authz

Documentation

Index

• Variables
• func AllowAny(next http.Handler) http.Handler
• func AuthenticatedUser(r *http.Request) bool
• func Require(funcs ...func(r *http.Request) bool) func(next http.Handler) http.Handler
• func Role(role model.Role) func(r *http.Request) bool

Variables

var (
	RequireAdminRole         = Require(Role(model.AdminRole))
	RequireAuthenticatedUser = Require(AuthenticatedUser)
)

Functions

func AllowAny

func AllowAny(next http.Handler) http.Handler

AllowAny does not verify if a request is authorized.

func AuthenticatedUser

func AuthenticatedUser(r *http.Request) bool

AuthenticatedUser authorizes any authenticated user.

Note that authenticated API key is not linked to any user, therefore this check will fail.

func Require

func Require(funcs ...func(r *http.Request) bool) func(next http.Handler) http.Handler

func Role

func Role(role model.Role) func(r *http.Request) bool

Role verifies if the identity (user or API key) associated with the request has the given role.