usercontext

Documentation

Index

• func BlockIfCASBackendNotValid(uc biz.CASBackendReader) middleware.Middleware
• func CheckUserHasAccess(allowList *conf.AllowList, userUC biz.UserOrgFinder) middleware.Middleware
• func CurrentAuthzSubject(ctx context.Context) string
• func Prometheus() middleware.Middleware
• func ResetMembershipsCache()
• func ValidateCASBackend(uc biz.CASBackendReader) middleware.Middleware
• func WithAPITokenUsageUpdater(apiTokenUC *biz.APITokenUseCase, logger *log.Helper) middleware.Middleware
• func WithAttestationContextFromAPIToken(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, ...) middleware.Middleware
• func WithAttestationContextFromFederatedInfo(orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware
• func WithAttestationContextFromRobotAccount(robotAccountUseCase *biz.RobotAccountUseCase, ...) middleware.Middleware
• func WithAttestationContextFromUser(userUC *biz.UserUseCase, logger *log.Helper) middleware.Middleware
• func WithAuthzSubject(ctx context.Context, subject string) context.Context
• func WithCurrentAPITokenAndOrgMiddleware(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, ...) middleware.Middleware
• func WithCurrentMembershipsMiddleware(membershipUC biz.MembershipsRBAC) middleware.Middleware
• func WithCurrentOrganizationMiddleware(userUseCase biz.UserOrgFinder, logger *log.Helper) middleware.Middleware
• func WithCurrentUserMiddleware(userUseCase biz.UserOrgFinder, logger *log.Helper) middleware.Middleware
• type RobotAccount
  • func CurrentRobotAccount(ctx context.Context) *RobotAccount

Functions

func BlockIfCASBackendNotValid

func BlockIfCASBackendNotValid(uc biz.CASBackendReader) middleware.Middleware

BlockIfCASBackendNotValid checks that the current organization has a valid CAS Backend configured If the CAS Backend is not valid it will block the request

func CheckUserHasAccess

func CheckUserHasAccess(allowList *conf.AllowList, userUC biz.UserOrgFinder) middleware.Middleware

Middleware that checks that the user has access to the current route Note that the source of truth is in the end the property set in the DB The value in the allowlist conf setting is used as a starting point to populate the property in the DB

func CurrentAuthzSubject

func CurrentAuthzSubject(ctx context.Context) string

func Prometheus

func Prometheus() middleware.Middleware

This package contains a set of wrappers that take grpc.UnaryInterceptors and translate them into Kratos middlewares. The reason for having these kind of wrappers is so we can sort them in the context of the rest of middlewares. Otherwise, plain grpc interceptors will be added after the chain of middlewares https://github.com/go-kratos/kratos/blob/f8b97f675b32dfad02edae12d83053c720720b5b/transport/grpc/server.go#L166

func ResetMembershipsCache

func ResetMembershipsCache()

func ValidateCASBackend

func ValidateCASBackend(uc biz.CASBackendReader) middleware.Middleware

ValidateCASBackend checks that the current organization has a valid CAS Backend configured If the last validation happened more than validationTimeOffset ago it will re-run the validation This middleware does not block the request if the CAS Backend is not valid

func WithAPITokenUsageUpdater

func WithAPITokenUsageUpdater(apiTokenUC *biz.APITokenUseCase, logger *log.Helper) middleware.Middleware

func WithAttestationContextFromAPIToken

func WithAttestationContextFromAPIToken(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

WithAttestationContextFromAPIToken injects the API-Token, organization + robot account to the context

func WithAttestationContextFromFederatedInfo

func WithAttestationContextFromFederatedInfo(orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

func WithAttestationContextFromRobotAccount

func WithAttestationContextFromRobotAccount(robotAccountUseCase *biz.RobotAccountUseCase, orgUseCase *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

WithAttestationContextFromRobotAccount Middleware that injects the current user to the context

func WithAttestationContextFromUser

func WithAttestationContextFromUser(userUC *biz.UserUseCase, logger *log.Helper) middleware.Middleware

WithAttestationContextFromUser injects the current user + organization to the context during the attestation process it leverages the existing middlewares to set the current user and organization but with a skipping behavior since that's the one required by the attMiddleware multi-selector

func WithAuthzSubject

func WithAuthzSubject(ctx context.Context, subject string) context.Context

Store the authorization subject

func WithCurrentAPITokenAndOrgMiddleware

func WithCurrentAPITokenAndOrgMiddleware(apiTokenUC *biz.APITokenUseCase, orgUC *biz.OrganizationUseCase, logger *log.Helper) middleware.Middleware

Middleware that injects the API-Token + organization to the context

func WithCurrentMembershipsMiddleware

func WithCurrentMembershipsMiddleware(membershipUC biz.MembershipsRBAC) middleware.Middleware

func WithCurrentOrganizationMiddleware

func WithCurrentOrganizationMiddleware(userUseCase biz.UserOrgFinder, logger *log.Helper) middleware.Middleware

func WithCurrentUserMiddleware

func WithCurrentUserMiddleware(userUseCase biz.UserOrgFinder, logger *log.Helper) middleware.Middleware

WithCurrentUserMiddleware injects the current user + organization to the context

Types

type RobotAccount

type RobotAccount struct {
	ID, WorkflowID, OrgID, ProviderKey string
}

func CurrentRobotAccount

func CurrentRobotAccount(ctx context.Context) *RobotAccount