server

type Authenticator interface {
	AuthenticateHTTP(*http.Request) (Principal, error)
}

type Authorizer interface {
	AuthorizeQuery(context.Context, Principal, string, meldbase.QuerySpec) (QueryPolicy, error)
	AuthorizeInsert(context.Context, Principal, string, meldbase.Document) (InsertPolicy, error)
	AuthorizeUpdate(context.Context, Principal, string, meldbase.QuerySpec, meldbase.MutationSpec) (UpdatePolicy, error)
	AuthorizeDelete(context.Context, Principal, string, meldbase.QuerySpec) (DeletePolicy, error)
}

type Config struct {
	DB                            *meldbase.DB
	Authenticator                 Authenticator
	Authorizer                    Authorizer
	PublicRealtimeURL             string
	OriginPatterns                []string
	AllowedHTTPOrigins            []string
	TicketTTL                     time.Duration
	ResumeTokenKey                []byte
	ResumeTokenTTL                time.Duration
	MaxBodyBytes                  int
	MaxSubscriptionsPerConnection int
	QueryLimits                   meldbase.QueryLimits
}

type DeletePolicy struct {
	QueryPolicy
	MaxAffected int
}

type Handler struct {
	// contains filtered or unexported fields
}

type InsertPolicy struct {
	AllowAllInputFields  bool
	AllowedInputFields   map[string]struct{}
	SetFields            meldbase.Document
	AllowAllResultFields bool
	AllowedResultFields  map[string]struct{}
}

type Principal struct {
	Subject string
	Tenant  string
}

type QueryPolicy struct {
	PolicyVersion        string
	Constraint           *meldbase.QuerySpec
	MaxResults           int
	AllowAllQueryPaths   bool
	AllowedQueryPaths    map[string]struct{}
	AllowAllResultFields bool
	AllowedResultFields  map[string]struct{}
}

type UpdatePolicy struct {
	QueryPolicy
	AllowAllUpdatePaths bool
	AllowedUpdatePaths  map[string]struct{}
	MaxAffected         int
}