impl

Documentation

Overview

Package impl contains code shared by `frontend` and `backend` services.

Index

• Variables
• func Main(modules []module.Module, cb func(srv *server.Server) error)
• type AuthDBProvider
  • func (a *AuthDBProvider) GetAuthDB(ctx context.Context) (db authdb.DB, err error)
  • func (a *AuthDBProvider) RefreshPeriodically(ctx context.Context)

Variables

var AuthorizeRPCAccess = rpcacl.Interceptor(rpcacl.Map{

	"/discovery.Discovery/*": rpcacl.All,

	"/auth.service.Accounts/GetSelf": rpcacl.All,

	"/auth.service.Groups/*": authdb.AuthServiceAccessGroup,

	"/auth.service.Groups/CreateGroup": model.AdminGroup,

	"/auth.service.Allowlists/*": authdb.AuthServiceAccessGroup,

	"/auth.service.AuthDB/*": model.TrustedServicesGroup,

	"/auth.service.ChangeLogs/*": authdb.AuthServiceAccessGroup,

	"/auth.service.Replicas/*": authdb.AuthServiceAccessGroup,

	"/auth.internals.Internals/*": authdb.AuthServiceAccessGroup,

	"/config.Consumer/*": rpcacl.All,
})

AuthorizeRPCAccess is a gRPC server interceptor that checks the caller is in the group that grants access to the auth service API.

Functions

func Main

func Main(modules []module.Module, cb func(srv *server.Server) error)

Main launches a server with some default modules and configuration installed.

Types

type AuthDBProvider

type AuthDBProvider struct {
	// contains filtered or unexported fields
}

AuthDBProvider knows how to produce an up-to-date authdb.DB instance.

It caches it in memory, refetching it from Datastore when it detects the cached copy is stale.

func (*AuthDBProvider) GetAuthDB

func (a *AuthDBProvider) GetAuthDB(ctx context.Context) (db authdb.DB, err error)

GetAuthDB returns the latest authdb.DB instance to use for ACL checks.

Refetches it from the datastore if necessary.

func (*AuthDBProvider) RefreshPeriodically

func (a *AuthDBProvider) RefreshPeriodically(ctx context.Context)

RefreshPeriodically runs a loop that periodically refreshes the cached copy of AuthDB.