Help us shape the future of Go! Take the 2026 Go Developer Survey

hostauthz

package
v1.19.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Overview

Package hostauthz authorizes an actor host report against the caller's SPIFFE identity, shared by the placement service and the scheduler's placement server.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func Authorize added in v1.19.0 

func Authorize(ctx context.Context, sec security.Handler, r Report) error

Authorize rejects a report whose app ID or namespace does not match the caller's SPIFFE identity, and reports claiming internal actor types (dapr.internal.<namespace>.<appid>.*) which do not belong to the reporting app. With mTLS disabled only the actor type check applies.

func InternalActorType 

func InternalActorType(actorType, ns, appID string) (internal, owned bool)

InternalActorType reports whether actorType is a reserved internal actor type (dapr.internal.*) and, if so, whether it belongs to appID in namespace ns, that is whether it is "dapr.internal.<ns>.<appID>" or starts with it followed by a dot. The owner is matched as a prefix rather than parsed out of the type because a self-hosted namespace may contain dots; an app ID cannot, so the match is unambiguous within a namespace. A malformed internal type, such as one with an empty segment, is internal and owned by no one.

Types

type Report added in v1.19.0 

type Report struct {
	AppID      string
	Namespace  string
	ActorTypes []string
}

Report is the identity-relevant content of an actor host report.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.