auth

Documentation

Index

• func IsUntrackedUDSAuth(authInfo credentials.AuthInfo) bool
• func StreamAuthorizeCall(srv interface{}, ss grpc.ServerStream, info *grpc.StreamServerInfo, ...) error
• func UnaryAuthorizeCall(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, ...) (interface{}, error)
• func UntrackedUDSCredentials() credentials.TransportCredentials
• type Authorizer
• type AuthorizerFunc
  • func (fn AuthorizerFunc) AuthorizeCall(ctx context.Context, fullMethod string) (context.Context, error)
• type UntrackedUDSAuthInfo
  • func (UntrackedUDSAuthInfo) AuthType() string

Functions

func IsUntrackedUDSAuth

func IsUntrackedUDSAuth(authInfo credentials.AuthInfo) bool

func StreamAuthorizeCall

func StreamAuthorizeCall(srv interface{}, ss grpc.ServerStream, info *grpc.StreamServerInfo, handler grpc.StreamHandler) error

func UnaryAuthorizeCall

func UnaryAuthorizeCall(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (interface{}, error)

func UntrackedUDSCredentials

func UntrackedUDSCredentials() credentials.TransportCredentials

UntrackedUDSCredentials returns credentials for UDS servers that rely solely on file permissions for access control. If the caller information (e.g. PID, UID, GID) is in any way used for further access control or authorization decisions, these credentials SHOULD NOT be used. The peertracker package should instead be used, which provides mitigation against PID reuse and related attacks.

Types

type Authorizer

type Authorizer interface {
	AuthorizeCall(ctx context.Context, fullMethod string) (context.Context, error)
}

type AuthorizerFunc

type AuthorizerFunc func(ctx context.Context, fullMethod string) (context.Context, error)

func (AuthorizerFunc) AuthorizeCall

func (fn AuthorizerFunc) AuthorizeCall(ctx context.Context, fullMethod string) (context.Context, error)

type UntrackedUDSAuthInfo

type UntrackedUDSAuthInfo struct{}

func (UntrackedUDSAuthInfo) AuthType

func (UntrackedUDSAuthInfo) AuthType() string