authz

Documentation

Index

• func AuthenticatedUser(r *http.Request) bool
• func Role(role model.Role) func(r *http.Request) bool
• type Authorizer
  • func NewAuthorizer(logger logrus.FieldLogger, httpUtils httputils.Utils) Authorizer
  • func (a Authorizer) Require(funcs ...func(r *http.Request) bool) func(next http.Handler) http.Handler
  • func (a Authorizer) RequireAdminRole(next http.Handler) http.Handler
  • func (a Authorizer) RequireAuthenticatedUser(next http.Handler) http.Handler
  • func (a Authorizer) RequireOneOf(funcs ...func(r *http.Request) bool) func(next http.Handler) http.Handler
  • func (a Authorizer) RequireRole(role model.Role) func(next http.Handler) http.Handler

Functions

func AuthenticatedUser

func AuthenticatedUser(r *http.Request) bool

AuthenticatedUser authorizes any authenticated user.

Note that authenticated API key is not linked to any user, therefore this check will fail. Also note that when auth is disabled this check also fails

func Role

func Role(role model.Role) func(r *http.Request) bool

Role verifies if the identity (user or API key) associated with the request has the given role.

Types

type Authorizer

type Authorizer struct {
	// contains filtered or unexported fields
}

func NewAuthorizer

func NewAuthorizer(logger logrus.FieldLogger, httpUtils httputils.Utils) Authorizer

func (Authorizer) Require

func (a Authorizer) Require(funcs ...func(r *http.Request) bool) func(next http.Handler) http.Handler

func (Authorizer) RequireAdminRole

func (a Authorizer) RequireAdminRole(next http.Handler) http.Handler

func (Authorizer) RequireAuthenticatedUser

func (a Authorizer) RequireAuthenticatedUser(next http.Handler) http.Handler

func (Authorizer) RequireOneOf

func (a Authorizer) RequireOneOf(funcs ...func(r *http.Request) bool) func(next http.Handler) http.Handler

func (Authorizer) RequireRole

func (a Authorizer) RequireRole(role model.Role) func(next http.Handler) http.Handler