intercepter

Documentation

Index

• func GetMethodPolicy(fullMethodName string) (*pb.Policy, error)
• func PolicyVerifierInterceptor(permissionVerifierClient client.PermissionVerifierClient) grpc.UnaryServerInterceptor
• func ResourcePolicyInterceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, ...) (resp interface{}, err error)
• func WithPolicy(ctx context.Context, resource, action string) context.Context
• func WithPolicyMetadata(ctx context.Context, pm *Policy) context.Context
• type Policy
  • func PolicyFromContext(ctx context.Context) (*Policy, bool)
• type RPCMethod

Functions

func GetMethodPolicy

func GetMethodPolicy(fullMethodName string) (*pb.Policy, error)

GetMethodPolicy protobufメソッドから権限情報を取得

func PolicyVerifierInterceptor

func PolicyVerifierInterceptor(permissionVerifierClient client.PermissionVerifierClient) grpc.UnaryServerInterceptor

PolicyVerifierInterceptor 認可チェックを行うインターセプター

func ResourcePolicyInterceptor

func ResourcePolicyInterceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (resp interface{}, err error)

ResourcePolicyInterceptor protobufオプションとリクエストからリソースを解決

func WithPolicy

func WithPolicy(ctx context.Context, resource, action string) context.Context

func WithPolicyMetadata

func WithPolicyMetadata(ctx context.Context, pm *Policy) context.Context

Types

type Policy

type Policy struct {
	Resource string
	Action   string
}

func PolicyFromContext

func PolicyFromContext(ctx context.Context) (*Policy, bool)

type RPCMethod

type RPCMethod struct {
	Service string
	Method  string
}

RPCMethod は gRPC のフルメソッド名を分解した構造体