service

Documentation

Index

• Constants
• Variables
• func EvaluateRequest(req *http.Request, env config.EnvironmentVariables, w http.ResponseWriter, ...) error
• func OPAMiddleware(opaModuleConfig *core.OPAModuleConfig, sdkState *SDKBootState, ...) mux.MiddlewareFunc
• func ReverseProxy(logger *logrus.Entry, env config.EnvironmentVariables, w http.ResponseWriter, ...)
• func ReverseProxyOrResponse(logger *logrus.Entry, env config.EnvironmentVariables, w http.ResponseWriter, ...)
• func SetupRouter(log *logrus.Logger, env config.EnvironmentVariables, ...) (*mux.Router, error)
• func StatusRoutes(r *mux.Router, sdkBoot *SDKBootState, serviceName, serviceVersion string)
• type GrantRequestBody
• type GrantResponseBody
• type OPAMiddlewareOptions
• type OPATransport
  • func NewOPATransport(transport http.RoundTripper, context context.Context, config *core.RondConfig, ...) *OPATransport
  • func (t *OPATransport) RoundTrip(req *http.Request) (resp *http.Response, err error)
• type RevokeRequestBody
• type RevokeResponseBody
• type SDKBootState
  • func NewSDKBootState() *SDKBootState
  • func (s *SDKBootState) Get() sdk.OASEvaluatorFinder
  • func (s *SDKBootState) IsReady() bool
  • func (s *SDKBootState) IsReadyChan() chan bool
  • func (s *SDKBootState) Ready(rond sdk.OASEvaluatorFinder)
• type StatusResponse

Constants

const BASE_ROW_FILTER_HEADER_KEY = "acl_rows"

const BINDINGS_MAX_PAGE_SIZE = 200

TODO: handle pagination!

const URL_SCHEME = "http"

Variables

var (
	ErrUnexepectedContentType          = fmt.Errorf("unexpected content type")
	ErrOPATransportInvalidResponseBody = fmt.Errorf("response body is not valid")
)

var (
	ErrSDKNotReadyMessage         = "service not ready to work yet"
	ErrSDKNotReadyBusinessMessage = "the service is not ready to work yet, try again in a few moments"
)

Functions

func EvaluateRequest

func EvaluateRequest(
	req *http.Request,
	env config.EnvironmentVariables,
	w http.ResponseWriter,
	evaluatorSdk sdk.Evaluator,
	rondInputUser core.InputUser,
) error

func OPAMiddleware

func OPAMiddleware(
	opaModuleConfig *core.OPAModuleConfig,
	sdkState *SDKBootState,
	routesToNotProxy []string,
	targetServiceOASPath string,
	options *OPAMiddlewareOptions,
) mux.MiddlewareFunc

func ReverseProxy

func ReverseProxy(
	logger *logrus.Entry,
	env config.EnvironmentVariables,
	w http.ResponseWriter,
	req *http.Request,
	permission *core.RondConfig,
	evaluatorSdk sdk.Evaluator,
	inputUser core.InputUser,
)

func ReverseProxyOrResponse

func ReverseProxyOrResponse(
	logger *logrus.Entry,
	env config.EnvironmentVariables,
	w http.ResponseWriter,
	req *http.Request,
	evaluatorSdk sdk.Evaluator,
	inputUser core.InputUser,
)

func SetupRouter

func SetupRouter(
	log *logrus.Logger,
	env config.EnvironmentVariables,
	opaModuleConfig *core.OPAModuleConfig,
	oas *openapi.OpenAPISpec,
	sdkBoot *SDKBootState,
	inputUserClient inputuser.Client,
	registry *prometheus.Registry,
) (*mux.Router, error)

func StatusRoutes

func StatusRoutes(r *mux.Router, sdkBoot *SDKBootState, serviceName, serviceVersion string)

StatusRoutes add status routes to router.

Types

type GrantRequestBody

type GrantRequestBody struct {
	ResourceID  string   `json:"resourceId"`
	Subjects    []string `json:"subjects"`
	Groups      []string `json:"groups"`
	Roles       []string `json:"roles"`
	Permissions []string `json:"permissions"`
}

type GrantResponseBody

type GrantResponseBody struct {
	BindingID string `json:"bindingId"`
}

type OPAMiddlewareOptions

type OPAMiddlewareOptions struct {
	IsStandalone         bool
	PathPrefixStandalone string
}

type OPATransport

type OPATransport struct {
	http.RoundTripper
	// contains filtered or unexported fields
}

func NewOPATransport

func NewOPATransport(
	transport http.RoundTripper,
	context context.Context,
	config *core.RondConfig,
	env config.EnvironmentVariables,
	logger *logrus.Entry,
	req *http.Request,
	clientHeaderKey string,
	user core.InputUser,
	evaluatorSDK sdk.Evaluator,
) *OPATransport

func (*OPATransport) RoundTrip

func (t *OPATransport) RoundTrip(req *http.Request) (resp *http.Response, err error)

type RevokeRequestBody

type RevokeRequestBody struct {
	Subjects    []string `json:"subjects,omitempty"`
	Groups      []string `json:"groups,omitempty"`
	ResourceIDs []string `json:"resourceIds"`
}

type RevokeResponseBody

type RevokeResponseBody struct {
	DeletedBindings  int `json:"deletedBindings"`
	ModifiedBindings int `json:"modifiedBindings"`
}

type SDKBootState

type SDKBootState struct {
	// contains filtered or unexported fields
}

func NewSDKBootState

func NewSDKBootState() *SDKBootState

func (*SDKBootState) Get

func (s *SDKBootState) Get() sdk.OASEvaluatorFinder

func (*SDKBootState) IsReady

func (s *SDKBootState) IsReady() bool

func (*SDKBootState) IsReadyChan

func (s *SDKBootState) IsReadyChan() chan bool

func (*SDKBootState) Ready

func (s *SDKBootState) Ready(rond sdk.OASEvaluatorFinder)

type StatusResponse

type StatusResponse struct {
	Status  string `json:"status"`
	Name    string `json:"name"`
	Version string `json:"version"`
}

StatusResponse type.