response

type EdgeResponseMapper struct{}

type EventLogger interface {
	Log(actorType, actorId, eventType, entityType, entityId, formatString string, formatData []string, data map[interface{}]interface{})
}

type RequestContext struct {
	Responder

	// Id is the unique identifier generated for this request, used in logging and tracing.
	Id string

	ResponseWriter http.ResponseWriter
	Request        *http.Request

	Api        permissions.Api
	EntityType string
	Action     permissions.Action

	Body      []byte
	StartTime time.Time

	// SecurityCtx holds the resolved authentication and authorization state for the request.
	SecurityCtx SecurityCtx
	// contains filtered or unexported fields
}

type Responder interface {
	api.Responder
	RespondWithOk(data interface{}, meta *rest_model.Meta)
	RespondWithCreatedId(id string, link rest_model.Link)
}

type ResponderImpl struct {
	api.Responder
}

type SecurityCtx interface {
	// GetSecurityTokenCtx returns the raw token context carrying bearer token state.
	GetSecurityTokenCtx() *common.SecurityTokenCtx
	// GetIdentity resolves and returns the identity for the session. When a masquerade
	// is active, the masquerade identity is returned instead.
	GetIdentity() (*model.Identity, error)
	// GetAuthPolicy resolves and returns the auth policy for the session's identity.
	GetAuthPolicy() (*model.AuthPolicy, error)
	// GetApiSession resolves and returns the API session for the request.
	GetApiSession() (*model.ApiSession, error)

	// GetTotp resolves and returns the TOTP MFA configuration for the session's identity.
	GetTotp() (*model.Mfa, error)

	// GetApiSessionWithoutResolve returns the API session only if already resolved.
	GetApiSessionWithoutResolve() (*model.ApiSession, error)
	// GetMfaAuthQueriesWithoutResolve returns MFA challenges only if already resolved.
	GetMfaAuthQueriesWithoutResolve() []*rest_model.AuthQueryDetail
	// GetMfaErrorWithoutResolve returns the MFA error only if already resolved.
	GetMfaErrorWithoutResolve() error

	// IsPartiallyAuthed returns true when primary auth succeeded but secondary auth is pending.
	IsPartiallyAuthed() bool
	// IsFullyAuthed returns true when both primary and secondary auth are satisfied.
	IsFullyAuthed() bool
	// GetPermissions returns the resolved permission set for the session.
	GetPermissions() map[string]struct{}
	// AddToRequest attaches this SecurityCtx to the request's context.
	AddToRequest(r *http.Request)
	// GetError returns the error from primary session resolution, if any.
	GetError() error

	// GetMfaAuthQueries resolves and returns outstanding MFA challenges.
	GetMfaAuthQueries() []*rest_model.AuthQueryDetail
	// GetMfaError resolves and returns any secondary-auth failure.
	GetMfaError() error

	// MasqueradeAsIdentity allows an admin to act as another identity for this request.
	MasqueradeAsIdentity(identity *model.Identity) error
	// EndMasquerade clears any active masquerade.
	EndMasquerade()
}