auth

Documentation

Overview

pkg/auth/casbin.go

Index

• func APIRateLimitMiddleware() gin.HandlerFunc
• func AdminRequiredMiddleware() gin.HandlerFunc
• func AuditMiddleware(auditService interface{}) gin.HandlerFunc
• func GenerateToken(user *models.User) (string, time.Time, error)
• func GetCurrentUser(c *gin.Context) (uint, string, string, bool)
• func InitCasbin(db *gorm.DB) (*casbin.Enforcer, error)
• func InitializeRateLimiter(config *configs.RateLimitConfig)
• func JWTAuthMiddleware() gin.HandlerFunc
• func JWTAuthWithSessionMiddleware(securityService interface{}) gin.HandlerFunc
• func LoginRateLimitMiddleware() gin.HandlerFunc
• func OptionalAuthMiddleware() gin.HandlerFunc
• func RateLimitMiddleware(requestType string) gin.HandlerFunc
• type CasbinBuilder
  • func NewCasbinBuilder() *CasbinBuilder
  • func (r *CasbinBuilder) CasbinMiddleware(e *casbin.Enforcer) gin.HandlerFunc
  • func (r *CasbinBuilder) IgnorePath(path string) *CasbinBuilder
• type JWTClaims
  • func ParseToken(tokenString string) (*JWTClaims, error)
• type RateLimiter
  • func NewRateLimiter(config *configs.RateLimitConfig) *RateLimiter
  • func (rl *RateLimiter) IsAllowed(ip string, requestType string) bool

Functions

func APIRateLimitMiddleware

func APIRateLimitMiddleware() gin.HandlerFunc

APIRateLimitMiddleware rate limiting middleware for general API requests

func AdminRequiredMiddleware

func AdminRequiredMiddleware() gin.HandlerFunc

AdminRequiredMiddleware admin privilege middleware

func AuditMiddleware

func AuditMiddleware(auditService interface{}) gin.HandlerFunc

AuditMiddleware creates middleware for auditing API requests

func GenerateToken

func GenerateToken(user *models.User) (string, time.Time, error)

GenerateToken generates JWT token

func GetCurrentUser

func GetCurrentUser(c *gin.Context) (uint, string, string, bool)

GetCurrentUser gets current user information from context

func InitCasbin

func InitCasbin(db *gorm.DB) (*casbin.Enforcer, error)

InitCasbin initializes RBAC permission control

func InitializeRateLimiter

func InitializeRateLimiter(config *configs.RateLimitConfig)

InitializeRateLimiter initializes the global rate limiter

func JWTAuthMiddleware

func JWTAuthMiddleware() gin.HandlerFunc

JWTAuthMiddleware JWT authentication middleware

func JWTAuthWithSessionMiddleware

func JWTAuthWithSessionMiddleware(securityService interface{}) gin.HandlerFunc

JWTAuthWithSessionMiddleware JWT authentication middleware with session validation

func LoginRateLimitMiddleware

func LoginRateLimitMiddleware() gin.HandlerFunc

LoginRateLimitMiddleware rate limiting middleware specifically for login attempts

func OptionalAuthMiddleware

func OptionalAuthMiddleware() gin.HandlerFunc

OptionalAuthMiddleware optional authentication middleware (does not require mandatory login)

func RateLimitMiddleware

func RateLimitMiddleware(requestType string) gin.HandlerFunc

RateLimitMiddleware creates a rate limiting middleware

Types

type CasbinBuilder

type CasbinBuilder struct {
	IgnorePaths []string
}

func NewCasbinBuilder

func NewCasbinBuilder() *CasbinBuilder

func (*CasbinBuilder) CasbinMiddleware

func (r *CasbinBuilder) CasbinMiddleware(e *casbin.Enforcer) gin.HandlerFunc

CasbinMiddleware returns a Gin middleware handler function

func (*CasbinBuilder) IgnorePath

func (r *CasbinBuilder) IgnorePath(path string) *CasbinBuilder

IgnorePath allows chained calls to add paths that need to be ignored

type JWTClaims

type JWTClaims struct {
	UserID   uint   `json:"user_id"`
	Username string `json:"username"`
	Role     string `json:"role"`
	jwt.RegisteredClaims
}

func ParseToken

func ParseToken(tokenString string) (*JWTClaims, error)

ParseToken parses JWT token

type RateLimiter

type RateLimiter struct {
	// contains filtered or unexported fields
}

RateLimiter represents a rate limiter for API requests

func NewRateLimiter

func NewRateLimiter(config *configs.RateLimitConfig) *RateLimiter

NewRateLimiter creates a new rate limiter

func (*RateLimiter) IsAllowed

func (rl *RateLimiter) IsAllowed(ip string, requestType string) bool

IsAllowed checks if a request from the given IP is allowed