resolver

Documentation

Overview

Package resolver provides the GroupResolver interface and implementations.

Index

• type GoogleResolver
  • func NewGoogleResolver(logger *slog.Logger, saKeyJSON []byte, adminEmail string) *GoogleResolver
  • func (r *GoogleResolver) ResolveGroups(ctx context.Context, email string) ([]string, error)
• type GroupResolver

Types

type GoogleResolver

type GoogleResolver struct {
	// contains filtered or unexported fields
}

GoogleResolver implements GroupResolver using the Google Admin SDK Directory API. It uses domain-wide delegation with a service account impersonating an admin user.

func NewGoogleResolver

func NewGoogleResolver(logger *slog.Logger, saKeyJSON []byte, adminEmail string) *GoogleResolver

NewGoogleResolver creates a new GoogleResolver. saKeyJSON is the service account key file content. adminEmail is the admin user to impersonate for domain-wide delegation.

func (*GoogleResolver) ResolveGroups

func (r *GoogleResolver) ResolveGroups(ctx context.Context, email string) ([]string, error)

ResolveGroups lists all groups the user belongs to using the Google Admin SDK.

type GroupResolver

type GroupResolver interface {
	// ResolveGroups returns the list of group email addresses that the given user belongs to.
	ResolveGroups(ctx context.Context, email string) ([]string, error)
}

GroupResolver resolves Google Workspace group memberships for a user email.