iauthnzimpl

Documentation

Index

• Variables
• func IssueAPIToken(appTokens istructs.IAppTokens, duration time.Duration, roles []appdef.QName, ...) (token string, err error)
• func NewDefaultAuthenticator(subjectRolesGetter SubjectGetterFunc, ...) iauthnz.IAuthenticator
• func NewDefaultAuthorizer() iauthnz.IAuthorizer
• type ACElem
• type ACL
  • func (acl ACL) IsAllowed(principals []iauthnz.Principal, req iauthnz.AuthzRequest) bool
• type ACPolicyType
• type IsDeviceAllowedFunc
• type IsDeviceAllowedFuncs
• type PatternType
• type SubjectGetterFunc

Variables

var (
	ErrPersonalAccessTokenOnSystemRole = errors.New("personal access token on a system role")
	ErrPersonalAccessTokenOnNullWSID   = errors.New("personal access token on null WSID")
)

var TestIsDeviceAllowedFuncs = IsDeviceAllowedFuncs{
	istructs.AppQName_test1_app1: func(as istructs.IAppStructs, requestWSID istructs.WSID, deviceProfileWSID istructs.WSID) (ok bool, err error) {
		return true, nil
	},
}

var TestSubjectRolesGetter = func(context.Context, string, istructs.IAppStructs, istructs.WSID) ([]appdef.QName, error) {
	return nil, nil
}

Functions

func IssueAPIToken

func IssueAPIToken(appTokens istructs.IAppTokens, duration time.Duration, roles []appdef.QName, wsid istructs.WSID, currentPrincipalPayload payloads.PrincipalPayload) (token string, err error)

func NewDefaultAuthenticator

func NewDefaultAuthenticator(subjectRolesGetter SubjectGetterFunc, isDeviceAllowedFuncs IsDeviceAllowedFuncs) iauthnz.IAuthenticator

func NewDefaultAuthorizer

func NewDefaultAuthorizer() iauthnz.IAuthorizer

Types

type ACElem

type ACElem struct {
	// contains filtered or unexported fields
}

type ACL

type ACL []ACElem

func (ACL) IsAllowed

func (acl ACL) IsAllowed(principals []iauthnz.Principal, req iauthnz.AuthzRequest) bool

type ACPolicyType

type ACPolicyType int

const (
	ACPolicy_Deny ACPolicyType = iota
	ACPolicy_Allow
)

type IsDeviceAllowedFunc

type IsDeviceAllowedFunc = func(as istructs.IAppStructs, requestWSID istructs.WSID, deviceProfileWSID istructs.WSID) (ok bool, err error)

type IsDeviceAllowedFuncs

type IsDeviceAllowedFuncs map[istructs.AppQName]IsDeviceAllowedFunc

type PatternType

type PatternType struct {
	// contains filtered or unexported fields
}

type SubjectGetterFunc

type SubjectGetterFunc = func(requestContext context.Context, name string, as istructs.IAppStructs, wsid istructs.WSID) ([]appdef.QName, error)