Documentation
¶
Index ¶
- func GetPageSize(ctx context.Context, pageSize int32) int32
- func GetPageSizeByStructure(ctx context.Context, pageSize int32, structure adminv1.Structure) int32
- func GetUserID(ctx context.Context) (int64, error)
- func I18NName(name string) string
- func MetadataJSON(metadata map[string]string) string
- func MetadataParse(rawBody string) map[string]string
- type KnownAdminAPI
- func (a *KnownAdminAPI) ConfirmAuthMFASetup(ctx context.Context, req *adminv1.ConfirmAuthMFASetupRequest) (*adminv1.AuthToken, error)
- func (a *KnownAdminAPI) ConfirmUserMFA(ctx context.Context, req *adminv1.ConfirmUserMFARequest) (*adminv1.ConfirmUserMFAResponse, error)
- func (a *KnownAdminAPI) CreateAuthLogin(ctx context.Context, req *adminv1.CreateAuthLoginRequest) (*adminv1.AuthToken, error)
- func (a *KnownAdminAPI) CreateAuthProvider(ctx context.Context, req *adminv1.CreateAuthProviderRequest) (*adminv1.AuthProvider, error)
- func (a *KnownAdminAPI) CreateAuthToken(ctx context.Context, req *adminv1.CreateAuthTokenRequest) (*adminv1.AuthToken, error)
- func (a *KnownAdminAPI) CreateCredential(ctx context.Context, req *adminv1.CreateCredentialRequest) (*adminv1.Credential, error)
- func (a *KnownAdminAPI) CreateDatabaseInitialize(ctx context.Context, req *adminv1.CreateDatabaseInitializeRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) CreateDepartment(ctx context.Context, req *adminv1.CreateDepartmentRequest) (*adminv1.Department, error)
- func (a *KnownAdminAPI) CreateDepartmentMembers(ctx context.Context, req *adminv1.CreateDepartmentMembersRequest) (*adminv1.CreateDepartmentMembersResponse, error)
- func (a *KnownAdminAPI) CreateGroup(ctx context.Context, req *adminv1.CreateGroupRequest) (*adminv1.Group, error)
- func (a *KnownAdminAPI) CreateGroupMembers(ctx context.Context, req *adminv1.CreateGroupMembersRequest) (*adminv1.CreateGroupMembersResponse, error)
- func (a *KnownAdminAPI) CreateMenu(ctx context.Context, req *adminv1.CreateMenuRequest) (*adminv1.Menu, error)
- func (a *KnownAdminAPI) CreateOAuth2Client(ctx context.Context, req *adminv1.CreateOAuth2ClientRequest) (*adminv1.CreateOAuth2ClientResponse, error)
- func (a *KnownAdminAPI) CreatePolicy(ctx context.Context, req *adminv1.CreatePolicyRequest) (*adminv1.Policy, error)
- func (a *KnownAdminAPI) CreateRole(ctx context.Context, req *adminv1.CreateRoleRequest) (*adminv1.Role, error)
- func (a *KnownAdminAPI) CreateRoleMembers(ctx context.Context, req *adminv1.CreateRoleMembersRequest) (*adminv1.CreateRoleMembersResponse, error)
- func (a *KnownAdminAPI) CreateRoleMenus(ctx context.Context, req *adminv1.CreateRoleMenusRequest) (*adminv1.CreateRoleMenusResponse, error)
- func (a *KnownAdminAPI) CreateRolePolicies(ctx context.Context, req *adminv1.CreateRolePoliciesRequest) (*adminv1.CreateRolePoliciesResponse, error)
- func (a *KnownAdminAPI) CreateUser(ctx context.Context, req *adminv1.CreateUserRequest) (*adminv1.User, error)
- func (a *KnownAdminAPI) DeleteAuthProvider(ctx context.Context, req *adminv1.DeleteAuthProviderRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteCredential(ctx context.Context, req *adminv1.DeleteCredentialRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteDepartment(ctx context.Context, req *adminv1.DeleteDepartmentRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteDepartmentMember(ctx context.Context, req *adminv1.DeleteDepartmentMemberRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteGroup(ctx context.Context, req *adminv1.DeleteGroupRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteGroupMember(ctx context.Context, req *adminv1.DeleteGroupMemberRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteMenu(ctx context.Context, req *adminv1.DeleteMenuRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteOAuth2Client(ctx context.Context, req *adminv1.DeleteOAuth2ClientRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeletePolicy(ctx context.Context, req *adminv1.DeletePolicyRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteRole(ctx context.Context, req *adminv1.DeleteRoleRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteRoleMember(ctx context.Context, req *adminv1.DeleteRoleMemberRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteRoleMenu(ctx context.Context, req *adminv1.DeleteRoleMenuRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DeleteRolePolicy(ctx context.Context, req *adminv1.DeleteRolePolicyRequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) DisableUserMFA(ctx context.Context, req *adminv1.DisableUserMFARequest) (*emptypb.Empty, error)
- func (a *KnownAdminAPI) GetAuthCallback(ctx context.Context, req *adminv1.GetAuthCallbackRequest) (*adminv1.GetAuthCallbackResponse, error)
- func (a *KnownAdminAPI) GetAuthProvider(ctx context.Context, req *adminv1.GetAuthProviderRequest) (*adminv1.AuthProvider, error)
- func (a *KnownAdminAPI) GetCredential(ctx context.Context, req *adminv1.GetCredentialRequest) (*adminv1.Credential, error)
- func (a *KnownAdminAPI) GetGlobalSettings(ctx context.Context, req *adminv1.GetGlobalSettingsRequest) (*adminv1.GlobalSettingCategory, error)
- func (a *KnownAdminAPI) GetGroup(ctx context.Context, req *adminv1.GetGroupRequest) (*adminv1.Group, error)
- func (a *KnownAdminAPI) GetLionClient() (*lion.Client, error)
- func (a *KnownAdminAPI) GetLocalConfigs(ctx context.Context, req *adminv1.GetLocalConfigsRequest) (*adminv1.LocalConfigs, error)
- func (a *KnownAdminAPI) GetMicroserviceGatewayServiceConfig() (*serviceconfig.Service, error)
- func (a *KnownAdminAPI) GetMicroserviceGatewaySwagger() (*openapiconfig.OpenAPIConfig, error)
- func (a *KnownAdminAPI) GetMicroserviceGatewaySwaggerJSON() (fs.FS, string)
- func (a *KnownAdminAPI) GetOAuth2Client(ctx context.Context, req *adminv1.GetOAuth2ClientRequest) (*adminv1.OAuth2Client, error)
- func (a *KnownAdminAPI) GetOAuth2Discovery(ctx context.Context, req *emptypb.Empty) (*adminv1.OAuth2Discovery, error)
- func (a *KnownAdminAPI) GetOAuth2JSONWebKeys(ctx context.Context, req *emptypb.Empty) (*adminv1.OAuth2JSONWebKeys, error)
- func (a *KnownAdminAPI) GetOAuth2Userinfo(ctx context.Context, req *emptypb.Empty) (*adminv1.OAuth2Userinfo, error)
- func (a *KnownAdminAPI) GetPolicy(ctx context.Context, req *adminv1.GetPolicyRequest) (*adminv1.Policy, error)
- func (a *KnownAdminAPI) GetRole(ctx context.Context, req *adminv1.GetRoleRequest) (*adminv1.Role, error)
- func (a *KnownAdminAPI) GetUser(ctx context.Context, req *adminv1.GetUserRequest) (*adminv1.User, error)
- func (a *KnownAdminAPI) ListAuthProviders(ctx context.Context, req *adminv1.ListAuthProvidersRequest) (*adminv1.ListAuthProvidersResponse, error)
- func (a *KnownAdminAPI) ListCredentials(ctx context.Context, req *adminv1.ListCredentialsRequest) (*adminv1.ListCredentialsResponse, error)
- func (a *KnownAdminAPI) ListDepartmentMembers(ctx context.Context, req *adminv1.ListDepartmentMembersRequest) (*adminv1.ListDepartmentMembersResponse, error)
- func (a *KnownAdminAPI) ListDepartments(ctx context.Context, req *adminv1.ListDepartmentsRequest) (*adminv1.ListDepartmentsResponse, error)
- func (a *KnownAdminAPI) ListGlobalSettings(ctx context.Context, req *adminv1.ListGlobalSettingsRequest) (*adminv1.ListGlobalSettingsResponse, error)
- func (a *KnownAdminAPI) ListGroupMembers(ctx context.Context, req *adminv1.ListGroupMembersRequest) (*adminv1.ListGroupMembersResponse, error)
- func (a *KnownAdminAPI) ListGroups(ctx context.Context, req *adminv1.ListGroupsRequest) (*adminv1.ListGroupsResponse, error)
- func (a *KnownAdminAPI) ListLocalConfigs(ctx context.Context, req *adminv1.ListLocalConfigsRequest) (*adminv1.ListLocalConfigsResponse, error)
- func (a *KnownAdminAPI) ListLoginOptions(ctx context.Context, req *adminv1.ListLoginOptionsRequest) (*adminv1.ListLoginOptionsResponse, error)
- func (a *KnownAdminAPI) ListMenus(ctx context.Context, req *adminv1.ListMenusRequest) (*adminv1.ListMenusResponse, error)
- func (a *KnownAdminAPI) ListOAuth2Clients(ctx context.Context, req *adminv1.ListOAuth2ClientsRequest) (*adminv1.ListOAuth2ClientsResponse, error)
- func (a *KnownAdminAPI) ListPolicies(ctx context.Context, req *adminv1.ListPoliciesRequest) (*adminv1.ListPoliciesResponse, error)
- func (a *KnownAdminAPI) ListRoleMembers(ctx context.Context, req *adminv1.ListRoleMembersRequest) (*adminv1.ListRoleMembersResponse, error)
- func (a *KnownAdminAPI) ListRoleMenus(ctx context.Context, req *adminv1.ListRoleMenusRequest) (*adminv1.ListRoleMenusResponse, error)
- func (a *KnownAdminAPI) ListRolePolicies(ctx context.Context, req *adminv1.ListRolePoliciesRequest) (*adminv1.ListRolePoliciesResponse, error)
- func (a *KnownAdminAPI) ListRoles(ctx context.Context, req *adminv1.ListRolesRequest) (*adminv1.ListRolesResponse, error)
- func (a *KnownAdminAPI) ListServiceActions(ctx context.Context, req *adminv1.ListServiceActionsRequest) (*adminv1.ListServiceActionsResponse, error)
- func (a *KnownAdminAPI) ListServices(ctx context.Context, req *adminv1.ListServicesRequest) (*adminv1.ListServicesResponse, error)
- func (a *KnownAdminAPI) ListUsers(ctx context.Context, req *adminv1.ListUsersRequest) (*adminv1.ListUsersResponse, error)
- func (a *KnownAdminAPI) RevealCredentialSecret(ctx context.Context, req *adminv1.RevealCredentialSecretRequest) (*adminv1.RevealCredentialSecretResponse, error)
- func (a *KnownAdminAPI) SetMicroserviceGatewayYAML(assets fs.FS) error
- func (a *KnownAdminAPI) SetupUserMFA(ctx context.Context, req *adminv1.SetupUserMFARequest) (*adminv1.SetupUserMFAResponse, error)
- func (a *KnownAdminAPI) StartAuthMFASetup(ctx context.Context, req *adminv1.StartAuthMFASetupRequest) (*adminv1.StartAuthMFASetupResponse, error)
- func (a *KnownAdminAPI) UpdateAuthProvider(ctx context.Context, req *adminv1.UpdateAuthProviderRequest) (*adminv1.AuthProvider, error)
- func (a *KnownAdminAPI) UpdateCredential(ctx context.Context, req *adminv1.UpdateCredentialRequest) (*adminv1.Credential, error)
- func (a *KnownAdminAPI) UpdateDepartment(ctx context.Context, req *adminv1.UpdateDepartmentRequest) (*adminv1.Department, error)
- func (a *KnownAdminAPI) UpdateDepartmentMembers(ctx context.Context, req *adminv1.UpdateDepartmentMembersRequest) (*adminv1.UpdateDepartmentMembersResponse, error)
- func (a *KnownAdminAPI) UpdateGlobalSettings(ctx context.Context, req *adminv1.UpdateGlobalSettingsRequest) (*adminv1.UpdateGlobalSettingsResponse, error)
- func (a *KnownAdminAPI) UpdateGroup(ctx context.Context, req *adminv1.UpdateGroupRequest) (*adminv1.Group, error)
- func (a *KnownAdminAPI) UpdateGroupMember(ctx context.Context, req *adminv1.UpdateGroupMemberRequest) (*adminv1.Membership, error)
- func (a *KnownAdminAPI) UpdateMenu(ctx context.Context, req *adminv1.UpdateMenuRequest) (*adminv1.Menu, error)
- func (a *KnownAdminAPI) UpdateOAuth2Client(ctx context.Context, req *adminv1.UpdateOAuth2ClientRequest) (*adminv1.OAuth2Client, error)
- func (a *KnownAdminAPI) UpdatePolicy(ctx context.Context, req *adminv1.UpdatePolicyRequest) (*adminv1.Policy, error)
- func (a *KnownAdminAPI) UpdateRole(ctx context.Context, req *adminv1.UpdateRoleRequest) (*adminv1.Role, error)
- func (a *KnownAdminAPI) UpdateRoleMembers(ctx context.Context, req *adminv1.UpdateRoleMembersRequest) (*adminv1.UpdateRoleMembersResponse, error)
- func (a *KnownAdminAPI) UpdateRoleMenus(ctx context.Context, req *adminv1.UpdateRoleMenusRequest) (*adminv1.UpdateRoleMenusResponse, error)
- func (a *KnownAdminAPI) UpdateRolePolicies(ctx context.Context, req *adminv1.UpdateRolePoliciesRequest) (*adminv1.UpdateRolePoliciesResponse, error)
- func (a *KnownAdminAPI) UpdateUser(ctx context.Context, req *adminv1.UpdateUserRequest) (*adminv1.User, error)
- func (a *KnownAdminAPI) UpdateUserPassword(ctx context.Context, req *adminv1.UpdateUserPasswordRequest) (*adminv1.UpdateUserPasswordResponse, error)
- func (a *KnownAdminAPI) UpsertAuthProviders(ctx context.Context, req *adminv1.UpsertAuthProvidersRequest) (*adminv1.UpsertAuthProvidersResponse, error)
- func (a *KnownAdminAPI) VerifyAuthMFA(ctx context.Context, req *adminv1.VerifyAuthMFARequest) (*adminv1.AuthToken, error)
- type LocalConfigSnapshot
- type Options
- func WithAESKey(key []byte) Options
- func WithLionClient(client *lion.Client) Options
- func WithLocalConfigSnapshot(snapshot *LocalConfigSnapshot) Options
- func WithLogger(logger *logrus.Entry) Options
- func WithOIDCProvider(issuer, clientID, clientSecret string) Options
- func WithStaticUsers(users *StaticUsers) Options
- type StaticUser
- type StaticUsers
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func GetPageSizeByStructure ¶
GetPageSizeByStructure 根据 Structure 返回分页参数
func MetadataJSON ¶
func MetadataParse ¶
Types ¶
type KnownAdminAPI ¶
type KnownAdminAPI struct {
// contains filtered or unexported fields
}
KnownAdminAPI xx
func (*KnownAdminAPI) ConfirmAuthMFASetup ¶
func (a *KnownAdminAPI) ConfirmAuthMFASetup(ctx context.Context, req *adminv1.ConfirmAuthMFASetupRequest) (*adminv1.AuthToken, error)
ConfirmAuthMFASetup 登录态首次配置 MFA(确认)
func (*KnownAdminAPI) ConfirmUserMFA ¶
func (a *KnownAdminAPI) ConfirmUserMFA(ctx context.Context, req *adminv1.ConfirmUserMFARequest) (*adminv1.ConfirmUserMFAResponse, error)
ConfirmUserMFA 确认开启 MFA
func (*KnownAdminAPI) CreateAuthLogin ¶
func (a *KnownAdminAPI) CreateAuthLogin(ctx context.Context, req *adminv1.CreateAuthLoginRequest) (*adminv1.AuthToken, error)
CreateAuthLogin 创建登录认证
func (*KnownAdminAPI) CreateAuthProvider ¶
func (a *KnownAdminAPI) CreateAuthProvider(ctx context.Context, req *adminv1.CreateAuthProviderRequest) (*adminv1.AuthProvider, error)
CreateAuthProvider 创建认证提供方
func (*KnownAdminAPI) CreateAuthToken ¶
func (a *KnownAdminAPI) CreateAuthToken(ctx context.Context, req *adminv1.CreateAuthTokenRequest) (*adminv1.AuthToken, error)
CreateAuthToken 创建认证令牌
func (*KnownAdminAPI) CreateCredential ¶
func (a *KnownAdminAPI) CreateCredential(ctx context.Context, req *adminv1.CreateCredentialRequest) (*adminv1.Credential, error)
CreateCredential 创建凭证
func (*KnownAdminAPI) CreateDatabaseInitialize ¶
func (a *KnownAdminAPI) CreateDatabaseInitialize(ctx context.Context, req *adminv1.CreateDatabaseInitializeRequest) (*emptypb.Empty, error)
CreateDatabaseInitialize 幂等补全内置种子数据:已存在则跳过,缺失则创建。
func (*KnownAdminAPI) CreateDepartment ¶
func (a *KnownAdminAPI) CreateDepartment(ctx context.Context, req *adminv1.CreateDepartmentRequest) (*adminv1.Department, error)
CreateDepartment 创建部门 请求字段与 proto Department 定义对齐,支持:parent_id, code, display_name, type, status, sort_order, description, cost_center_code, budget_item_code, max_members, external_id, metadata;created_by/updated_by 从上下文获取
func (*KnownAdminAPI) CreateDepartmentMembers ¶
func (a *KnownAdminAPI) CreateDepartmentMembers(ctx context.Context, req *adminv1.CreateDepartmentMembersRequest) (*adminv1.CreateDepartmentMembersResponse, error)
CreateDepartmentMembers 创建部门成员(与 proto Membership 定义对齐)
func (*KnownAdminAPI) CreateGroup ¶
func (a *KnownAdminAPI) CreateGroup(ctx context.Context, req *adminv1.CreateGroupRequest) (*adminv1.Group, error)
CreateGroup 创建用户组
func (*KnownAdminAPI) CreateGroupMembers ¶
func (a *KnownAdminAPI) CreateGroupMembers(ctx context.Context, req *adminv1.CreateGroupMembersRequest) (*adminv1.CreateGroupMembersResponse, error)
CreateGroupMembers 创建群组成员
func (*KnownAdminAPI) CreateMenu ¶
func (a *KnownAdminAPI) CreateMenu(ctx context.Context, req *adminv1.CreateMenuRequest) (*adminv1.Menu, error)
func (*KnownAdminAPI) CreateOAuth2Client ¶
func (a *KnownAdminAPI) CreateOAuth2Client(ctx context.Context, req *adminv1.CreateOAuth2ClientRequest) (*adminv1.CreateOAuth2ClientResponse, error)
CreateOAuth2Client 创建 OAuth2 客户端
func (*KnownAdminAPI) CreatePolicy ¶
func (a *KnownAdminAPI) CreatePolicy(ctx context.Context, req *adminv1.CreatePolicyRequest) (*adminv1.Policy, error)
CreatePolicy 创建策略
func (*KnownAdminAPI) CreateRole ¶
func (a *KnownAdminAPI) CreateRole(ctx context.Context, req *adminv1.CreateRoleRequest) (*adminv1.Role, error)
CreateRole 创建角色
func (*KnownAdminAPI) CreateRoleMembers ¶
func (a *KnownAdminAPI) CreateRoleMembers(ctx context.Context, req *adminv1.CreateRoleMembersRequest) (*adminv1.CreateRoleMembersResponse, error)
CreateRoleMembers 批量添加角色主体绑定。
func (*KnownAdminAPI) CreateRoleMenus ¶
func (a *KnownAdminAPI) CreateRoleMenus(ctx context.Context, req *adminv1.CreateRoleMenusRequest) (*adminv1.CreateRoleMenusResponse, error)
CreateRoleMenus 批量创建角色菜单关联
func (*KnownAdminAPI) CreateRolePolicies ¶
func (a *KnownAdminAPI) CreateRolePolicies(ctx context.Context, req *adminv1.CreateRolePoliciesRequest) (*adminv1.CreateRolePoliciesResponse, error)
func (*KnownAdminAPI) CreateUser ¶
func (a *KnownAdminAPI) CreateUser(ctx context.Context, req *adminv1.CreateUserRequest) (*adminv1.User, error)
CreateUser 创建用户
func (*KnownAdminAPI) DeleteAuthProvider ¶
func (a *KnownAdminAPI) DeleteAuthProvider(ctx context.Context, req *adminv1.DeleteAuthProviderRequest) (*emptypb.Empty, error)
DeleteAuthProvider 删除认证提供方
func (*KnownAdminAPI) DeleteCredential ¶ added in v0.4.1
func (a *KnownAdminAPI) DeleteCredential(ctx context.Context, req *adminv1.DeleteCredentialRequest) (*emptypb.Empty, error)
DeleteCredential 删除凭证(软删除) 受保护(protected=true)的凭证不可删除
func (*KnownAdminAPI) DeleteDepartment ¶
func (a *KnownAdminAPI) DeleteDepartment(ctx context.Context, req *adminv1.DeleteDepartmentRequest) (*emptypb.Empty, error)
DeleteDepartment 删除部门
func (*KnownAdminAPI) DeleteDepartmentMember ¶
func (a *KnownAdminAPI) DeleteDepartmentMember(ctx context.Context, req *adminv1.DeleteDepartmentMemberRequest) (*emptypb.Empty, error)
DeleteDepartmentMember 删除部门成员
func (*KnownAdminAPI) DeleteGroup ¶
func (a *KnownAdminAPI) DeleteGroup(ctx context.Context, req *adminv1.DeleteGroupRequest) (*emptypb.Empty, error)
DeleteGroup 删除用户组(软删除:设置 deleted_at)
func (*KnownAdminAPI) DeleteGroupMember ¶
func (a *KnownAdminAPI) DeleteGroupMember(ctx context.Context, req *adminv1.DeleteGroupMemberRequest) (*emptypb.Empty, error)
DeleteGroupMember 删除群组成员
func (*KnownAdminAPI) DeleteMenu ¶
func (a *KnownAdminAPI) DeleteMenu(ctx context.Context, req *adminv1.DeleteMenuRequest) (*emptypb.Empty, error)
func (*KnownAdminAPI) DeleteOAuth2Client ¶
func (a *KnownAdminAPI) DeleteOAuth2Client(ctx context.Context, req *adminv1.DeleteOAuth2ClientRequest) (*emptypb.Empty, error)
DeleteOAuth2Client 删除 OAuth2 客户端(软删除)
func (*KnownAdminAPI) DeletePolicy ¶
func (a *KnownAdminAPI) DeletePolicy(ctx context.Context, req *adminv1.DeletePolicyRequest) (*emptypb.Empty, error)
DeletePolicy 删除策略
func (*KnownAdminAPI) DeleteRole ¶
func (a *KnownAdminAPI) DeleteRole(ctx context.Context, req *adminv1.DeleteRoleRequest) (*emptypb.Empty, error)
DeleteRole 删除角色
func (*KnownAdminAPI) DeleteRoleMember ¶
func (a *KnownAdminAPI) DeleteRoleMember(ctx context.Context, req *adminv1.DeleteRoleMemberRequest) (*emptypb.Empty, error)
DeleteRoleMember 移除角色下的主体绑定。
func (*KnownAdminAPI) DeleteRoleMenu ¶
func (a *KnownAdminAPI) DeleteRoleMenu(ctx context.Context, req *adminv1.DeleteRoleMenuRequest) (*emptypb.Empty, error)
DeleteRoleMenu 删除角色下的菜单关联
func (*KnownAdminAPI) DeleteRolePolicy ¶
func (a *KnownAdminAPI) DeleteRolePolicy(ctx context.Context, req *adminv1.DeleteRolePolicyRequest) (*emptypb.Empty, error)
func (*KnownAdminAPI) DisableUserMFA ¶
func (a *KnownAdminAPI) DisableUserMFA(ctx context.Context, req *adminv1.DisableUserMFARequest) (*emptypb.Empty, error)
DisableUserMFA 关闭 MFA
func (*KnownAdminAPI) GetAuthCallback ¶
func (a *KnownAdminAPI) GetAuthCallback(ctx context.Context, req *adminv1.GetAuthCallbackRequest) (*adminv1.GetAuthCallbackResponse, error)
GetAuthCallback 处理 OAuth2.0 的回调
func (*KnownAdminAPI) GetAuthProvider ¶
func (a *KnownAdminAPI) GetAuthProvider(ctx context.Context, req *adminv1.GetAuthProviderRequest) (*adminv1.AuthProvider, error)
GetAuthProvider 获取认证提供方
func (*KnownAdminAPI) GetCredential ¶ added in v0.4.1
func (a *KnownAdminAPI) GetCredential(ctx context.Context, req *adminv1.GetCredentialRequest) (*adminv1.Credential, error)
GetCredential 获取凭证详情
func (*KnownAdminAPI) GetGlobalSettings ¶
func (a *KnownAdminAPI) GetGlobalSettings(ctx context.Context, req *adminv1.GetGlobalSettingsRequest) (*adminv1.GlobalSettingCategory, error)
func (*KnownAdminAPI) GetGroup ¶
func (a *KnownAdminAPI) GetGroup(ctx context.Context, req *adminv1.GetGroupRequest) (*adminv1.Group, error)
GetGroup 获取群组详情
func (*KnownAdminAPI) GetLionClient ¶
func (a *KnownAdminAPI) GetLionClient() (*lion.Client, error)
func (*KnownAdminAPI) GetLocalConfigs ¶
func (a *KnownAdminAPI) GetLocalConfigs(ctx context.Context, req *adminv1.GetLocalConfigsRequest) (*adminv1.LocalConfigs, error)
func (*KnownAdminAPI) GetMicroserviceGatewayServiceConfig ¶ added in v0.4.1
func (a *KnownAdminAPI) GetMicroserviceGatewayServiceConfig() (*serviceconfig.Service, error)
GetMicroserviceGatewayServiceConfig 公开的 gateway 配置访问器,委托给私有方法。 该方法在内部错误(如配置未加载)时返回 (nil, error),由调用方按需处理。
func (*KnownAdminAPI) GetMicroserviceGatewaySwagger ¶ added in v0.4.1
func (a *KnownAdminAPI) GetMicroserviceGatewaySwagger() (*openapiconfig.OpenAPIConfig, error)
GetMicroserviceGatewaySwagger 公开的 swagger 配置访问器,委托给私有方法。 该方法在内部错误(如配置未加载)时返回 (nil, error),由调用方按需处理。
func (*KnownAdminAPI) GetMicroserviceGatewaySwaggerJSON ¶ added in v0.4.1
func (a *KnownAdminAPI) GetMicroserviceGatewaySwaggerJSON() (fs.FS, string)
GetMicroserviceGatewaySwaggerJSON 返回微服务网关资产 FS 与 swagger 资产基名, 供 AutoBridge 侧 loadSwaggerDoc 加载 openapi/<name>.swagger.json(Phase 6)。 未调用 SetMicroserviceGatewayYAML 时 assets 为 nil,调用方应降级为仅 path 参数。
func (*KnownAdminAPI) GetOAuth2Client ¶
func (a *KnownAdminAPI) GetOAuth2Client(ctx context.Context, req *adminv1.GetOAuth2ClientRequest) (*adminv1.OAuth2Client, error)
GetOAuth2Client 获取 OAuth2 客户端详情
func (*KnownAdminAPI) GetOAuth2Discovery ¶
func (a *KnownAdminAPI) GetOAuth2Discovery(ctx context.Context, req *emptypb.Empty) (*adminv1.OAuth2Discovery, error)
GetOAuth2Discovery 获取内置 OpenID 配置
func (*KnownAdminAPI) GetOAuth2JSONWebKeys ¶
func (a *KnownAdminAPI) GetOAuth2JSONWebKeys(ctx context.Context, req *emptypb.Empty) (*adminv1.OAuth2JSONWebKeys, error)
GetOAuth2JSONWebKeys 获取内置 OpenID 公钥
func (*KnownAdminAPI) GetOAuth2Userinfo ¶
func (a *KnownAdminAPI) GetOAuth2Userinfo(ctx context.Context, req *emptypb.Empty) (*adminv1.OAuth2Userinfo, error)
GetOAuth2Userinfo 获取内置 OpenID 用户信息 对应 OIDC userinfo endpoint,返回 OIDC Standard Claims 规范定义的用户信息 https://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse
func (*KnownAdminAPI) GetPolicy ¶
func (a *KnownAdminAPI) GetPolicy(ctx context.Context, req *adminv1.GetPolicyRequest) (*adminv1.Policy, error)
GetPolicy 获取策略详情
func (*KnownAdminAPI) GetRole ¶
func (a *KnownAdminAPI) GetRole(ctx context.Context, req *adminv1.GetRoleRequest) (*adminv1.Role, error)
GetRole 获取角色详情
func (*KnownAdminAPI) GetUser ¶
func (a *KnownAdminAPI) GetUser(ctx context.Context, req *adminv1.GetUserRequest) (*adminv1.User, error)
GetUser 获取用户详情
func (*KnownAdminAPI) ListAuthProviders ¶
func (a *KnownAdminAPI) ListAuthProviders(ctx context.Context, req *adminv1.ListAuthProvidersRequest) (*adminv1.ListAuthProvidersResponse, error)
ListAuthProviders 获取认证提供列表
func (*KnownAdminAPI) ListCredentials ¶ added in v0.4.1
func (a *KnownAdminAPI) ListCredentials(ctx context.Context, req *adminv1.ListCredentialsRequest) (*adminv1.ListCredentialsResponse, error)
ListCredentials 查询凭证列表
func (*KnownAdminAPI) ListDepartmentMembers ¶
func (a *KnownAdminAPI) ListDepartmentMembers(ctx context.Context, req *adminv1.ListDepartmentMembersRequest) (*adminv1.ListDepartmentMembersResponse, error)
ListDepartmentMembers 获取部门成员(与 proto Membership 定义对齐)
func (*KnownAdminAPI) ListDepartments ¶
func (a *KnownAdminAPI) ListDepartments(ctx context.Context, req *adminv1.ListDepartmentsRequest) (*adminv1.ListDepartmentsResponse, error)
ListDepartments 列出部门
func (*KnownAdminAPI) ListGlobalSettings ¶
func (a *KnownAdminAPI) ListGlobalSettings(ctx context.Context, req *adminv1.ListGlobalSettingsRequest) (*adminv1.ListGlobalSettingsResponse, error)
func (*KnownAdminAPI) ListGroupMembers ¶
func (a *KnownAdminAPI) ListGroupMembers(ctx context.Context, req *adminv1.ListGroupMembersRequest) (*adminv1.ListGroupMembersResponse, error)
ListGroupMembers 获取群组成员列表 根据群组类型从不同数据源获取成员:
- DEPARTMENT: 从 user_departments 表查询关联部门的成员
- ROLE: 从 user_roles 表查询关联角色的成员
- DYNAMIC: 根据 ref_expr 动态规则从 users 表查询
- SYSTEM: 同 DYNAMIC,根据 ref_expr 动态规则从 users 表查询(系统内置,不可创建/修改/删除)
- 其他类型: 从 user_groups 表查询
func (*KnownAdminAPI) ListGroups ¶
func (a *KnownAdminAPI) ListGroups(ctx context.Context, req *adminv1.ListGroupsRequest) (*adminv1.ListGroupsResponse, error)
ListGroups 列出用户组
func (*KnownAdminAPI) ListLocalConfigs ¶
func (a *KnownAdminAPI) ListLocalConfigs(ctx context.Context, req *adminv1.ListLocalConfigsRequest) (*adminv1.ListLocalConfigsResponse, error)
func (*KnownAdminAPI) ListLoginOptions ¶
func (a *KnownAdminAPI) ListLoginOptions(ctx context.Context, req *adminv1.ListLoginOptionsRequest) (*adminv1.ListLoginOptionsResponse, error)
ListLoginOptions 获取登录页可用的认证提供方列表(无需认证) 仅返回登录页渲染所需的最小字段集,不包含任何敏感配置信息
func (*KnownAdminAPI) ListMenus ¶
func (a *KnownAdminAPI) ListMenus(ctx context.Context, req *adminv1.ListMenusRequest) (*adminv1.ListMenusResponse, error)
func (*KnownAdminAPI) ListOAuth2Clients ¶
func (a *KnownAdminAPI) ListOAuth2Clients(ctx context.Context, req *adminv1.ListOAuth2ClientsRequest) (*adminv1.ListOAuth2ClientsResponse, error)
ListOAuth2Clients 查询 OAuth2 客户端列表
func (*KnownAdminAPI) ListPolicies ¶
func (a *KnownAdminAPI) ListPolicies(ctx context.Context, req *adminv1.ListPoliciesRequest) (*adminv1.ListPoliciesResponse, error)
ListPolicies 获取策略列表
func (*KnownAdminAPI) ListRoleMembers ¶
func (a *KnownAdminAPI) ListRoleMembers(ctx context.Context, req *adminv1.ListRoleMembersRequest) (*adminv1.ListRoleMembersResponse, error)
ListRoleMembers 获取角色主体绑定列表,并在 full 视图下展开为用户 membership。
func (*KnownAdminAPI) ListRoleMenus ¶
func (a *KnownAdminAPI) ListRoleMenus(ctx context.Context, req *adminv1.ListRoleMenusRequest) (*adminv1.ListRoleMenusResponse, error)
ListRoleMenus 获取角色菜单列表
func (*KnownAdminAPI) ListRolePolicies ¶
func (a *KnownAdminAPI) ListRolePolicies(ctx context.Context, req *adminv1.ListRolePoliciesRequest) (*adminv1.ListRolePoliciesResponse, error)
func (*KnownAdminAPI) ListRoles ¶
func (a *KnownAdminAPI) ListRoles(ctx context.Context, req *adminv1.ListRolesRequest) (*adminv1.ListRolesResponse, error)
ListRoles 获取角色列表,默认返回树状结构 仅返回当前用户拥有的角色及其所有子角色
func (*KnownAdminAPI) ListServiceActions ¶
func (a *KnownAdminAPI) ListServiceActions(ctx context.Context, req *adminv1.ListServiceActionsRequest) (*adminv1.ListServiceActionsResponse, error)
func (*KnownAdminAPI) ListServices ¶
func (a *KnownAdminAPI) ListServices(ctx context.Context, req *adminv1.ListServicesRequest) (*adminv1.ListServicesResponse, error)
func (*KnownAdminAPI) ListUsers ¶
func (a *KnownAdminAPI) ListUsers(ctx context.Context, req *adminv1.ListUsersRequest) (*adminv1.ListUsersResponse, error)
ListUsers 获取用户列表
func (*KnownAdminAPI) RevealCredentialSecret ¶ added in v0.4.1
func (a *KnownAdminAPI) RevealCredentialSecret(ctx context.Context, req *adminv1.RevealCredentialSecretRequest) (*adminv1.RevealCredentialSecretResponse, error)
RevealCredentialSecret 揭示凭证密钥 通过当前用户密码二次验证后,解密并返回凭证的敏感字段。 安全约束: - 从 context 获取当前用户名,与 password_hash 一起验证身份 - 支持静态用户和数据库注册用户两种验证方式 - 验证失败返回 Unauthenticated - 按凭证类型仅解密并返回该类型实际拥有的字段 - 操作记录审计日志
func (*KnownAdminAPI) SetMicroserviceGatewayYAML ¶
func (a *KnownAdminAPI) SetMicroserviceGatewayYAML(assets fs.FS) error
SetMicroserviceGatewayYAML 设置微服务网关的 YAML 配置,并在注入时立即完成解析
func (*KnownAdminAPI) SetupUserMFA ¶
func (a *KnownAdminAPI) SetupUserMFA(ctx context.Context, req *adminv1.SetupUserMFARequest) (*adminv1.SetupUserMFAResponse, error)
SetupUserMFA 初始化 MFA 设置(生成密钥 + 二维码 URI)
func (*KnownAdminAPI) StartAuthMFASetup ¶
func (a *KnownAdminAPI) StartAuthMFASetup(ctx context.Context, req *adminv1.StartAuthMFASetupRequest) (*adminv1.StartAuthMFASetupResponse, error)
StartAuthMFASetup 登录态首次配置 MFA(开始)
func (*KnownAdminAPI) UpdateAuthProvider ¶
func (a *KnownAdminAPI) UpdateAuthProvider(ctx context.Context, req *adminv1.UpdateAuthProviderRequest) (*adminv1.AuthProvider, error)
UpdateAuthProvider 更新认证提供方
func (*KnownAdminAPI) UpdateCredential ¶ added in v0.4.1
func (a *KnownAdminAPI) UpdateCredential(ctx context.Context, req *adminv1.UpdateCredentialRequest) (*adminv1.Credential, error)
UpdateCredential 更新凭证 仅允许更新 status / display_name / description / expires_at / metadata 受保护(protected=true)的凭证仅允许更新 display_name / description
func (*KnownAdminAPI) UpdateDepartment ¶
func (a *KnownAdminAPI) UpdateDepartment(ctx context.Context, req *adminv1.UpdateDepartmentRequest) (*adminv1.Department, error)
UpdateDepartment 更新部门
func (*KnownAdminAPI) UpdateDepartmentMembers ¶
func (a *KnownAdminAPI) UpdateDepartmentMembers(ctx context.Context, req *adminv1.UpdateDepartmentMembersRequest) (*adminv1.UpdateDepartmentMembersResponse, error)
UpdateDepartmentMembers 更新部门成员(按 department_id + user_id 定位,与 proto Membership 对齐)
func (*KnownAdminAPI) UpdateGlobalSettings ¶
func (a *KnownAdminAPI) UpdateGlobalSettings(ctx context.Context, req *adminv1.UpdateGlobalSettingsRequest) (*adminv1.UpdateGlobalSettingsResponse, error)
func (*KnownAdminAPI) UpdateGroup ¶
func (a *KnownAdminAPI) UpdateGroup(ctx context.Context, req *adminv1.UpdateGroupRequest) (*adminv1.Group, error)
UpdateGroup 更新用户组(code 创建后不建议修改,若 update_mask 含 code 仍可更新)
func (*KnownAdminAPI) UpdateGroupMember ¶
func (a *KnownAdminAPI) UpdateGroupMember(ctx context.Context, req *adminv1.UpdateGroupMemberRequest) (*adminv1.Membership, error)
UpdateGroupMember 更新群组成员
func (*KnownAdminAPI) UpdateMenu ¶
func (a *KnownAdminAPI) UpdateMenu(ctx context.Context, req *adminv1.UpdateMenuRequest) (*adminv1.Menu, error)
func (*KnownAdminAPI) UpdateOAuth2Client ¶
func (a *KnownAdminAPI) UpdateOAuth2Client(ctx context.Context, req *adminv1.UpdateOAuth2ClientRequest) (*adminv1.OAuth2Client, error)
UpdateOAuth2Client 更新 OAuth2 客户端
func (*KnownAdminAPI) UpdatePolicy ¶
func (a *KnownAdminAPI) UpdatePolicy(ctx context.Context, req *adminv1.UpdatePolicyRequest) (*adminv1.Policy, error)
UpdatePolicy 更新策略
func (*KnownAdminAPI) UpdateRole ¶
func (a *KnownAdminAPI) UpdateRole(ctx context.Context, req *adminv1.UpdateRoleRequest) (*adminv1.Role, error)
UpdateRole 更新角色
func (*KnownAdminAPI) UpdateRoleMembers ¶
func (a *KnownAdminAPI) UpdateRoleMembers(ctx context.Context, req *adminv1.UpdateRoleMembersRequest) (*adminv1.UpdateRoleMembersResponse, error)
UpdateRoleMembers 批量更新角色下主体绑定(PATCH .../roles/{parent}/members)。
func (*KnownAdminAPI) UpdateRoleMenus ¶
func (a *KnownAdminAPI) UpdateRoleMenus(ctx context.Context, req *adminv1.UpdateRoleMenusRequest) (*adminv1.UpdateRoleMenusResponse, error)
UpdateRoleMenus 批量更新角色菜单关联
func (*KnownAdminAPI) UpdateRolePolicies ¶
func (a *KnownAdminAPI) UpdateRolePolicies(ctx context.Context, req *adminv1.UpdateRolePoliciesRequest) (*adminv1.UpdateRolePoliciesResponse, error)
func (*KnownAdminAPI) UpdateUser ¶
func (a *KnownAdminAPI) UpdateUser(ctx context.Context, req *adminv1.UpdateUserRequest) (*adminv1.User, error)
UpdateUser 更新用户信息
func (*KnownAdminAPI) UpdateUserPassword ¶
func (a *KnownAdminAPI) UpdateUserPassword(ctx context.Context, req *adminv1.UpdateUserPasswordRequest) (*adminv1.UpdateUserPasswordResponse, error)
UpdateUserPassword 修改用户密码
func (*KnownAdminAPI) UpsertAuthProviders ¶
func (a *KnownAdminAPI) UpsertAuthProviders(ctx context.Context, req *adminv1.UpsertAuthProvidersRequest) (*adminv1.UpsertAuthProvidersResponse, error)
UpsertAuthProviders 更新认证提供方列表
func (*KnownAdminAPI) VerifyAuthMFA ¶
func (a *KnownAdminAPI) VerifyAuthMFA(ctx context.Context, req *adminv1.VerifyAuthMFARequest) (*adminv1.AuthToken, error)
VerifyAuthMFA 登录时的 MFA 二步验证
type LocalConfigSnapshot ¶
type LocalConfigSnapshot struct {
Services *adminv1.ServicesConfig
Discover *adminv1.DiscoverConfig
Security *adminv1.SecurityConfig
Database *adminv1.DatabaseConfig
Cachebox *adminv1.CacheboxConfig
Debugger *adminv1.DebuggerConfig
Objstore *adminv1.ObjstoreConfig
Frontend *adminv1.FrontendConfig
Observables *adminv1.ObservablesConfig
Cloudevents *adminv1.CloudEventsConfig
Automations *adminv1.AutomationsConfig
Independent *structpb.Struct
}
LocalConfigSnapshot keeps admin runtime config sections for local-config APIs.
type Options ¶
type Options func(c *config)
Options xx
func WithLionClient ¶
WithLionClient 内置管理模块的 ent client 数据库 lion 数据结构
func WithLocalConfigSnapshot ¶
func WithLocalConfigSnapshot(snapshot *LocalConfigSnapshot) Options
WithLocalConfigSnapshot 设置运行时本地配置快照
func WithLogger ¶
WithLogger 返回一个 AdminAPIOption,用于设置 AdminAPI 的日志记录器。 参数 logger 是一个指向 logrus.Entry 的指针,表示要使用的日志记录器。 返回值是一个 AdminAPIOption,用于配置 AdminAPI 的日志记录器。
func WithOIDCProvider ¶
WithOIDCProvider 设置 oidc 认证的基础信息
type StaticUser ¶
type StaticUser struct {
UserID int64 `json:"user_id"`
Username string `json:"username"`
PasswordHash string `json:"password_hash"`
Email string `json:"email"`
Groups []string `json:"groups"`
Tenant string `json:"tenant"`
}
StaticUser 本地配置的静态用户
func (StaticUser) GetAccessToken ¶
func (s StaticUser) GetAccessToken(expiresIn int32, appid string) (string, error)
GetAccessToken 获取或生成 jwt token
type StaticUsers ¶
type StaticUsers []*StaticUser
func (*StaticUsers) Valid ¶
func (s *StaticUsers) Valid(username, passwordHash string) (*StaticUser, bool)
Valid 验证 LOCAL 登录载荷(CreateAuthLoginRequest.password_hash)是否与静态用户匹配。 存储为 sha256 十六进制时做字符串相等比较;存储为 bcrypt 时(以 “$2” 开头)用 BcryptCompare,与库表 LOCAL 用户约定一致。
Source Files
¶
- admin.go
- auth.go
- auth_provider_config.go
- common.go
- config.go
- gateway_service_config.go
- global_settings_reader.go
- global_settings_registry.go
- global_settings_seed.go
- membership_helpers.go
- mfa_challenge.go
- mfa_gate.go
- principal_role_helpers.go
- role_policy_helpers.go
- rpc_auth_callback.go
- rpc_auth_login.go
- rpc_auth_mfa.go
- rpc_database.go
- rpc_departments.go
- rpc_global_settings.go
- rpc_groups.go
- rpc_local_config.go
- rpc_menus.go
- rpc_oauth2_clients.go
- rpc_policies.go
- rpc_role_policies.go
- rpc_roles.go
- rpc_security_keys.go
- rpc_services.go
- rpc_users.go
- social_users.go
- static_users.go
- wechat_open.go
- well_known_seed_code.go