bfladetector

type Audience []*SourceObject

type AuthorizationModel struct {
	Operations Operations `json:"operations"`
}

type AuthzModelNotification struct {
	Learning   bool
	AuthzModel AuthorizationModel
	SpecType   SpecType
}

type BFLADetector interface {
	SendTrace(trace *CompositeTrace)

	IsLearning(apiID uint) bool
	GetState(apiID uint) (BFLAStateEnum, error)
	FindSourceObj(path, method string, clientRef *k8straceannotator.K8sObjectRef, apiID uint) (*SourceObject, error)

	ApproveTrace(path, method string, clientRef *k8straceannotator.K8sObjectRef, apiID uint, user *DetectedUser)
	DenyTrace(path, method string, clientRef *k8straceannotator.K8sObjectRef, apiID uint, user *DetectedUser)

	ResetModel(apiID uint) error
	StartLearning(apiID uint, numberOfTraces int) error
	StopLearning(apiID uint) error

	StartDetection(apiID uint) error
	StopDetection(apiID uint) error

	ProvideAuthzModel(apiID uint, am AuthorizationModel)
}

type BFLANotifier interface {
	NotifyAuthzModel(ctx context.Context, apiID uint, notification AuthzModelNotification) error
	NotifyFindings(ctx context.Context, apiID uint, notification notifications.ApiFindingsNotification) error
}

type BFLAState struct {
	State        BFLAStateEnum `json:"state"`
	TraceCounter int           `json:"trace_counter"`
}

type BFLAStateEnum uint

type BflaConfig struct {
	AutomaticLearningAndDetection bool
	LearningNrTraces              uint
}

type Command interface {
	// contains filtered or unexported methods
}

type CommandWithError interface {
	Command

	Close()
	SendError(err error)
	RcvError() error
}

type CommandsChan chan Command

type CompositeTrace struct {
	*core.Event

	K8SSource, K8SDestination *k8straceannotator.K8sObjectRef
	DetectedUser              *DetectedUser
}

type DetectedUser struct {
	Source    DetectedUserSource `json:"source"`
	ID        string             `json:"id"`
	IPAddress string             `json:"ip_address"`

	// Present if the source is JWT.
	JWTClaims *JWTClaimsWithScopes `json:"jwt_claims"`
}

type DetectedUserSource int32

type EndUsers []*DetectedUser

type ErrorChan chan error

type EventAlerter interface {
	SetEventAlert(ctx context.Context, modName string, eventID uint, severity core.AlertSeverity) error
}

type EventOperation struct {
	Path        string
	Method      string
	Source      string
	Destination string
}

type FindingsRegistry interface {
	Add(apiID uint, finding common.APIFinding) (bool, error)
	GetAll(apiID uint) ([]common.APIFinding, error)
	Clear(apiID uint) error
}

type JWTClaimsWithScopes struct {
	*jwt.RegisteredClaims

	Scope *string `json:"scope"`
}

type MarkIllegitimateCommand struct {
	// contains filtered or unexported fields
}

type MarkLegitimateCommand struct {
	// contains filtered or unexported fields
}

type MockEventAlerter struct {
	// contains filtered or unexported fields
}

type MockEventAlerterMockRecorder struct {
	// contains filtered or unexported fields
}

type Notifier struct {
	// contains filtered or unexported fields
}

type Operation struct {
	Method   string   `json:"method"`
	Path     string   `json:"path"`
	Tags     []string `json:"tags"`
	Audience Audience `json:"audience"`
}

type Operations []*Operation

type ProvideAuthzModelCommand struct {
	// contains filtered or unexported fields
}

type ResetModelCommand struct {
	ErrorChan
	// contains filtered or unexported fields
}

type SourceObject struct {
	K8sObject     *k8straceannotator.K8sObjectRef `json:"k8s_object"`
	External      bool                            `json:"external"`
	EndUsers      EndUsers                        `json:"end_users,omitempty"`
	LastTime      time.Time                       `json:"last_time"`
	StatusCode    int64                           `json:"status_code"`
	WarningStatus restapi.BFLAStatus              `json:"warning_status"`
	Authorized    bool                            `json:"authorized"`
}

type SpecType uint

type StartDetectionCommand struct {
	ErrorChan
	// contains filtered or unexported fields
}

type StartLearningCommand struct {
	ErrorChan
	// contains filtered or unexported fields
}

type StopDetectionCommand struct {
	ErrorChan
	// contains filtered or unexported fields
}

type StopLearningCommand struct {
	ErrorChan
	// contains filtered or unexported fields
}