middleware

package
v0.30.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 13, 2026 License: Apache-2.0 Imports: 17 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	HasUsers bool
)

Functions

func ApiAuth

func ApiAuth(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionCopyFiles added in v0.19.0

func ApiPermissionCopyFiles(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionDownloadAuditLogs added in v0.24.0

func ApiPermissionDownloadAuditLogs(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageGroups

func ApiPermissionManageGroups(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageMCPServers added in v0.29.0

func ApiPermissionManageMCPServers(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageRoles

func ApiPermissionManageRoles(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageScripts added in v0.23.0

func ApiPermissionManageScripts(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageTemplates

func ApiPermissionManageTemplates(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageUsers

func ApiPermissionManageUsers(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageUsersOrSelf

func ApiPermissionManageUsersOrSelf(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageUsersOrSpaces

func ApiPermissionManageUsersOrSpaces(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageVariables

func ApiPermissionManageVariables(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionManageVolumes

func ApiPermissionManageVolumes(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionRunCommands added in v0.19.0

func ApiPermissionRunCommands(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionTransferSpaces

func ApiPermissionTransferSpaces(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionUseMCPServer added in v0.19.0

func ApiPermissionUseMCPServer(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionUsePools added in v0.28.0

func ApiPermissionUsePools(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionUseSpaces

func ApiPermissionUseSpaces(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionUseTunnels

func ApiPermissionUseTunnels(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionUseWebAssistant added in v0.19.0

func ApiPermissionUseWebAssistant(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionViewAuditLogs

func ApiPermissionViewAuditLogs(next http.HandlerFunc) http.HandlerFunc

func ApiPermissionViewClusterInfo

func ApiPermissionViewClusterInfo(next http.HandlerFunc) http.HandlerFunc

func DeleteSessionCookie

func DeleteSessionCookie(w http.ResponseWriter)

func GetBearerToken

func GetBearerToken(w http.ResponseWriter, r *http.Request) string

func GetSessionFromCookie

func GetSessionFromCookie(r *http.Request) (*model.Session, error)

func HandlerToHandlerFunc added in v0.23.0

func HandlerToHandlerFunc(h http.Handler) http.HandlerFunc

HandlerToHandlerFunc converts an http.Handler to an http.HandlerFunc This is useful when you need to use an http.Handler with middleware that expects http.HandlerFunc

func Initialize

func Initialize()

func MCPServerContext added in v0.23.0

func MCPServerContext(mcpServer *mcp.Server, scriptToolsProvider ScriptToolsProvider) func(http.Handler) http.Handler

MCPServerContext adds the MCP server and request-scoped script tools to the request context

func OptionalWebAuth added in v0.23.7

func OptionalWebAuth(next http.HandlerFunc) http.HandlerFunc

OptionalWebAuth injects the authenticated user into the context if a valid session cookie is present, but never redirects — unauthenticated requests pass through with no user in context.

func TokenScopesRequired added in v0.28.0

func TokenScopesRequired(next http.HandlerFunc) http.HandlerFunc

TokenScopesRequired wraps a handler with token-scope enforcement. If the request was authenticated via a scoped API token (i.e. the token in context has a non-empty Scopes slice), the request path must be covered by at least one of the token's scopes. Tokens with no scopes (nil/empty — the default for all pre-scopes tokens) are unrestricted. Session cookies and agent tokens bypass this check entirely.

func WebAuth

func WebAuth(next http.HandlerFunc) http.HandlerFunc

Types

type ErrorResponse

type ErrorResponse struct {
	Error string `json:"error"`
}

type ScriptToolsProvider added in v0.23.0

type ScriptToolsProvider func(ctx context.Context, user *model.User) mcp.ToolProvider

ScriptToolsProvider is a callback function that returns a ToolProvider for script tools

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL