auth

package
v1.9.4 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 5, 2024 License: Apache-2.0 Imports: 7 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func IsUntrackedUDSAuth added in v0.11.0

func IsUntrackedUDSAuth(authInfo credentials.AuthInfo) bool

func StreamAuthorizeCall

func StreamAuthorizeCall(srv any, ss grpc.ServerStream, info *grpc.StreamServerInfo, handler grpc.StreamHandler) error

func UnaryAuthorizeCall

func UnaryAuthorizeCall(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error)

func UntrackedUDSCredentials added in v0.11.0

func UntrackedUDSCredentials() credentials.TransportCredentials

UntrackedUDSCredentials returns credentials for UDS servers that rely solely on file permissions for access control. If the caller information (e.g. PID, UID, GID) is in any way used for further access control or authorization decisions, these credentials SHOULD NOT be used. The peertracker package should instead be used, which provides mitigation against PID reuse and related attacks.

Types

type Authorizer

type Authorizer interface {
	AuthorizeCall(ctx context.Context, fullMethod string) (context.Context, error)
}

type AuthorizerFunc

type AuthorizerFunc func(ctx context.Context, fullMethod string) (context.Context, error)

func (AuthorizerFunc) AuthorizeCall

func (fn AuthorizerFunc) AuthorizeCall(ctx context.Context, fullMethod string) (context.Context, error)

type UntrackedUDSAuthInfo added in v0.11.0

type UntrackedUDSAuthInfo struct{}

func (UntrackedUDSAuthInfo) AuthType added in v0.11.0

func (UntrackedUDSAuthInfo) AuthType() string

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL