Help us shape the future of Go! Take the 2026 Go Developer Survey

database

package
v0.4.24 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 10, 2026 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var (
	ErrInvalidApplicationName       = errors.New("invalid application name")
	ErrApplicationOwnershipConflict = errors.New("application is owned by another tenant")
)
View Source 
var (
	ErrSchemaNotReady      = errors.New("database schema is not ready")
	ErrUnexpectedMigration = errors.New("database has unexpected migration")
)
View Source 
var ErrInvalidPrincipal = errors.New("invalid principal")
View Source 
var ErrInvalidTenantID = errors.New("invalid tenant id")
View Source 
var ErrMissingDSN = errors.New("database DSN is required")
View Source 
var ErrNoAppliedMigration = errors.New("no applied migration to roll back")

Functions

func Migrate 

func Migrate(ctx context.Context, pool *pgxpool.Pool) error

Migrate applies all embedded forward migrations exactly once in lexical order. Each migration runs in its own transaction. The migration table is authoritative.

func Open 

func Open(ctx context.Context, cfg Config) (*pgxpool.Pool, error)

Open creates and verifies a PostgreSQL pool. It returns only after a successful ping.

func Ping 

func Ping(ctx context.Context, pool *pgxpool.Pool) error

Ping verifies that PostgreSQL is reachable within the supplied context.

func RollbackLast 

func RollbackLast(ctx context.Context, pool *pgxpool.Pool) error

RollbackLast reverses exactly the most recently applied BaseHarbor migration. A rollback file is mandatory; rollback never guesses or destroys earlier schema.

func VerifySchemaReady 

func VerifySchemaReady(ctx context.Context, pool *pgxpool.Pool) error

VerifySchemaReady verifies the authoritative migration state without mutating it. Runtime processes must not apply migrations implicitly during startup.

func WithTenantTx 

func WithTenantTx(ctx context.Context, pool *pgxpool.Pool, tenantID string, fn func(pgx.Tx) error) error

WithTenantTx runs fn inside a transaction whose PostgreSQL session context is scoped to exactly one tenant. SET LOCAL semantics ensure the tenant context is automatically discarded when the transaction ends.

Types

type ApplicationOwnershipStore 

type ApplicationOwnershipStore struct {
	// contains filtered or unexported fields
}

ApplicationOwnershipStore is the authoritative persistence boundary for application-to-tenant ownership.

func NewApplicationOwnershipStore 

func NewApplicationOwnershipStore(pool *pgxpool.Pool) *ApplicationOwnershipStore

func (*ApplicationOwnershipStore) Claim 

func (s *ApplicationOwnershipStore) Claim(ctx context.Context, tenantID, applicationName string) error

func (*ApplicationOwnershipStore) OwnedByTenant 

func (s *ApplicationOwnershipStore) OwnedByTenant(ctx context.Context, tenantID, applicationName string) (bool, error)

OwnedByTenant implements the application-secret API ownership resolver. The lookup is tenant-scoped and therefore subject to PostgreSQL RLS.

type Config 

type Config struct {
	DSN            string
	ConnectTimeout time.Duration
	MaxConns       int32
	MinConns       int32
}

Config defines the PostgreSQL connection used by BaseHarbor.

type ConnectorEnrollmentStore added in v0.4.23 

type ConnectorEnrollmentStore struct {
	// contains filtered or unexported fields
}

func NewConnectorEnrollmentStore added in v0.4.23 

func NewConnectorEnrollmentStore(pool *pgxpool.Pool) *ConnectorEnrollmentStore

func (*ConnectorEnrollmentStore) AdmitCertificate added in v0.4.23 

func (s *ConnectorEnrollmentStore) AdmitCertificate(ctx context.Context, scope targetenrollment.Scope, serial string, expires time.Time) error

AdmitCertificate checks persisted identity and revocation in a tenant-local transaction. Explicit predicates remain mandatory for privileged DB callers.

func (*ConnectorEnrollmentStore) Consume added in v0.4.23 

func (s *ConnectorEnrollmentStore) Consume(ctx context.Context, scope targetenrollment.Scope, tokenDigest, nonceDigest, csrDigest string, now time.Time) (targetenrollment.Grant, error)

func (*ConnectorEnrollmentStore) Create added in v0.4.23 

func (s *ConnectorEnrollmentStore) Create(ctx context.Context, grant targetenrollment.Grant) error

func (*ConnectorEnrollmentStore) CreateRenewal added in v0.4.23 

func (s *ConnectorEnrollmentStore) CreateRenewal(ctx context.Context, grant targetenrollment.Grant) error

CreateRenewal pins a one-use authorization to the currently active serial. A later revocation, scope change or competing replacement invalidates it.

func (*ConnectorEnrollmentStore) RecordIssued added in v0.4.23 

func (s *ConnectorEnrollmentStore) RecordIssued(ctx context.Context, scope targetenrollment.Scope, tokenDigest, serial string, expires time.Time) error

RecordIssued commits the exact authenticated node identity before returning certificate material. Renewal additionally compares its authorized old serial and records one bounded predecessor in the same tenant-local transaction.

func (*ConnectorEnrollmentStore) RevokeCertificate added in v0.4.23 

func (s *ConnectorEnrollmentStore) RevokeCertificate(ctx context.Context, scope targetenrollment.Scope, serial string) error

RevokeCertificate persists the admission denial before provider revocation. A provider outage must never make a retired node identity active again.

func (*ConnectorEnrollmentStore) RevokeCurrent added in v0.4.24 

func (s *ConnectorEnrollmentStore) RevokeCurrent(ctx context.Context, scope targetenrollment.Scope) (string, error)

func (*ConnectorEnrollmentStore) Status added in v0.4.24 

func (s *ConnectorEnrollmentStore) Status(ctx context.Context, scope targetenrollment.Scope) (targetenrollment.NodeStatus, error)

type IdentityTenantResolver 

type IdentityTenantResolver struct {
	// contains filtered or unexported fields
}

IdentityTenantResolver resolves memberships for one verified external identity before a tenant scope exists. Access remains constrained by the identity-resolution RLS policy; no BYPASSRLS or superuser privilege is used.

func NewIdentityTenantResolver 

func NewIdentityTenantResolver(pool *pgxpool.Pool) *IdentityTenantResolver

func (*IdentityTenantResolver) ResolveTenant 

func (r *IdentityTenantResolver) ResolveTenant(ctx context.Context, principal *identity.Principal) (*tenancy.Context, error)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.