security

Documentation

Index

• func DefaultAuthInterceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, ...) (interface{}, error)
• func NewWAFInterceptor(rules WAFRule) grpc.UnaryServerInterceptor
• type WAFRule

Functions

func DefaultAuthInterceptor

func DefaultAuthInterceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (interface{}, error)

DefaultAuthInterceptor is a no-op interceptor that allows all requests.

func NewWAFInterceptor

func NewWAFInterceptor(rules WAFRule) grpc.UnaryServerInterceptor

NewWAFInterceptor creates an interceptor that blocks requests containing specific substrings. This is a demonstration interceptor for testing/validating general interceptor logic. It shows how to implement custom security policies as gRPC interceptors.

Types

type WAFRule

type WAFRule struct {
	BlockedSubstrings []string
}

WAFRule defines a rule for the Web Application Firewall. This is an example/testing implementation to demonstrate gRPC interceptor patterns. Production systems should implement domain-specific security policies.