auth

package

v0.4.0 Latest Latest Go to latest Published: Sep 27, 2023 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/nautes-labs/vault-proxy

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func AuthProcess(ctx context.Context, auth *Authorizer, checkType int, req interface{}) error
func Authenticate() middleware.Middleware
func Authorize(c *conf.Server, checkType int) middleware.Middleware
func FromAuthContext(ctx context.Context) string
func GetSecretData(ctx context.Context, req interface{}) (user, resource, action string, err error)
func GetUsername(req *http.Request) (string, error)
func NewAuthContext(ctx context.Context, user string) context.Context
type AuthUser
type Authorizer
- func NewAuthorizer(c *conf.Server_Authorization, nautesCFG *conf.Nautes) (*Authorizer, error)
- func (a *Authorizer) CheckGrantPermission(_ context.Context, user, resource string, dstUser *v1.GrantTarget) error
- func (a *Authorizer) CheckSecretPermission(_ context.Context, user, resource, action string) error
type Transport

Constants ¶

View Source

const (
	BASIC int = iota
	GRANT
)

Variables ¶

This section is empty.

Functions ¶

func AuthProcess ¶

func AuthProcess(ctx context.Context, auth *Authorizer, checkType int, req interface{}) error

func Authenticate ¶

func Authenticate() middleware.Middleware

func Authorize ¶

func Authorize(c *conf.Server, checkType int) middleware.Middleware

func FromAuthContext ¶

func FromAuthContext(ctx context.Context) string

func GetSecretData ¶

func GetSecretData(ctx context.Context, req interface{}) (user, resource, action string, err error)

func GetUsername ¶

func GetUsername(req *http.Request) (string, error)

func NewAuthContext ¶

func NewAuthContext(ctx context.Context, user string) context.Context

Types ¶

type AuthUser ¶

type AuthUser struct{}

type Authorizer ¶

type Authorizer struct {
	ACLWatcher *fsnotify.Watcher
	// contains filtered or unexported fields
}

func NewAuthorizer ¶

func NewAuthorizer(c *conf.Server_Authorization, nautesCFG *conf.Nautes) (*Authorizer, error)

func (*Authorizer) CheckGrantPermission ¶

func (a *Authorizer) CheckGrantPermission(_ context.Context, user, resource string, dstUser *v1.GrantTarget) error

Grant check flow 1. Request are not in black list (blacklist is a regex list, current use to block runtime grant the role in tenant cluster) 2. User has grant permission in resource acl 3. User can grant resource to user

func (*Authorizer) CheckSecretPermission ¶

func (a *Authorizer) CheckSecretPermission(_ context.Context, user, resource, action string) error

type Transport ¶

type Transport interface {
	Request() *http.Request
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL