authz

Documentation

Index

• type AuthnService
• type Authz
  • func New(log log.Logger, next http.Handler, userIDHeaderKey string, ...) *Authz
  • func (c Authz) Info() *middleware.MiddlewareInfo
  • func (c *Authz) ServeHTTP(rw http.ResponseWriter, req *http.Request)
• type Config
• type Permission
• type ResourceService

Types

type AuthnService

type AuthnService interface {
	GetPrincipal(ctx context.Context, via ...authenticate.ClientAssertion) (authenticate.Principal, error)
}

type Authz

type Authz struct {
	// contains filtered or unexported fields
}

func New

func New(
	log log.Logger,
	next http.Handler,
	userIDHeaderKey string,
	resourceService ResourceService,
	principalService AuthnService) *Authz

func (Authz) Info

func (c Authz) Info() *middleware.MiddlewareInfo

func (*Authz) ServeHTTP

func (c *Authz) ServeHTTP(rw http.ResponseWriter, req *http.Request)

type Config

type Config struct {
	Actions     []string                        `yaml:"actions" mapstructure:"actions"`
	Permissions []Permission                    `yaml:"permissions" mapstructure:"permissions"`
	Attributes  map[string]middleware.Attribute `yaml:"attributes" mapstructure:"attributes"`
}

type Permission

type Permission struct {
	Name      string `yaml:"name" mapstructure:"name"`
	Namespace string `yaml:"namespace" mapstructure:"namespace"`
	Attribute string `yaml:"attribute" mapstructure:"attribute"`
}

type ResourceService

type ResourceService interface {
	CheckAuthz(ctx context.Context, rel relation.Object, permissionName string) (bool, error)
}