Documentation
¶
Index ¶
Constants ¶
const ( SecretsInvalidRequestMessage = "Invalid secrets request" SecretsNotFoundMessage = "Secret not found" SecretsConflictMessage = "Secret cannot be modified in its current state" SecretsBackendMessage = "Secrets backend error" SecretsBackendTimeoutMessage = "Secrets backend timed out" )
The fixed public messages shared by everything that can answer a secrets request: this package, the request-validation error handler, and the handlers. A caller learns the class of the failure and nothing else.
Variables ¶
This section is empty.
Functions ¶
func CheckTeamAccessForRoute ¶
CheckTeamAccessForRoute applies CheckTeamBanned + the api blocked-team allowlist to a late-resolved team.
func EnforceBlockedTeam ¶
func EnforceBlockedTeam() gin.HandlerFunc
EnforceBlockedTeam returns the gin middleware for the api service, configured with the api-specific blocked-team allowlist.
func InitLaunchDarklyContext ¶
func IsSecretsRoute ¶
IsSecretsRoute reports whether a request targets the secret management path family. It answers for unmatched paths too, so a 404 below /secrets is treated as confidentially as a matched route.
func NoStoreSecrets ¶
func NoStoreSecrets() gin.HandlerFunc
NoStoreSecrets marks every response on the secrets path family before any later layer writes, whichever one answers: auth, validation, the rate limiter, the handlers, or a recovered panic. Gin's own canonical-path redirects bypass the middleware chain and are deliberately not covered: they carry no body and no customer data.
Types ¶
This section is empty.
Source Files
Directories