEngineACPORY) GetID() string
  • func (a *AuthorizerKetoEngineACPORY) ParseSubject(session *authn.AuthenticationSession, templateId, templateString string) (string, error)
  • func (a *AuthorizerKetoEngineACPORY) Validate() error
  • func (a *AuthorizerKetoEngineACPORY) WithContextCreator(f authorizerKetoWardenContext)
• type AuthorizerKetoEngineACPORYConfiguration
• type AuthorizerKetoEngineACPORYRequestBody
• type Registry

Variables

var ErrAuthorizerNotEnabled = herodot.DefaultError{
	ErrorField:  "authorizer matching this route is misconfigured or disabled",
	CodeField:   http.StatusInternalServerError,
	StatusField: http.StatusText(http.StatusInternalServerError),
}

Types

type Authorizer

type Authorizer interface {
	Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, rule pipeline.Rule) error
	GetID() string
	Validate() error
}

type AuthorizerAllow

type AuthorizerAllow struct {
	// contains filtered or unexported fields
}

func NewAuthorizerAllow

func NewAuthorizerAllow(c configuration.Provider) *AuthorizerAllow

func (*AuthorizerAllow) Authorize

func (a *AuthorizerAllow) Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, _ pipeline.Rule) error

func (*AuthorizerAllow) GetID

func (a *AuthorizerAllow) GetID() string

func (*AuthorizerAllow) Validate

func (a *AuthorizerAllow) Validate() error

type AuthorizerDeny

type AuthorizerDeny struct {
	// contains filtered or unexported fields
}

func NewAuthorizerDeny

func NewAuthorizerDeny(c configuration.Provider) *AuthorizerDeny

func (*AuthorizerDeny) Authorize

func (a *AuthorizerDeny) Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, _ pipeline.Rule) error

func (*AuthorizerDeny) GetID

func (a *AuthorizerDeny) GetID() string

func (*AuthorizerDeny) Validate

func (a *AuthorizerDeny) Validate() error

type AuthorizerKetoEngineACPORY

type AuthorizerKetoEngineACPORY struct {
	// contains filtered or unexported fields
}

func NewAuthorizerKetoEngineACPORY

func NewAuthorizerKetoEngineACPORY(c configuration.Provider) *AuthorizerKetoEngineACPORY

func (*AuthorizerKetoEngineACPORY) Authorize

func (a *AuthorizerKetoEngineACPORY) Authorize(r *http.Request, session *authn.AuthenticationSession, config json.RawMessage, rule pipeline.Rule) error

func (*AuthorizerKetoEngineACPORY) GetID

func (a *AuthorizerKetoEngineACPORY) GetID() string

func (*AuthorizerKetoEngineACPORY) ParseSubject

func (a *AuthorizerKetoEngineACPORY) ParseSubject(session *authn.AuthenticationSession, templateId, templateString string) (string, error)

func (*AuthorizerKetoEngineACPORY) Validate

func (a *AuthorizerKetoEngineACPORY) Validate() error

func (*AuthorizerKetoEngineACPORY) WithContextCreator

func (a *AuthorizerKetoEngineACPORY) WithContextCreator(f authorizerKetoWardenContext)

type AuthorizerKetoEngineACPORYConfiguration

type AuthorizerKetoEngineACPORYConfiguration struct {
	RequiredAction   string `json:"required_action" valid:",required"`
	RequiredResource string `json:"required_resource" valid:",required"`
	Subject          string `json:"subject"`
	Flavor           string `json:"flavor"`
}

type AuthorizerKetoEngineACPORYRequestBody

type AuthorizerKetoEngineACPORYRequestBody struct {
	Action   string                 `json:"action"`
	Context  map[string]interface{} `json:"context"`
	Resource string                 `json:"resource"`
	Subject  string                 `json:"subject"`
}

type Registry

type Registry interface {
	AvailablePipelineAuthorizers() []string
	PipelineAuthorizer(string) (Authorizer, error)
}