cli

Documentation

Index

• type AuthorizerMissingPolicy
• type CertificatePolicy
• type Configuration
• type InterconnectConfiguration
  • func ParseCLI() InterconnectConfiguration
• type TLSClientCAInfo
• type TLSEndpoint
• type WSEndpoint

Types

type AuthorizerMissingPolicy

type AuthorizerMissingPolicy int

const (
	RejectAction AuthorizerMissingPolicy = iota
	PermitAction
)

type CertificatePolicy

type CertificatePolicy int

const (
	DisableClientAuthentication CertificatePolicy = iota
	AcceptClientCert
	RequireClientCert
)

type Configuration

type Configuration struct {
	Realm             string   `config:"realm, required"`
	EnableAnonymous   bool     `config:"enable-anonymous"`
	AnonymousAuthRole string   `config:"anonymous-authrole"`
	EnableTicket      bool     `config:"enable-ticket"`
	TicketCheckFunc   string   `config:"ticket-check-func"`
	TicketGetRoleFunc string   `config:"ticket-get-role-func"`
	ExcludeAuthRole   []string `config:"exclude-auth-role"`
	EnableResumeToken bool     `config:"enable-resume-token"`

	EnableWs bool   `config:"enable-ws"`
	WsHost   string `config:"ws-host"`
	WsPort   uint16 `config:"ws-port"`

	EnableWss     bool     `config:"enable-wss"`
	WssHost       string   `config:"wss-host"`
	WssPort       uint16   `config:"wss-port"`
	WssCertFile   string   `config:"wss-cert-file"`
	WssKeyFile    string   `config:"wss-key-file"`
	WssClientAuth string   `config:"wss-client-auth"`
	WssClientCA   []string `config:"wss-client-ca"`

	EnableAuthorizer                bool     `config:"enable-authorization"`
	AuthorizerFunc                  string   `config:"authorizer-func"`
	EnableFeatureAuthorization      bool     `config:"enable-feature-authorization"`
	FeatureAuthorizationMatrixFunc  string   `config:"feature-authorizer-matrix-func"`
	FeatureAuthorizationMappingFunc string   `config:"feature-authorizer-mapping-func"`
	TrustedAuthRoles                []string `config:"trusted-authroles"`
	AuthorizerFallback              string   `config:"authorizer-fallback"`
	ConsentMode                     string   `config:"consent-mode"`
}

type InterconnectConfiguration

type InterconnectConfiguration struct {
	ListenTLS *TLSEndpoint
	ListenWS  *WSEndpoint
	Realm     string

	EnableTicketAuth         bool
	UpstreamAuthFunc         string
	UpstreamGetAuthRolesFunc string
	ReservedAuthRole         []string
	EnableResumeToken        bool

	EnableAnonymousAuth bool
	AnonymousAuthRole   string

	// Global Authorization Variables
	// Works in both authenticators
	TrustedAuthRoles []string
	AuthorizeFailed  AuthorizerMissingPolicy

	// Dynamic Authorizer
	// According to wamp-proto
	EnableAuthorizer   bool
	UpstreamAuthorizer string

	// Feature Authorizer
	// According to my brain and my whiteboard
	EnableFeatureAuthorizer          bool
	UpstreamFeatureAuthorizerMatrix  string
	UpstreamFeatureAuthorizerMapping string

	ConsentMode string
}

func ParseCLI

func ParseCLI() InterconnectConfiguration

type TLSClientCAInfo

type TLSClientCAInfo struct {
	AuthRole string
	CACert   *x509.Certificate
}

type TLSEndpoint

type TLSEndpoint struct {
	WS               WSEndpoint
	Certificate      tls.Certificate
	ClientCertPolicy CertificatePolicy
	ValidClientCAs   []TLSClientCAInfo
}

type WSEndpoint

type WSEndpoint struct {
	Port uint16
	Host string
}