usercontext

Documentation

Index

• func CheckOrgRequirements(uc biz.CASBackendReader) middleware.Middleware
• func CheckUserHasAccess(allowList *conf.AllowList, userUC biz.UserOrgFinder) middleware.Middleware
• func CurrentAuthzSubject(ctx context.Context) string
• func Prometheus() middleware.Middleware
• func ResetMembershipsCache()
• func WithAPITokenUsageUpdater(apiTokenUC *biz.APITokenUseCase, logger *log.Helper) middleware.Middleware
• func WithAttestationContextFromAPIToken(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, ...) middleware.Middleware
• func WithAttestationContextFromFederatedInfo(orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware
• func WithAttestationContextFromRobotAccount(robotAccountUseCase *biz.RobotAccountUseCase, ...) middleware.Middleware
• func WithAttestationContextFromUser(userUC *biz.UserUseCase, membershipUC *biz.MembershipUseCase, ...) middleware.Middleware
• func WithAuthzSubject(ctx context.Context, subject string) context.Context
• func WithCurrentAPITokenAndOrgMiddleware(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, ...) middleware.Middleware
• func WithCurrentOrganizationMiddleware(userUseCase biz.UserOrgFinder, membershipUC biz.MembershipsRBAC, ...) middleware.Middleware
• func WithCurrentUserMiddleware(userUseCase biz.UserOrgFinder, logger *log.Helper) middleware.Middleware
• type RobotAccount
  • func CurrentRobotAccount(ctx context.Context) *RobotAccount

Functions

func CheckOrgRequirements

func CheckOrgRequirements(uc biz.CASBackendReader) middleware.Middleware

func CheckUserHasAccess

func CheckUserHasAccess(allowList *conf.AllowList, userUC biz.UserOrgFinder) middleware.Middleware

Middleware that checks that the user has access to the current route Note that the source of truth is in the end the property set in the DB The value in the allowlist conf setting is used as a starting point to populate the property in the DB

func CurrentAuthzSubject

func CurrentAuthzSubject(ctx context.Context) string

func Prometheus

func Prometheus() middleware.Middleware

This package contains a set of wrappers that take grpc.UnaryInterceptors and translate them into Kratos middlewares. The reason for having these kind of wrappers is so we can sort them in the context of the rest of middlewares. Otherwise, plain grpc interceptors will be added after the chain of middlewares https://github.com/go-kratos/kratos/blob/f8b97f675b32dfad02edae12d83053c720720b5b/transport/grpc/server.go#L166

func ResetMembershipsCache

func ResetMembershipsCache()

func WithAPITokenUsageUpdater

func WithAPITokenUsageUpdater(apiTokenUC *biz.APITokenUseCase, logger *log.Helper) middleware.Middleware

func WithAttestationContextFromAPIToken

func WithAttestationContextFromAPIToken(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

WithAttestationContextFromAPIToken injects the API-Token, organization + robot account to the context

func WithAttestationContextFromFederatedInfo

func WithAttestationContextFromFederatedInfo(orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

func WithAttestationContextFromRobotAccount

func WithAttestationContextFromRobotAccount(robotAccountUseCase *biz.RobotAccountUseCase, orgUseCase *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

WithAttestationContextFromRobotAccount Middleware that injects the current user to the context

func WithAttestationContextFromUser

func WithAttestationContextFromUser(userUC *biz.UserUseCase, membershipUC *biz.MembershipUseCase, logger *log.Helper) middleware.Middleware

WithAttestationContextFromUser injects the current user + organization to the context during the attestation process it leverages the existing middlewares to set the current user and organization but with a skipping behavior since that's the one required by the attMiddleware multi-selector

func WithAuthzSubject

func WithAuthzSubject(ctx context.Context, subject string) context.Context

Store the authorization subject

func WithCurrentAPITokenAndOrgMiddleware

func WithCurrentAPITokenAndOrgMiddleware(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

Middleware that injects the API-Token + organization to the context

func WithCurrentOrganizationMiddleware

func WithCurrentOrganizationMiddleware(userUseCase biz.UserOrgFinder, membershipUC biz.MembershipsRBAC, logger *log.Helper) middleware.Middleware

func WithCurrentUserMiddleware

func WithCurrentUserMiddleware(userUseCase biz.UserOrgFinder, logger *log.Helper) middleware.Middleware

WithCurrentUserMiddleware injects the current user + organization to the context

Types

type RobotAccount

type RobotAccount struct {
	ID, WorkflowID, OrgID, ProviderKey string
}

func CurrentRobotAccount

func CurrentRobotAccount(ctx context.Context) *RobotAccount