auth

package

Go to main page

Versions in this module

v0

v0.20.0

Apr 30, 2024

v0.19.0

Apr 9, 2024

Changes in this version

type Caller

+ UnauthorizedError func(ctx context.Context, hasViewerAccess bool) error

type JobCaller

+ func (j *JobCaller) UnauthorizedError(ctx context.Context, hasViewerAccess bool) error

type MockCaller

+ func (_m *MockCaller) UnauthorizedError(ctx context.Context, hasViewerAccess bool) error

type SCIMCaller

+ func (s *SCIMCaller) UnauthorizedError(_ context.Context, hasViewerAccess bool) error

type ServiceAccountCaller

+ func (s *ServiceAccountCaller) UnauthorizedError(_ context.Context, hasViewerAccess bool) error

type SystemCaller

+ func (s *SystemCaller) UnauthorizedError(_ context.Context, _ bool) error

type UserCaller

+ func (u *UserCaller) UnauthorizedError(_ context.Context, hasViewerAccess bool) error

type VCSWorkspaceLinkCaller

+ func (v *VCSWorkspaceLinkCaller) UnauthorizedError(_ context.Context, hasViewerAccess bool) error

v0.18.0

Feb 13, 2024

v0.17.1

Jan 29, 2024

v0.17.0

Jan 26, 2024

Changes in this version

type Caller

+ IsAdmin func() bool

type JobCaller

+ func (j *JobCaller) IsAdmin() bool

type MockCaller

+ func (_m *MockCaller) IsAdmin() bool

type SCIMCaller

+ func (s *SCIMCaller) IsAdmin() bool

type ServiceAccountCaller

+ func (s *ServiceAccountCaller) IsAdmin() bool

type SystemCaller

+ func (s *SystemCaller) IsAdmin() bool

type UserCaller

+ func (u *UserCaller) IsAdmin() bool

type VCSWorkspaceLinkCaller

+ func (v *VCSWorkspaceLinkCaller) IsAdmin() bool

v0.16.0

Nov 2, 2023

v0.15.1

Oct 25, 2023

v0.15.0

Oct 24, 2023

v0.14.0

Oct 23, 2023

v0.13.0

Oct 17, 2023

v0.12.3

Oct 4, 2023

v0.12.2

Sep 12, 2023

v0.12.1

Aug 14, 2023

v0.12.0

Jul 27, 2023

v0.11.0

Jun 19, 2023

Changes in this version

+ func GetSubject(ctx context.Context) *string

+ func WithSubject(ctx context.Context, subject string) context.Context

type Caller

+ func GetCaller(ctx context.Context) Caller

v0.10.2

Apr 20, 2023

v0.10.1

Apr 19, 2023

v0.10.0

Apr 12, 2023

v0.9.0

Apr 5, 2023

Changes in this version

+ func WithApplyID(id string) func(*constraints)

+ func WithGroupID(id string) func(*constraints)

+ func WithJobID(id string) func(*constraints)

+ func WithNamespacePath(namespacePath string) func(*constraints)

+ func WithNamespacePaths(namespacePaths []string) func(*constraints)

+ func WithPlanID(id string) func(*constraints)

+ func WithRunID(id string) func(*constraints)

+ func WithRunnerID(id string) func(*constraints)

+ func WithTeamID(id string) func(*constraints)

+ func WithUserID(id string) func(*constraints)

+ func WithWorkspaceID(id string) func(*constraints)

type Authorizer

+ RequireAccess func(ctx context.Context, perms []permissions.Permission, ...) error

+ RequireAccessToInheritableResource func(ctx context.Context, resourceTypes []permissions.ResourceType, ...) error

type Caller

+ RequireAccessToInheritableResource func(ctx context.Context, resourceType permissions.ResourceType, ...) error

+ RequirePermission func(ctx context.Context, perms permissions.Permission, ...) error

type JobCaller

+ func (j *JobCaller) RequireAccessToInheritableResource(ctx context.Context, _ permissions.ResourceType, checks ...func(*constraints)) error

+ func (j *JobCaller) RequirePermission(ctx context.Context, perm permissions.Permission, checks ...func(*constraints)) error

type MockAuthorizer

+ func (_m *MockAuthorizer) RequireAccess(ctx context.Context, perms []permissions.Permission, ...) error

+ func (_m *MockAuthorizer) RequireAccessToInheritableResource(ctx context.Context, resourceTypes []permissions.ResourceType, ...) error

type MockCaller

+ func (_m *MockCaller) RequireAccessToInheritableResource(ctx context.Context, resourceType permissions.ResourceType, ...) error

+ func (_m *MockCaller) RequirePermission(ctx context.Context, perms permissions.Permission, ...) error

type SCIMCaller

+ func (s *SCIMCaller) RequireAccessToInheritableResource(ctx context.Context, _ permissions.ResourceType, _ ...func(*constraints)) error

+ func (s *SCIMCaller) RequirePermission(ctx context.Context, perm permissions.Permission, checks ...func(*constraints)) error

type ServiceAccountCaller

+ func (s *ServiceAccountCaller) RequireAccessToInheritableResource(ctx context.Context, resourceType permissions.ResourceType, ...) error

+ func (s *ServiceAccountCaller) RequirePermission(ctx context.Context, perm permissions.Permission, checks ...func(*constraints)) error

type SystemCaller

+ func (s *SystemCaller) RequireAccessToInheritableResource(_ context.Context, _ permissions.ResourceType, _ ...func(*constraints)) error

+ func (s *SystemCaller) RequirePermission(_ context.Context, _ permissions.Permission, _ ...func(*constraints)) error

type UserCaller

+ func (u *UserCaller) RequireAccessToInheritableResource(ctx context.Context, resourceType permissions.ResourceType, ...) error

+ func (u *UserCaller) RequirePermission(ctx context.Context, perm permissions.Permission, checks ...func(*constraints)) error

type VCSWorkspaceLinkCaller

+ func (v *VCSWorkspaceLinkCaller) RequireAccessToInheritableResource(ctx context.Context, _ permissions.ResourceType, _ ...func(*constraints)) error

+ func (v *VCSWorkspaceLinkCaller) RequirePermission(ctx context.Context, perm permissions.Permission, checks ...func(*constraints)) error

v0.8.0

Mar 30, 2023

Changes in this version

type Caller

+ RequireRunnerAccess func(ctx context.Context, runnerID string) error

type JobCaller

+ func (j *JobCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

type MockCaller

+ func (_m *MockCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

type SCIMCaller

+ func (s *SCIMCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

type ServiceAccountCaller

+ func (s *ServiceAccountCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

type SystemCaller

+ func (s *SystemCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

type UserCaller

+ func (u *UserCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

type VCSWorkspaceLinkCaller

+ func (v *VCSWorkspaceLinkCaller) RequireRunnerAccess(ctx context.Context, runnerID string) error

v0.7.0

Mar 22, 2023

v0.6.0

Mar 2, 2023

v0.5.2

Feb 22, 2023

v0.5.1

Feb 21, 2023

v0.5.0

Feb 16, 2023

v0.4.0

Feb 9, 2023

v0.3.0

Feb 3, 2023

v0.2.2

Jan 27, 2023

v0.2.1

Jan 26, 2023

v0.2.0

Jan 24, 2023

v0.1.1

Jan 17, 2023

v0.1.0

Jan 6, 2023

Changes in this version

+ const JobTokenType

+ const SCIMTokenType

+ const ServiceAccountTokenType

+ const VCSWorkspaceLinkTokenType

+ func FindToken(r *http.Request) string

+ func HandleCaller(ctx context.Context, ...) error

+ func ParseUsername(username string) string

+ func WithCaller(ctx context.Context, caller Caller) context.Context

+ type Authenticator struct

+ func NewAuthenticator(userAuth *UserAuth, idp *IdentityProvider, dbClient *db.Client, ...) *Authenticator

+ func (a *Authenticator) Authenticate(ctx context.Context, tokenString string, useCache bool) (Caller, error)

+ type Authorizer interface

+ GetRootNamespaces func(ctx context.Context) ([]models.MembershipNamespace, error)

+ RequireAccessToGroup func(ctx context.Context, groupID string, accessLevel models.Role) error

+ RequireAccessToInheritedGroupResource func(ctx context.Context, groupID string) error

+ RequireAccessToInheritedNamespaceResource func(ctx context.Context, namespace string) error

+ RequireAccessToNamespace func(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ RequireAccessToWorkspace func(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ RequireViewerAccessToGroups func(ctx context.Context, groups []models.Group) error

+ RequireViewerAccessToNamespaces func(ctx context.Context, requiredNamespaces []string) error

+ RequireViewerAccessToWorkspaces func(ctx context.Context, workspaces []models.Workspace) error

+ type Caller interface

+ GetNamespaceAccessPolicy func(ctx context.Context) (*NamespaceAccessPolicy, error)

+ GetSubject func() string

+ RequireAccessToGroup func(ctx context.Context, groupID string, accessLevel models.Role) error

+ RequireAccessToInheritedGroupResource func(ctx context.Context, groupID string) error

+ RequireAccessToInheritedNamespaceResource func(ctx context.Context, namespace string) error

+ RequireAccessToNamespace func(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ RequireAccessToWorkspace func(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ RequireApplyWriteAccess func(ctx context.Context, applyID string) error

+ RequireJobWriteAccess func(ctx context.Context, jobID string) error

+ RequirePlanWriteAccess func(ctx context.Context, planID string) error

+ RequireRunWriteAccess func(ctx context.Context, runID string) error

+ RequireTeamCreateAccess func(ctx context.Context) error

+ RequireTeamDeleteAccess func(ctx context.Context, teamID string) error

+ RequireTeamUpdateAccess func(ctx context.Context, teamID string) error

+ RequireUserCreateAccess func(ctx context.Context) error

+ RequireUserDeleteAccess func(ctx context.Context, userID string) error

+ RequireUserUpdateAccess func(ctx context.Context, userID string) error

+ RequireViewerAccessToGroups func(ctx context.Context, groups []models.Group) error

+ RequireViewerAccessToNamespaces func(ctx context.Context, namespaces []string) error

+ RequireViewerAccessToWorkspaces func(ctx context.Context, workspaces []models.Workspace) error

+ func AuthorizeCaller(ctx context.Context) (Caller, error)

+ type IdentityProvider struct

+ func NewIdentityProvider(jwsPlugin jwsprovider.JWSProvider, issuerURL string) *IdentityProvider

+ func (s *IdentityProvider) GenerateToken(ctx context.Context, input *TokenInput) ([]byte, error)

+ func (s *IdentityProvider) VerifyToken(ctx context.Context, token string) (*VerifyTokenOutput, error)

+ type IdentityProviderConfig struct

+ AuthEndpoint string

+ ClientID string

+ Issuer string

+ JwksURI string

+ TokenEndpoint string

+ UsernameClaim string

+ type JobCaller struct

+ JobID string

+ RunID string

+ WorkspaceID string

+ func (j *JobCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (j *JobCaller) GetSubject() string

+ func (j *JobCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (j *JobCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (j *JobCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (j *JobCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (j *JobCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (j *JobCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (j *JobCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (j *JobCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (j *JobCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (j *JobCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (j *JobCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (j *JobCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (j *JobCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (j *JobCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (j *JobCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (j *JobCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (j *JobCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (j *JobCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type MockAuthorizer struct

+ func NewMockAuthorizer(t mockConstructorTestingTNewMockAuthorizer) *MockAuthorizer

+ func (_m *MockAuthorizer) GetRootNamespaces(ctx context.Context) ([]models.MembershipNamespace, error)

+ func (_m *MockAuthorizer) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (_m *MockAuthorizer) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (_m *MockAuthorizer) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (_m *MockAuthorizer) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (_m *MockAuthorizer) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (_m *MockAuthorizer) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (_m *MockAuthorizer) RequireViewerAccessToNamespaces(ctx context.Context, requiredNamespaces []string) error

+ func (_m *MockAuthorizer) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type MockCaller struct

+ func NewMockCaller(t mockConstructorTestingTNewMockCaller) *MockCaller

+ func (_m *MockCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (_m *MockCaller) GetSubject() string

+ func (_m *MockCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (_m *MockCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (_m *MockCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (_m *MockCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (_m *MockCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (_m *MockCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (_m *MockCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (_m *MockCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (_m *MockCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (_m *MockCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (_m *MockCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (_m *MockCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (_m *MockCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (_m *MockCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (_m *MockCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (_m *MockCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (_m *MockCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (_m *MockCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type NamespaceAccessPolicy struct

+ AllowAll bool

+ RootNamespaceIDs []string

+ type OIDCConfiguration struct

+ AuthEndpoint string

+ Issuer string

+ JwksURI string

+ TokenEndpoint string

+ type OpenIDConfigFetcher struct

+ Client *retryablehttp.Client

+ func NewOpenIDConfigFetcher() *OpenIDConfigFetcher

+ func (o *OpenIDConfigFetcher) GetOpenIDConfig(ctx context.Context, issuer string) (*OIDCConfiguration, error)

+ type SCIMCaller struct

+ func NewSCIMCaller(dbClient *db.Client) *SCIMCaller

+ func (s *SCIMCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (s *SCIMCaller) GetSubject() string

+ func (s *SCIMCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (s *SCIMCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (s *SCIMCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (s *SCIMCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (s *SCIMCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (s *SCIMCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (s *SCIMCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (s *SCIMCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (s *SCIMCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (s *SCIMCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (s *SCIMCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (s *SCIMCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (s *SCIMCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (s *SCIMCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (s *SCIMCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (s *SCIMCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (s *SCIMCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (s *SCIMCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type ServiceAccountCaller struct

+ ServiceAccountID string

+ ServiceAccountPath string

+ func NewServiceAccountCaller(id string, path string, authorizer Authorizer) *ServiceAccountCaller

+ func (s *ServiceAccountCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (s *ServiceAccountCaller) GetSubject() string

+ func (s *ServiceAccountCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (s *ServiceAccountCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (s *ServiceAccountCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (s *ServiceAccountCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (s *ServiceAccountCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (s *ServiceAccountCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (s *ServiceAccountCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (s *ServiceAccountCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (s *ServiceAccountCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (s *ServiceAccountCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (s *ServiceAccountCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (s *ServiceAccountCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (s *ServiceAccountCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (s *ServiceAccountCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (s *ServiceAccountCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (s *ServiceAccountCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (s *ServiceAccountCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (s *ServiceAccountCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type SystemCaller struct

+ func (s *SystemCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (s *SystemCaller) GetSubject() string

+ func (s *SystemCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (s *SystemCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (s *SystemCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (s *SystemCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (s *SystemCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (s *SystemCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (s *SystemCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (s *SystemCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (s *SystemCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (s *SystemCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (s *SystemCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (s *SystemCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (s *SystemCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (s *SystemCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (s *SystemCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (s *SystemCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (s *SystemCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (s *SystemCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type TokenInput struct

+ Claims map[string]string

+ Expiration *time.Time

+ JwtID string

+ Subject string

+ type UserAuth struct

+ func NewUserAuth(ctx context.Context, identityProviders []IdentityProviderConfig, ...) *UserAuth

+ func (u *UserAuth) Authenticate(ctx context.Context, tokenString string, useCache bool) (*UserCaller, error)

+ func (u *UserAuth) GetUsernameClaim(token jwt.Token) (string, error)

+ type UserCaller struct

+ User *models.User

+ func NewUserCaller(user *models.User, authorizer Authorizer, dbClient *db.Client) *UserCaller

+ func (u *UserCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (u *UserCaller) GetSubject() string

+ func (u *UserCaller) GetTeams(ctx context.Context) ([]models.Team, error)

+ func (u *UserCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (u *UserCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (u *UserCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (u *UserCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (u *UserCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (u *UserCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (u *UserCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (u *UserCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (u *UserCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (u *UserCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (u *UserCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (u *UserCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (u *UserCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (u *UserCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (u *UserCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (u *UserCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (u *UserCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (u *UserCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type VCSWorkspaceLinkCaller struct

+ Link *models.WorkspaceVCSProviderLink

+ Provider *models.VCSProvider

+ func NewVCSWorkspaceLinkCaller(provider *models.VCSProvider, link *models.WorkspaceVCSProviderLink, ...) *VCSWorkspaceLinkCaller

+ func (v *VCSWorkspaceLinkCaller) GetNamespaceAccessPolicy(ctx context.Context) (*NamespaceAccessPolicy, error)

+ func (v *VCSWorkspaceLinkCaller) GetSubject() string

+ func (v *VCSWorkspaceLinkCaller) RequireAccessToGroup(ctx context.Context, groupID string, accessLevel models.Role) error

+ func (v *VCSWorkspaceLinkCaller) RequireAccessToInheritedGroupResource(ctx context.Context, groupID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireAccessToInheritedNamespaceResource(ctx context.Context, namespace string) error

+ func (v *VCSWorkspaceLinkCaller) RequireAccessToNamespace(ctx context.Context, namespacePath string, accessLevel models.Role) error

+ func (v *VCSWorkspaceLinkCaller) RequireAccessToWorkspace(ctx context.Context, workspaceID string, accessLevel models.Role) error

+ func (v *VCSWorkspaceLinkCaller) RequireApplyWriteAccess(ctx context.Context, applyID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireJobWriteAccess(ctx context.Context, jobID string) error

+ func (v *VCSWorkspaceLinkCaller) RequirePlanWriteAccess(ctx context.Context, planID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireRunWriteAccess(ctx context.Context, runID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireTeamCreateAccess(ctx context.Context) error

+ func (v *VCSWorkspaceLinkCaller) RequireTeamDeleteAccess(ctx context.Context, teamID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireTeamUpdateAccess(ctx context.Context, teamID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireUserCreateAccess(ctx context.Context) error

+ func (v *VCSWorkspaceLinkCaller) RequireUserDeleteAccess(ctx context.Context, userID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireUserUpdateAccess(ctx context.Context, userID string) error

+ func (v *VCSWorkspaceLinkCaller) RequireViewerAccessToGroups(ctx context.Context, groups []models.Group) error

+ func (v *VCSWorkspaceLinkCaller) RequireViewerAccessToNamespaces(ctx context.Context, namespaces []string) error

+ func (v *VCSWorkspaceLinkCaller) RequireViewerAccessToWorkspaces(ctx context.Context, workspaces []models.Workspace) error

+ type VerifyTokenOutput struct

+ PrivateClaims map[string]string

+ Token jwt.Token

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL