auth

type Action ¶

type Action string

Action represents an action that can be performed on an object

type AllwaysMatchObjectScope ¶

type AllwaysMatchObjectScope struct{}

AllwaysMatchObjectScope is a special ObjectScope that always matches any identity

func (a AllwaysMatchObjectScope) Matches(identity *Identity) bool

type Authenticator ¶

type Authenticator interface {
	Authenticate(ctx context.Context, token string) (*Identity, error)
	Health(ctx context.Context) error
}

type AuthorizationRule ¶

type AuthorizationRule struct {
	Roles  []Role
	Action Action
	Object ObjectType
}

AuthorizationRule represents a single authorization rule with roles, action, and object

type Authorizer ¶

type Authorizer interface {
	Authorize(identity *Identity, action Action, oject ObjectType, objectScope ObjectScope) error
}

type CompositeAuthenticator ¶

type CompositeAuthenticator struct {
	// contains filtered or unexported fields
}

CompositeAuthenticator implements Authenticator by trying multiple authenticators in order

func NewCompositeAuthenticator(authenticators ...Authenticator) *CompositeAuthenticator

func (c *CompositeAuthenticator) Authenticate(ctx context.Context, token string) (*Identity, error)

func (c *CompositeAuthenticator) Health(ctx context.Context) error

type DefaultObjectScope ¶

type DefaultObjectScope struct {
	ParticipantID *properties.UUID
	ProviderID    *properties.UUID
	ConsumerID    *properties.UUID
	AgentID       *properties.UUID
}

DefaultObjectScope is the default implementation of ObjectScope

func (target *DefaultObjectScope) Matches(id *Identity) bool

type Identity ¶

type Identity struct {
	ID    properties.UUID
	Name  string
	Role  Role
	Scope IdentityScope
}

Identity implements the Identifier interface

func MustGetIdentity(ctx context.Context) *Identity

func (m *Identity) HasRole(role Role) bool

func (m *Identity) Validate() error

type IdentityScope ¶

type IdentityScope struct {
	ParticipantID *properties.UUID
	AgentID       *properties.UUID
}

type ObjectScope ¶

type ObjectScope interface {
	Matches(identity *Identity) bool
}

ObjectScope defines the target object scope in the authorization system

type ObjectType ¶

type ObjectType string

ObjectType represents a target object type in the authorization system

type Role ¶

type Role string

Role represents a role in the authorization system

const (
	RoleAdmin       Role = "admin"
	RoleParticipant Role = "participant"
	RoleAgent       Role = "agent"
)

func (r Role) Validate() error

type RuleBasedAuthorizer ¶

type RuleBasedAuthorizer struct {
	// contains filtered or unexported fields
}

RuleBasedAuthorizer implements the Authorizer interface using a set of predefined rules

func NewRuleBasedAuthorizer(rules []AuthorizationRule) *RuleBasedAuthorizer

func (a *RuleBasedAuthorizer) Authorize(identity *Identity, action Action, object ObjectType, objectContext ObjectScope) error