scope

package

v2.52.1 Latest Latest Go to latest Published: Oct 27, 2026 License: Apache-2.0 Imports: 20 Imported by: 4

Details

View Source

const PublicStorageProviderID = "7993447f-687f-490d-875c-ac95e89a62a4"

PublicStorageProviderID is the space id used for the public links storage space

This section is empty.

func AddLightweightAccountScope(role authpb.Role, scopes map[string]*authpb.Scope) (map[string]*authpb.Scope, error)

AddLightweightAccountScope adds the scope to allow access to lightweight user.

func AddOCMShareScope(share *ocmv1beta1.Share, role authpb.Role, scopes map[string]*authpb.Scope) (map[string]*authpb.Scope, error)

AddOCMShareScope adds the scope to allow access to an OCM share and the share resource.

func AddOwnerScope(scopes map[string]*authpb.Scope) (map[string]*authpb.Scope, error)

AddOwnerScope adds the default owner scope with access to all resources.

func AddPublicShareScope(share *link.PublicShare, role authpb.Role, scopes map[string]*authpb.Scope) (map[string]*authpb.Scope, error)

AddPublicShareScope adds the scope to allow access to a public share and the shared resource.

func AddResourceInfoScope(r *provider.ResourceInfo, role authpb.Role, scopes map[string]*authpb.Scope) (map[string]*authpb.Scope, error)

AddResourceInfoScope adds the scope to allow access to a resource info object.

func FormatScope(scopeType string, scope *authpb.Scope) (string, error)

FormatScope create a pretty print of the scope

func GetOCMSharesFromScopes(scopes map[string]*authpb.Scope) ([]*ocmv1beta1.Share, error)

GetOCMSharesFromScopes returns all OCM shares in the given scope.

func VerifyScope(ctx context.Context, scopeMap map[string]*authpb.Scope, resource interface{}) (bool, error)

VerifyScope is the function to be called when dismantling tokens to check if the token has access to a particular resource.

type Verifier func(context.Context, *authpb.Scope, interface{}, *zerolog.Logger) (bool, error)

Verifier is the function signature which every scope verifier should implement.