authz

package

v0.25.1 Latest Latest Go to latest Published: Aug 3, 2026 License: MIT Imports: 18 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/obot-platform/obot

Links

Documentation ¶

Index ¶

Constants
func CheckMCPIDAccess(ctx context.Context, client kclient.Client, ...) (bool, error)
func MCPIDIsAuthorized(ctx context.Context, client kclient.Client, authorizedMCPServers []string, ...) (bool, error)
type Authorizer
- func NewAuthorizer(gatewayClient *client.Client, cache, uncached kclient.Client, devMode bool, ...) *Authorizer
- func (a *Authorizer) Authorize(req *http.Request, userInfo user.Info) bool
type GetVar
type Resources
type ResourcesAuthorized
type User

Constants ¶

View Source

const (
	MetricsGroup         = "metrics"
	UnauthenticatedGroup = "unauthenticated"
)

Variables ¶

This section is empty.

Functions ¶

func CheckMCPIDAccess ¶ added in v0.24.0

func CheckMCPIDAccess(ctx context.Context, client kclient.Client, acrHelper *accesscontrolrule.Helper, user kuser.Info, mcpID string) (bool, error)

func MCPIDIsAuthorized ¶ added in v0.24.0

func MCPIDIsAuthorized(ctx context.Context, client kclient.Client, authorizedMCPServers []string, userID, mcpID string) (bool, error)

Types ¶

type Authorizer ¶

type Authorizer struct {
	// contains filtered or unexported fields
}

func NewAuthorizer ¶

func NewAuthorizer(gatewayClient *client.Client, cache, uncached kclient.Client, devMode bool, acrHelper *accesscontrolrule.Helper, skillHelper *skillaccessrule.Helper, registryNoAuth bool) *Authorizer

func (*Authorizer) Authorize ¶

func (a *Authorizer) Authorize(req *http.Request, userInfo user.Info) bool

type GetVar ¶ added in v0.7.0

type GetVar func(string) string

type Resources ¶ added in v0.7.0

type Resources struct {
	MCPServerID             string
	MCPServerInstanceID     string
	MCPServerCatalogEntryID string
	// MCPID can be the ID of an MCPServer, an MCPServerInstance, or MCPServerCatalogEntry. It is used for interaction with the MCP gateway.
	MCPID               string
	WorkspaceID         string
	NanobotAgentID      string
	ProjectID           string
	PublishedArtifactID string
	ArtifactVersion     string
	SkillID             string
	DeviceScanID        string
	OAuthAuthRequestID  string
	Authorizated        ResourcesAuthorized
}

type ResourcesAuthorized ¶ added in v0.7.0

type ResourcesAuthorized struct {
	MCPServer             *v1.MCPServer
	MCPServerInstance     *v1.MCPServerInstance
	MCPServerCatalogEntry *v1.MCPServerCatalogEntry
	PowerUserWorkspace    *v1.PowerUserWorkspace
	NanobotAgent          *v1.NanobotAgent
	Project               *v1.Project
	PublishedArtifact     *v1.PublishedArtifact
	Skill                 *v1.Skill
}

type User ¶ added in v0.23.0

type User struct {
	kuser.Info

	IsAdmin        bool
	IsAuditor      bool
	IsOwner        bool
	CanImpersonate bool
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL