iamgin

Documentation

Overview

Package iamgin exposes the IAM SDK as gin.HandlerFunc middleware.

Index

• func Authenticate(sdk *iam.SDK, opts ...iam.AuthOption) gin.HandlerFunc
• func RequireAllPerms(perms []authz.PermissionKey) gin.HandlerFunc
• func RequireAnyPerm(perms []authz.PermissionKey) gin.HandlerFunc
• func RequireNoImpersonation() gin.HandlerFunc
• func RequirePerm(perm authz.PermissionKey) gin.HandlerFunc
• func RequireStepUp(acr string) gin.HandlerFunc

Functions

func Authenticate

func Authenticate(sdk *iam.SDK, opts ...iam.AuthOption) gin.HandlerFunc

Authenticate validates the bearer token, resolves permissions, and stashes the *authz.User in the gin context chain.

func RequireAllPerms

func RequireAllPerms(perms []authz.PermissionKey) gin.HandlerFunc

RequireAllPerms accepts the request only if the caller holds every perm.

func RequireAnyPerm

func RequireAnyPerm(perms []authz.PermissionKey) gin.HandlerFunc

RequireAnyPerm accepts the request if the caller holds any of perms.

func RequireNoImpersonation

func RequireNoImpersonation() gin.HandlerFunc

RequireNoImpersonation blocks requests performed under an admin impersonation token.

func RequirePerm

func RequirePerm(perm authz.PermissionKey) gin.HandlerFunc

RequirePerm rejects the request with 403 if the caller lacks perm.

func RequireStepUp

func RequireStepUp(acr string) gin.HandlerFunc

RequireStepUp requires the JWT's acr claim to match acr.