access

package

Go to main page

Versions in this module

v0

v0.9.0

May 2, 2026

v0.8.1

Feb 18, 2026

v0.8.0

Feb 12, 2026

Changes in this version

+ const PermissionAuditExport

+ const PermissionRoleAssign

+ const PermissionRoleList

+ const PermissionSecurityIncidentCreate

+ const PermissionSecurityIncidentDelete

+ const PermissionSecurityIncidentUpdate

+ const PermissionSecurityIncidentView

+ const PermissionSecurityVulnerabilityCreate

+ const PermissionSecurityVulnerabilityDelete

+ const PermissionSecurityVulnerabilityUpdate

+ const PermissionSecurityVulnerabilityView

+ const PermissionUserList

+ const PermissionUserLock

+ const PermissionUserManageMFA

+ const PermissionUserResetPassword

+ const PermissionUserUnlock

+ const SeverityCritical

+ const SeverityHigh

+ const SeverityInfo

+ const SeverityLow

+ const SeverityMedium

+ const StatusClosed

+ const StatusInProgress

+ const StatusOpen

+ const StatusPatched

+ const StatusResolved

type AccessControlManager

+ func (m *AccessControlManager) GetAuditLogger() AuditLogger

+ func (m *AccessControlManager) GetAuthManager() *AuthManager

+ type AuditEvent struct

+ Action string

+ Details map[string]interface{}

+ ID string

+ IPAddress string

+ Metadata map[string]interface{}

+ Resource string

+ ResourceID string

+ Severity string

+ Status string

+ Timestamp time.Time

+ UserAgent string

+ UserID string

+ Username string

type AuditEventFilter

+ EndTime *time.Time

+ StartTime *time.Time

+ Status string

+ Username string

v0.7.1

Aug 13, 2025

v0.7.0

Aug 13, 2025

v0.6.2-security-analysis

Jul 3, 2025

v0.6.1

Jul 3, 2025

v0.6.0

Jul 3, 2025

v0.5.0

Jun 20, 2025

v0.4.0

Jun 20, 2025

v0.3.0

Jun 20, 2025

v0.2.0

Jun 20, 2025

v0.2.0-stable

Jun 20, 2025

v0.1.1

Jun 20, 2025

v0.1.0

Jun 20, 2025

Changes in this version

+ const PermissionAll

+ const PermissionAuditView

+ const PermissionPromptUse

+ const PermissionPromptView

+ const PermissionReportCreate

+ const PermissionReportDelete

+ const PermissionReportExport

+ const PermissionReportGenerate

+ const PermissionReportRead

+ const PermissionReportUpdate

+ const PermissionReportView

+ const PermissionRoleCreate

+ const PermissionRoleDelete

+ const PermissionRoleUpdate

+ const PermissionRoleView

+ const PermissionSecurityAudit

+ const PermissionSecurityConfig

+ const PermissionSecurityIncident

+ const PermissionSecurityScan

+ const PermissionSecurityTest

+ const PermissionSecurityView

+ const PermissionSecurityVulnerability

+ const PermissionSystemAdmin

+ const PermissionSystemAudit

+ const PermissionSystemBackup

+ const PermissionSystemConfig

+ const PermissionSystemMonitor

+ const PermissionSystemRestore

+ const PermissionSystemView

+ const PermissionTemplateApprove

+ const PermissionTemplateCreate

+ const PermissionTemplateDelete

+ const PermissionTemplateExecute

+ const PermissionTemplateRead

+ const PermissionTemplateUpdate

+ const PermissionTemplateUse

+ const PermissionTemplateView

+ const PermissionTestExecute

+ const PermissionUserCreate

+ const PermissionUserDelete

+ const PermissionUserManageRoles

+ const PermissionUserRead

+ const PermissionUserRoleAssign

+ const PermissionUserUpdate

+ const PermissionUserView

+ const PermissionVulnerabilityView

+ const RoleAdmin

+ const RoleAuditor

+ const RoleAutomation

+ const RoleGuest

+ const RoleManager

+ const RoleOperator

+ const RoleUser

+ var AllPermissions = []string

+ var ErrInvalidCredentials = interfaces.ErrInvalidCredentials

+ var ErrInvalidMFACode = interfaces.ErrInvalidMFACode

+ var ErrInvalidPermission = errors.New("invalid permission")

+ var ErrInvalidRole = errors.New("invalid role")

+ var ErrInvalidSession = errors.New("invalid session")

+ var ErrInvalidToken = interfaces.ErrInvalidToken

+ var ErrMFARequired = interfaces.ErrMFARequired

+ var ErrMFAVerificationFailed = errors.New("multi-factor authentication verification failed")

+ var ErrPermissionNotFound = errors.New("permission not found")

+ var ErrRoleAlreadyExists = errors.New("role already exists")

+ var ErrRoleNotFound = errors.New("role not found")

+ var ErrSessionExpired = interfaces.ErrSessionExpired

+ var ErrUnauthorized = errors.New("unauthorized access")

+ var ErrUserInactive = interfaces.ErrUserInactive

+ var ErrUserLocked = interfaces.ErrUserLocked

+ var ErrUserNotFound = interfaces.ErrUserNotFound

+ func CreateMFAContext(ctx context.Context, userID string, method common.AuthMethod, status MFAStatus) context.Context

+ func GetMFAMethod(ctx context.Context) (common.AuthMethod, error)

+ func GetMFAUserID(ctx context.Context) (string, error)

+ func IsMFACompleted(ctx context.Context) bool

+ func IsMFARequired(ctx context.Context) bool

+ func NewInMemoryAuditLoggerAdapter() interfaces.AuditLogger

+ func NewInMemoryIncidentStoreAdapter() interfaces.IncidentStore

+ func NewInMemoryVulnerabilityStoreAdapter() interfaces.VulnerabilityStore

+ func WithMFAMethod(ctx context.Context, method common.AuthMethod) context.Context

+ func WithMFAStatus(ctx context.Context, status MFAStatus) context.Context

+ func WithMFAUserID(ctx context.Context, userID string) context.Context

+ func WithUserID(ctx context.Context, userID string) context.Context

+ type AccessControlConfig struct

+ AuditConfig AuditConfig

+ EnableMFA bool

+ EnableRBAC bool

+ MFARequiredRoles []string

+ PasswordPolicy PasswordPolicy

+ RBACConfig RBACConfigSettings

+ RolePermissions map[string][]string

+ SecurityIncidentConfig SecurityIncidentConfig

+ SessionPolicy SessionPolicy

+ VulnerabilityConfig VulnerabilityConfig

+ func DefaultAccessControlConfig() *AccessControlConfig

+ func DefaultAccessControlConfigV2() *AccessControlConfig

+ type AccessControlIntegration struct

+ func NewAccessControlIntegration(rbacManager rbac.RBACManager, mfaManager mfa.MFAManager, ...) *AccessControlIntegration

+ func (a *AccessControlIntegration) AssignRoleToUser(ctx context.Context, userID, roleID string) error

+ func (a *AccessControlIntegration) AuthorizeAccess(ctx context.Context, sessionID, resource, action string) error

+ func (a *AccessControlIntegration) DisableMFA(ctx context.Context, userID, method string) error

+ func (a *AccessControlIntegration) EnableMFA(ctx context.Context, userID, method string) error

+ func (a *AccessControlIntegration) GetUserPermissions(ctx context.Context, userID string) ([]*rbac.Permission, error)

+ func (a *AccessControlIntegration) GetUserRoles(ctx context.Context, userID string) ([]*rbac.Role, error)

+ func (a *AccessControlIntegration) Login(ctx context.Context, username, password, ip, userAgent string) (*Session, error)

+ func (a *AccessControlIntegration) Logout(ctx context.Context, sessionID string) error

+ func (a *AccessControlIntegration) ResetMFA(ctx context.Context, userID string) error

+ func (a *AccessControlIntegration) RevokeRoleFromUser(ctx context.Context, userID, roleID string) error

+ func (a *AccessControlIntegration) VerifyMFA(ctx context.Context, sessionID, method, code string) error

+ type AccessControlManager struct

+ func NewAccessControlManager(config *AccessControlConfig) (*AccessControlManager, error)

+ func (m *AccessControlManager) ChangePassword(ctx context.Context, id, currentPassword, newPassword, updatedBy string) error

+ func (m *AccessControlManager) Close(ctx context.Context) error

+ func (m *AccessControlManager) CreateIncident(ctx context.Context, title, description string, severity AuditSeverity, ...) (*SecurityIncident, error)

+ func (m *AccessControlManager) CreateUser(ctx context.Context, username, email, password string, roles []string, ...) (*User, error)

+ func (m *AccessControlManager) CreateVulnerability(ctx context.Context, title, description string, severity AuditSeverity, ...) (*Vulnerability, error)

+ func (m *AccessControlManager) DeleteUser(ctx context.Context, id, deletedBy string) error

+ func (m *AccessControlManager) DisableMFA(ctx context.Context, id string, method common.AuthMethod, disabledBy string) error

+ func (m *AccessControlManager) EnableMFA(ctx context.Context, id string, method common.AuthMethod, enabledBy string) error

+ func (m *AccessControlManager) GetIncident(ctx context.Context, id string) (*SecurityIncident, error)

+ func (m *AccessControlManager) GetRBACManager() RBACManager

+ func (m *AccessControlManager) GetUser(ctx context.Context, id string) (*User, error)

+ func (m *AccessControlManager) GetUserByUsername(ctx context.Context, username string) (*User, error)

+ func (m *AccessControlManager) GetUserManager() UserManager

+ func (m *AccessControlManager) GetVulnerability(ctx context.Context, id string) (*Vulnerability, error)

+ func (m *AccessControlManager) HasPermission(ctx context.Context, user *User, permission Permission) bool

+ func (m *AccessControlManager) HasRole(ctx context.Context, user *User, role rbac.Role) bool

+ func (m *AccessControlManager) Initialize(ctx context.Context) error

+ func (m *AccessControlManager) ListIncidents(ctx context.Context, filter *IncidentFilter) ([]*SecurityIncident, error)

+ func (m *AccessControlManager) ListUsers(ctx context.Context) ([]*User, error)

+ func (m *AccessControlManager) ListVulnerabilities(ctx context.Context, filter *VulnerabilityFilter) ([]*Vulnerability, error)

+ func (m *AccessControlManager) LockUser(ctx context.Context, id, lockedBy string, reason string) error

+ func (m *AccessControlManager) LogAudit(ctx context.Context, log *AuditLog) error

+ func (m *AccessControlManager) Login(ctx context.Context, username, password string, ipAddress, userAgent string) (*Session, error)

+ func (m *AccessControlManager) Logout(ctx context.Context, sessionID string) error

+ func (m *AccessControlManager) QueryAuditLogs(ctx context.Context, filter *AuditLogFilter) ([]*AuditLog, error)

+ func (m *AccessControlManager) RefreshSession(ctx context.Context, refreshToken string) (*Session, error)

+ func (m *AccessControlManager) ResetPassword(ctx context.Context, id, newPassword, resetBy string) error

+ func (m *AccessControlManager) UnlockUser(ctx context.Context, id, unlockedBy string) error

+ func (m *AccessControlManager) UpdateIncidentStatus(ctx context.Context, id string, status IncidentStatus, ...) error

+ func (m *AccessControlManager) UpdateUser(ctx context.Context, id, username, email string, roles []string, active bool, ...) (*User, error)

+ func (m *AccessControlManager) UpdateVulnerabilityStatus(ctx context.Context, id string, status VulnerabilityStatus, ...) error

+ func (m *AccessControlManager) ValidateSession(ctx context.Context, token string) (bool, error)

+ func (m *AccessControlManager) VerifyMFA(ctx context.Context, sessionID, code string) error

+ type AccessControlSystem struct

+ func NewAccessControlSystem(config *AccessControlConfig) (*AccessControlSystem, error)

+ func NewAccessControlSystemWithStores(config *AccessControlConfig, userStore UserStore, sessionStore SessionStore, ...) (*AccessControlSystem, error)

+ func (a *AccessControlSystem) Close() error

+ func (a *AccessControlSystem) DeleteUser(ctx context.Context, userID string) error

+ func (a *AccessControlSystem) DisableMFA(ctx context.Context, userID string, method common.AuthMethod) error

+ func (a *AccessControlSystem) EnableMFA(ctx context.Context, userID string, method common.AuthMethod) error

+ func (a *AccessControlSystem) UpdateUser(ctx context.Context, user *User) error

+ func (a *AccessControlSystem) UpdateUserPassword(ctx context.Context, userID, currentPassword, newPassword string) error

+ func (s *AccessControlSystem) Audit() *AuditManager

+ func (s *AccessControlSystem) Auth() *AuthManager

+ func (s *AccessControlSystem) CreateUser(ctx context.Context, username, email, password string, roles []string) (*User, error)

+ func (s *AccessControlSystem) GetAllUsers(ctx context.Context) ([]*User, error)

+ func (s *AccessControlSystem) GetUserByID(ctx context.Context, id string) (*User, error)

+ func (s *AccessControlSystem) GetUserByUsername(ctx context.Context, username string) (*User, error)

+ func (s *AccessControlSystem) Initialize(ctx context.Context) error

+ func (s *AccessControlSystem) MFA() mfa.MFAManager

+ func (s *AccessControlSystem) RBAC() *simpleRBACManager

+ func (s *AccessControlSystem) Security() *simpleSecurityManager

+ type AccessControlSystemImpl struct

+ func (a *AccessControlSystemImpl) Close() error

+ func (a *AccessControlSystemImpl) GetAuditLogger() AuditLogger

+ func (a *AccessControlSystemImpl) GetAuthManager() AuthManager

+ func (a *AccessControlSystemImpl) GetRBACManager() RBACManager

+ func (a *AccessControlSystemImpl) GetSecurityManager() SecurityManager

+ func (a *AccessControlSystemImpl) GetUserManager() UserManager

+ func (a *AccessControlSystemImpl) Initialize() error

+ type AuditAction string

+ const AuditActionAuthorize

+ const AuditActionCreate

+ const AuditActionDelete

+ const AuditActionExecute

+ const AuditActionLogin

+ const AuditActionLogout

+ const AuditActionRead

+ const AuditActionSecurity

+ const AuditActionSystem

+ const AuditActionUnauthorized

+ const AuditActionUpdate

+ type AuditConfig struct

+ EnabledSeverities []AuditSeverity

+ LogFilePath string

+ RetentionDays int

+ func DefaultAuditConfig() *AuditConfig

+ func (c *AuditConfig) IsEnabled(severity AuditSeverity) bool

+ type AuditEventFilter struct

+ Action string

+ CreatedAfter string

+ CreatedBefore string

+ IPAddress string

+ Limit int

+ Offset int

+ Resource string

+ ResourceID string

+ Severity string

+ SortBy string

+ SortOrder string

+ UserID string

+ type AuditLog struct

+ Action AuditAction

+ Changes map[string]interface{}

+ Description string

+ ID string

+ IPAddress string

+ Metadata map[string]interface{}

+ Resource string

+ ResourceID string

+ SessionID string

+ Severity AuditSeverity

+ Status string

+ Timestamp time.Time

+ UserAgent string

+ UserID string

+ Username string

+ type AuditLogFilter struct

+ Action AuditAction

+ EndTime time.Time

+ IPAddress string

+ Limit int

+ Offset int

+ Resource string

+ ResourceID string

+ SessionID string

+ Severity AuditSeverity

+ StartTime time.Time

+ Status string

+ UserID string

+ Username string

+ type AuditLogger interface

+ Close func(ctx context.Context) error

+ GetAuditLogByID func(ctx context.Context, id string) (*AuditLog, error)

+ GetAuditLogs func(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*AuditLog, int, error)

+ Initialize func(ctx context.Context) error

+ LogAudit func(ctx context.Context, log *AuditLog) error

+ type AuditLoggerConfig struct

+ LogFile string

+ LogFormat string

+ LogToConsole bool

+ LogToFile bool

+ RetentionDays int

+ type AuditLoggerImpl struct

+ func NewAuditLogger(auditStore AuditStore, config *AuditLoggerConfig) *AuditLoggerImpl

+ func (l *AuditLoggerImpl) CleanupOldLogs(ctx context.Context) (int, error)

+ func (l *AuditLoggerImpl) Close() error

+ func (l *AuditLoggerImpl) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

+ func (l *AuditLoggerImpl) Initialize(ctx context.Context) error

+ func (l *AuditLoggerImpl) LogAudit(ctx context.Context, log *models.AuditLog) error

+ type AuditManager struct

+ func NewAuditManager(logger AuditLogger, config *AuditConfig) (*AuditManager, error)

+ func (m *AuditManager) Close() error

+ func (m *AuditManager) GetAuditLogByID(ctx context.Context, id string) (*AuditLog, error)

+ func (m *AuditManager) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*AuditLog, int, error)

+ func (m *AuditManager) LogAudit(ctx context.Context, log *AuditLog) error

+ type AuditSeverity string

+ const AuditSeverityCritical

+ const AuditSeverityError

+ const AuditSeverityHigh

+ const AuditSeverityInfo

+ const AuditSeverityLow

+ const AuditSeverityMedium

+ type AuditStore interface

+ Close func() error

+ DeleteAuditLog func(ctx context.Context, id string) error

+ DeleteAuditLogsBefore func(ctx context.Context, before time.Time) (int, error)

+ GetAuditLog func(ctx context.Context, id string) (*models.AuditLog, error)

+ GetAuditLogs func(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

+ StoreAuditLog func(ctx context.Context, log *models.AuditLog) error

+ type AuthConfig struct

+ MFAEnabled bool

+ MFAMethods []string

+ PasswordMaxAge time.Duration

+ PasswordMinLength int

+ PasswordRequireLower bool

+ PasswordRequireNumber bool

+ PasswordRequireSpecial bool

+ PasswordRequireUpper bool

+ SessionMaxInactive time.Duration

+ SessionTimeout time.Duration

+ type AuthManager struct

+ func NewAuthManager(userStore UserStore, sessionStore SessionStore, auditLogger AuditLogger, ...) (*AuthManager, error)

+ func (m *AuthManager) Close() error

+ func (m *AuthManager) CreateUser(ctx context.Context, username, email, password string, roles []string) (*User, error)

+ func (m *AuthManager) DeleteUser(ctx context.Context, userID string) error

+ func (m *AuthManager) DisableMFA(ctx context.Context, userID string, method common.AuthMethod) error

+ func (m *AuthManager) EnableMFA(ctx context.Context, userID string, method common.AuthMethod) error

+ func (m *AuthManager) GetAllUsers(ctx context.Context) ([]*User, error)

+ func (m *AuthManager) GetUserByEmail(ctx context.Context, email string) (*User, error)

+ func (m *AuthManager) GetUserByID(ctx context.Context, id string) (*User, error)

+ func (m *AuthManager) GetUserByUsername(ctx context.Context, username string) (*User, error)

+ func (m *AuthManager) HasRole(ctx context.Context, userID string, role string) (bool, error)

+ func (m *AuthManager) Initialize(ctx context.Context) error

+ func (m *AuthManager) Login(ctx context.Context, username, password, ipAddress, userAgent string) (*Session, error)

+ func (m *AuthManager) Logout(ctx context.Context, sessionID string) error

+ func (m *AuthManager) RefreshSession(ctx context.Context, refreshToken string) (*Session, error)

+ func (m *AuthManager) UpdateSession(ctx context.Context, sessionID string, updates map[string]interface{}) error

+ func (m *AuthManager) UpdateUser(ctx context.Context, user *User) error

+ func (m *AuthManager) UpdateUserPassword(ctx context.Context, userID, currentPassword, newPassword string) error

+ func (m *AuthManager) ValidateSession(ctx context.Context, token string) (*Session, error)

+ func (m *AuthManager) VerifyMFA(ctx context.Context, sessionID, code string) error

+ func (m *AuthManager) VerifySession(ctx context.Context, token string) (bool, error)

+ type AuthManagerImpl struct

+ func NewAuthManagerImpl(userStore interfaces.UserStore, sessionStore interfaces.SessionStore, ...) *AuthManagerImpl

+ func (m *AuthManagerImpl) ChangePassword(ctx context.Context, userID, oldPassword, newPassword string) error

+ func (m *AuthManagerImpl) Close() error

+ func (m *AuthManagerImpl) Initialize(ctx context.Context) error

+ func (m *AuthManagerImpl) Login(ctx context.Context, username, password string) (*models.Session, error)

+ func (m *AuthManagerImpl) Logout(ctx context.Context, sessionID string) error

+ func (m *AuthManagerImpl) RefreshSession(ctx context.Context, sessionID string) (*models.Session, error)

+ func (m *AuthManagerImpl) ResetPassword(ctx context.Context, userID, newPassword string) error

+ func (m *AuthManagerImpl) ValidateSession(ctx context.Context, sessionID string) (*models.Session, error)

+ type BasicInMemorySessionStore struct

+ func NewBasicInMemorySessionStore() *BasicInMemorySessionStore

+ func (s *BasicInMemorySessionStore) CleanupExpiredSessions(ctx context.Context) error

+ func (s *BasicInMemorySessionStore) CreateSession(ctx context.Context, session *Session) error

+ func (s *BasicInMemorySessionStore) DeleteSession(ctx context.Context, sessionID string) error

+ func (s *BasicInMemorySessionStore) DeleteUserSessions(ctx context.Context, userID string) error

+ func (s *BasicInMemorySessionStore) GetSession(ctx context.Context, sessionID string) (*Session, error)

+ func (s *BasicInMemorySessionStore) ListUserSessions(ctx context.Context, userID string) ([]*Session, error)

+ func (s *BasicInMemorySessionStore) UpdateSession(ctx context.Context, session *Session) error

+ type BasicInMemoryUserStore struct

+ func NewBasicInMemoryUserStore() *BasicInMemoryUserStore

+ func (s *BasicInMemoryUserStore) CreateUser(ctx context.Context, user *User) error

+ func (s *BasicInMemoryUserStore) DeleteUser(ctx context.Context, userID string) error

+ func (s *BasicInMemoryUserStore) GetUserByEmail(ctx context.Context, email string) (*User, error)

+ func (s *BasicInMemoryUserStore) GetUserByID(ctx context.Context, userID string) (*User, error)

+ func (s *BasicInMemoryUserStore) GetUserByUsername(ctx context.Context, username string) (*User, error)

+ func (s *BasicInMemoryUserStore) ListUsers(ctx context.Context) ([]*User, error)

+ func (s *BasicInMemoryUserStore) UpdateUser(ctx context.Context, user *User) error

+ type BasicSecurityManager struct

+ func NewBasicSecurityManager(config *AccessControlConfig, incidentStore IncidentStore, ...) *BasicSecurityManager

+ func NewSecurityManager(config *AccessControlConfig, incidentStore IncidentStore, ...) *BasicSecurityManager

+ func (m *BasicSecurityManager) Close() error

+ func (m *BasicSecurityManager) CreateIncident(ctx context.Context, title, description string, severity AuditSeverity, ...) (*SecurityIncident, error)

+ func (m *BasicSecurityManager) CreateVulnerability(ctx context.Context, title, description string, severity AuditSeverity, ...) (*Vulnerability, error)

+ func (m *BasicSecurityManager) GetIncident(ctx context.Context, id string) (*SecurityIncident, error)

+ func (m *BasicSecurityManager) GetVulnerability(ctx context.Context, id string) (*Vulnerability, error)

+ func (m *BasicSecurityManager) ListIncidents(ctx context.Context, filter *LocalIncidentFilter) ([]*SecurityIncident, error)

+ func (m *BasicSecurityManager) ListVulnerabilities(ctx context.Context, filter *LocalVulnerabilityFilter) ([]*Vulnerability, error)

+ func (m *BasicSecurityManager) ProcessSecurityAuditLog(ctx context.Context, log *AuditLog) error

+ func (m *BasicSecurityManager) UpdateIncidentStatus(ctx context.Context, id string, status IncidentStatus, ...) error

+ func (m *BasicSecurityManager) UpdateVulnerabilityStatus(ctx context.Context, id string, status VulnerabilityStatus, ...) error

+ type Config struct

+ DBDSN string

+ DBDriver string

+ InMemory bool

+ LogFile string

+ LogFormat string

+ LogLevel string

+ MFAEnabled bool

+ MFAMethods []string

+ PasswordMaxAge int

+ PasswordMinLength int

+ PasswordRequireLower bool

+ PasswordRequireNumber bool

+ PasswordRequireSpecial bool

+ PasswordRequireUpper bool

+ SessionMaxInactive int

+ SessionTimeout int

+ type ContextBoundary struct

+ Required bool

+ Type ContextBoundaryType

+ Validation func(ctx context.Context, value string) bool

+ Value string

+ type ContextBoundaryType string

+ const BoundaryTypeMFA

+ const BoundaryTypePermission

+ const BoundaryTypeRole

+ const BoundaryTypeSession

+ const BoundaryTypeUser

+ type EnhancedContextBoundaryEnforcer struct

+ func NewEnhancedContextBoundaryEnforcer() *EnhancedContextBoundaryEnforcer

+ func (e *EnhancedContextBoundaryEnforcer) AddBoundary(boundary ContextBoundary)

+ func (e *EnhancedContextBoundaryEnforcer) EnforceBoundaries(ctx context.Context) error

+ func (e *EnhancedContextBoundaryEnforcer) Middleware(next http.Handler) http.Handler

+ func (e *EnhancedContextBoundaryEnforcer) RequireMFA() ContextBoundary

+ func (e *EnhancedContextBoundaryEnforcer) RequirePermission(permission string) ContextBoundary

+ func (e *EnhancedContextBoundaryEnforcer) RequireRole(role string) ContextBoundary

+ func (e *EnhancedContextBoundaryEnforcer) RequireSession() ContextBoundary

+ func (e *EnhancedContextBoundaryEnforcer) RequireUser(userID string) ContextBoundary

+ func (e *EnhancedContextBoundaryEnforcer) SetAuthManager(authManager *AuthManager)

+ func (e *EnhancedContextBoundaryEnforcer) SetRBACManager(rbacManager *RBACManagerImpl)

+ func (e *EnhancedContextBoundaryEnforcer) SetSessionManager(sessionManager *SessionManager)

+ type Factory interface

+ CreateAccessControlSystem func() (AccessControlSystem, error)

+ CreateAuditLogger func() (LegacyAuditLogger, error)

+ CreateAuthManager func() (LegacyAuthManagerInterface, error)

+ CreateRBACManager func() (RBACManager, error)

+ CreateSecurityManager func() (SecurityManager, error)

+ CreateUserManager func() (UserManager, error)

+ type FactoryImpl struct

+ func NewAccessControlFactory(config *Config) *FactoryImpl

+ func NewFactory(config *Config) *FactoryImpl

+ func (f *FactoryImpl) CreateAccessControlSystem() (*AccessControlSystem, error)

+ func (f *FactoryImpl) CreateAuditLogger() (AuditLogger, error)

+ func (f *FactoryImpl) CreateAuthManager() (AuthManager, error)

+ func (f *FactoryImpl) CreateDatabaseAccessControlSystem(dbDriver, dbDSN string) (*AccessControlSystem, error)

+ func (f *FactoryImpl) CreateInMemoryAccessControlSystem() (*AccessControlSystem, error)

+ func (f *FactoryImpl) CreateRBACManager() (RBACManager, error)

+ func (f *FactoryImpl) CreateSecurityManager() (*BasicSecurityManager, error)

+ func (f *FactoryImpl) CreateSecurityManagerAdapter(legacyManager interface{}) interfaces.SecurityManager

+ func (f *FactoryImpl) CreateSessionStoreAdapter(legacyStore interface{}) interfaces.SessionStore

+ func (f *FactoryImpl) CreateUserManager() (UserManager, error)

+ func (f *FactoryImpl) CreateUserStoreAdapter(legacyStore interface{}) interfaces.UserStore

+ type FileAuditLogger struct

+ func NewFileAuditLogger(filePath string) *FileAuditLogger

+ func (l *FileAuditLogger) Close(ctx context.Context) error

+ func (l *FileAuditLogger) GetAuditLogByID(ctx context.Context, id string) (*AuditLog, error)

+ func (l *FileAuditLogger) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*AuditLog, int, error)

+ func (l *FileAuditLogger) Initialize(ctx context.Context) error

+ func (l *FileAuditLogger) LogAudit(ctx context.Context, log *AuditLog) error

+ type InMemoryAuditLogger struct

+ func NewInMemoryAuditLogger() *InMemoryAuditLogger

+ func (l *InMemoryAuditLogger) Close(ctx context.Context) error

+ func (l *InMemoryAuditLogger) GetAuditLogByID(ctx context.Context, id string) (*AuditLog, error)

+ func (l *InMemoryAuditLogger) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*AuditLog, int, error)

+ func (l *InMemoryAuditLogger) Initialize(ctx context.Context) error

+ func (l *InMemoryAuditLogger) LogAudit(ctx context.Context, log *AuditLog) error

+ type InMemoryAuditLoggerAdapter struct

+ func (l *InMemoryAuditLoggerAdapter) Close() error

+ func (l *InMemoryAuditLoggerAdapter) ExportEvents(ctx context.Context, filter map[string]interface{}, format string) (string, error)

+ func (l *InMemoryAuditLoggerAdapter) GetAuditLogByID(ctx context.Context, id string) (*models.AuditLog, error)

+ func (l *InMemoryAuditLoggerAdapter) GetEventByID(ctx context.Context, id string) (*models.AuditLog, error)

+ func (l *InMemoryAuditLoggerAdapter) ListAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

+ func (l *InMemoryAuditLoggerAdapter) LogAudit(ctx context.Context, log *models.AuditLog) error

+ func (l *InMemoryAuditLoggerAdapter) LogEvent(ctx context.Context, event *models.AuditLog) error

+ func (l *InMemoryAuditLoggerAdapter) QueryEvents(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

+ type InMemoryAuditLoggerWithTypes struct

+ func NewInMemoryAuditLoggerWithTypes() *InMemoryAuditLoggerWithTypes

+ func (l *InMemoryAuditLoggerWithTypes) Close() error

+ func (l *InMemoryAuditLoggerWithTypes) GetAuditLogByID(ctx context.Context, id string) (*common.AuditLog, error)

+ func (l *InMemoryAuditLoggerWithTypes) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*common.AuditLog, int, error)

+ func (l *InMemoryAuditLoggerWithTypes) Initialize(ctx context.Context) error

+ func (l *InMemoryAuditLoggerWithTypes) LogAudit(ctx context.Context, log *common.AuditLog) error

+ type InMemoryAuditStore struct

+ func NewInMemoryAuditStore() *InMemoryAuditStore

+ func (s *InMemoryAuditStore) Close() error

+ func (s *InMemoryAuditStore) DeleteAuditLog(ctx context.Context, id string) error

+ func (s *InMemoryAuditStore) DeleteAuditLogsBefore(ctx context.Context, before time.Time) (int, error)

+ func (s *InMemoryAuditStore) GetAuditLog(ctx context.Context, id string) (*models.AuditLog, error)

+ func (s *InMemoryAuditStore) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

+ func (s *InMemoryAuditStore) StoreAuditLog(ctx context.Context, log *models.AuditLog) error

+ type InMemoryIncidentStore struct

+ func NewInMemoryIncidentStore() *InMemoryIncidentStore

+ func (s *InMemoryIncidentStore) Close() error

+ func (s *InMemoryIncidentStore) CreateIncident(ctx context.Context, incident *common.SecurityIncident) error

+ func (s *InMemoryIncidentStore) DeleteIncident(ctx context.Context, id string) error

+ func (s *InMemoryIncidentStore) GetIncidentByID(ctx context.Context, id string) (*common.SecurityIncident, error)

+ func (s *InMemoryIncidentStore) ListIncidents(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*common.SecurityIncident, int, error)

+ func (s *InMemoryIncidentStore) UpdateIncident(ctx context.Context, incident *common.SecurityIncident) error

+ type InMemoryIncidentStoreAdapter struct

+ func (s *InMemoryIncidentStoreAdapter) Close() error

+ func (s *InMemoryIncidentStoreAdapter) CreateIncident(ctx context.Context, incident *models.SecurityIncident) error

+ func (s *InMemoryIncidentStoreAdapter) DeleteIncident(ctx context.Context, id string) error

+ func (s *InMemoryIncidentStoreAdapter) GetIncidentByID(ctx context.Context, id string) (*models.SecurityIncident, error)

+ func (s *InMemoryIncidentStoreAdapter) ListIncidents(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.SecurityIncident, int, error)

+ func (s *InMemoryIncidentStoreAdapter) UpdateIncident(ctx context.Context, incident *models.SecurityIncident) error

+ type InMemoryIncidentStoreModels struct

+ func (s *InMemoryIncidentStoreModels) CreateIncident(ctx context.Context, incident *models.SecurityIncident) error

+ func (s *InMemoryIncidentStoreModels) GetIncidentByID(ctx context.Context, incidentID string) (*models.SecurityIncident, error)

+ func (s *InMemoryIncidentStoreModels) ListIncidents(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.SecurityIncident, int, error)

+ func (s *InMemoryIncidentStoreModels) UpdateIncident(ctx context.Context, incident *models.SecurityIncident) error

+ type InMemoryRoleStore struct

+ func NewInMemoryRoleStore() *InMemoryRoleStore

+ func (s *InMemoryRoleStore) AddPermissionToRole(ctx context.Context, role, permission string) error

+ func (s *InMemoryRoleStore) AddRoleToUser(ctx context.Context, userID, role string) error

+ func (s *InMemoryRoleStore) GetAllPermissions(ctx context.Context) ([]string, error)

+ func (s *InMemoryRoleStore) GetAllRoles(ctx context.Context) ([]string, error)

+ func (s *InMemoryRoleStore) GetRolePermissions(ctx context.Context, role string) ([]string, error)

+ func (s *InMemoryRoleStore) GetUserRoles(ctx context.Context, userID string) ([]string, error)

+ func (s *InMemoryRoleStore) RemovePermissionFromRole(ctx context.Context, role, permission string) error

+ func (s *InMemoryRoleStore) RemoveRoleFromUser(ctx context.Context, userID, role string) error

+ type InMemorySessionStore struct

+ func NewInMemorySessionStore() *InMemorySessionStore

+ func (s *InMemorySessionStore) CleanExpiredSessions(ctx context.Context) error

+ func (s *InMemorySessionStore) Close() error

+ func (s *InMemorySessionStore) CreateSession(ctx context.Context, session *Session) error

+ func (s *InMemorySessionStore) DeleteSession(ctx context.Context, id string) error

+ func (s *InMemorySessionStore) GetSession(ctx context.Context, id string) (*Session, error)

+ func (s *InMemorySessionStore) GetUserSessions(ctx context.Context, userID string) ([]*Session, error)

+ func (s *InMemorySessionStore) UpdateSession(ctx context.Context, session *Session) error

+ type InMemoryUserStore struct

+ func NewInMemoryUserStore() *InMemoryUserStore

+ func (s *InMemoryUserStore) Close() error

+ func (s *InMemoryUserStore) CreateUser(ctx context.Context, user *User) error

+ func (s *InMemoryUserStore) DeleteUser(ctx context.Context, id string) error

+ func (s *InMemoryUserStore) GetUserByEmail(ctx context.Context, email string) (*User, error)

+ func (s *InMemoryUserStore) GetUserByID(ctx context.Context, id string) (*User, error)

+ func (s *InMemoryUserStore) GetUserByUsername(ctx context.Context, username string) (*User, error)

+ func (s *InMemoryUserStore) ListUsers(ctx context.Context) ([]*User, error)

+ func (s *InMemoryUserStore) UpdateUser(ctx context.Context, user *User) error

+ type InMemoryVulnerabilityStore struct

+ func NewInMemoryVulnerabilityStore() *InMemoryVulnerabilityStore

+ func (s *InMemoryVulnerabilityStore) Close() error

+ func (s *InMemoryVulnerabilityStore) CreateVulnerability(ctx context.Context, vulnerability *common.Vulnerability) error

+ func (s *InMemoryVulnerabilityStore) DeleteVulnerability(ctx context.Context, id string) error

+ func (s *InMemoryVulnerabilityStore) GetVulnerabilityByID(ctx context.Context, id string) (*common.Vulnerability, error)

+ func (s *InMemoryVulnerabilityStore) ListVulnerabilities(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*common.Vulnerability, int, error)

+ func (s *InMemoryVulnerabilityStore) UpdateVulnerability(ctx context.Context, vulnerability *common.Vulnerability) error

+ type InMemoryVulnerabilityStoreAdapter struct

+ func (s *InMemoryVulnerabilityStoreAdapter) Close() error

+ func (s *InMemoryVulnerabilityStoreAdapter) CreateVulnerability(ctx context.Context, vulnerability *models.Vulnerability) error

+ func (s *InMemoryVulnerabilityStoreAdapter) DeleteVulnerability(ctx context.Context, id string) error

+ func (s *InMemoryVulnerabilityStoreAdapter) GetVulnerabilityByCVE(ctx context.Context, cve string) (*models.Vulnerability, error)

+ func (s *InMemoryVulnerabilityStoreAdapter) GetVulnerabilityByID(ctx context.Context, id string) (*models.Vulnerability, error)

+ func (s *InMemoryVulnerabilityStoreAdapter) ListVulnerabilities(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.Vulnerability, int, error)

+ func (s *InMemoryVulnerabilityStoreAdapter) UpdateVulnerability(ctx context.Context, vulnerability *models.Vulnerability) error

+ type InMemoryVulnerabilityStoreModels struct

+ func (s *InMemoryVulnerabilityStoreModels) CreateVulnerability(ctx context.Context, vulnerability *models.Vulnerability) error

+ func (s *InMemoryVulnerabilityStoreModels) GetVulnerabilityByID(ctx context.Context, vulnerabilityID string) (*models.Vulnerability, error)

+ func (s *InMemoryVulnerabilityStoreModels) ListVulnerabilities(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.Vulnerability, int, error)

+ func (s *InMemoryVulnerabilityStoreModels) UpdateVulnerability(ctx context.Context, vulnerability *models.Vulnerability) error

+ type IncidentFilter struct

+ AssigneeID string

+ Limit int

+ Offset int

+ ReportedAfter string

+ Severity string

+ SortBy string

+ SortOrder string

+ Status string

+ type IncidentStatus string

+ const IncidentStatusClosed

+ const IncidentStatusDuplicate

+ const IncidentStatusInProgress

+ const IncidentStatusNew

+ const IncidentStatusResolved

+ type IncidentStore interface

+ CreateIncident func(ctx context.Context, incident *SecurityIncident) error

+ DeleteIncident func(ctx context.Context, id string) error

+ GetIncident func(ctx context.Context, id string) (*SecurityIncident, error)

+ ListIncidents func(ctx context.Context, filter *LocalIncidentFilter) ([]*SecurityIncident, error)

+ UpdateIncident func(ctx context.Context, incident *SecurityIncident) error

+ type LegacyAuditLogger interface

+ Close func() error

+ GetAuditLogs func(filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

+ LogAudit func(log *models.AuditLog) error

+ type LegacyAuthManager struct

+ func NewLegacyAuthManager(config *AccessControlConfig, userStore UserStore, sessionStore SessionStore, ...) *LegacyAuthManager

+ func NewLegacyAuthManagerWithMFA(config *AccessControlConfig, userStore UserStore, sessionStore SessionStore, ...) *LegacyAuthManager

+ func (m *LegacyAuthManager) CreateUser(ctx context.Context, username, email, password string, roles []string) (*User, error)

+ func (m *LegacyAuthManager) DisableMFA(ctx context.Context, userID string, method common.AuthMethod) error

+ func (m *LegacyAuthManager) EnableMFA(ctx context.Context, userID string, method common.AuthMethod) error

+ func (m *LegacyAuthManager) Login(ctx context.Context, username, password string, ipAddress, userAgent string) (*Session, error)

+ func (m *LegacyAuthManager) Logout(ctx context.Context, sessionID string) error

+ func (m *LegacyAuthManager) RefreshSession(ctx context.Context, sessionID, refreshToken string, ...) (*Session, error)

+ func (m *LegacyAuthManager) UpdateUserPassword(ctx context.Context, userID, currentPassword, newPassword string) error

+ func (m *LegacyAuthManager) ValidateSession(ctx context.Context, sessionID, token string, ipAddress, userAgent string) (*User, error)

+ func (m *LegacyAuthManager) VerifyMFA(ctx context.Context, sessionID, code string) error

+ type LegacyAuthManagerInterface interface

+ ChangePassword func(userID, oldPassword, newPassword string) error

+ Close func() error

+ Login func(username, password string) (*models.Session, error)

+ Logout func(sessionID string) error

+ RefreshSession func(sessionID string) (*models.Session, error)

+ ResetPassword func(userID, newPassword string) error

+ ValidateSession func(sessionID string) (*models.Session, error)

+ type LocalInMemoryIncidentStore struct

+ func NewLocalInMemoryIncidentStore() *LocalInMemoryIncidentStore

+ func (s *LocalInMemoryIncidentStore) CreateIncident(ctx context.Context, incident *SecurityIncident) error

+ func (s *LocalInMemoryIncidentStore) DeleteIncident(ctx context.Context, id string) error

+ func (s *LocalInMemoryIncidentStore) GetIncident(ctx context.Context, id string) (*SecurityIncident, error)

+ func (s *LocalInMemoryIncidentStore) ListIncidents(ctx context.Context, filter *LocalIncidentFilter) ([]*SecurityIncident, error)

+ func (s *LocalInMemoryIncidentStore) UpdateIncident(ctx context.Context, incident *SecurityIncident) error

+ type LocalInMemoryVulnerabilityStore struct

+ func NewLocalInMemoryVulnerabilityStore() *LocalInMemoryVulnerabilityStore

+ func (s *LocalInMemoryVulnerabilityStore) CreateVulnerability(ctx context.Context, vulnerability *Vulnerability) error

+ func (s *LocalInMemoryVulnerabilityStore) DeleteVulnerability(ctx context.Context, id string) error

+ func (s *LocalInMemoryVulnerabilityStore) GetVulnerability(ctx context.Context, id string) (*Vulnerability, error)

+ func (s *LocalInMemoryVulnerabilityStore) ListVulnerabilities(ctx context.Context, filter *LocalVulnerabilityFilter) ([]*Vulnerability, error)

+ func (s *LocalInMemoryVulnerabilityStore) UpdateVulnerability(ctx context.Context, vulnerability *Vulnerability) error

+ type LocalIncidentFilter struct

+ AssignedTo string

+ EndTime time.Time

+ Limit int

+ Offset int

+ ReportedBy string

+ Severity AuditSeverity

+ StartTime time.Time

+ Status IncidentStatus

+ type LocalVulnerabilityFilter struct

+ AffectedSystem string

+ AssignedTo string

+ CVE string

+ EndTime time.Time

+ Limit int

+ Offset int

+ ReportedBy string

+ Severity AuditSeverity

+ StartTime time.Time

+ Status VulnerabilityStatus

+ type LoginResult struct

+ RefreshToken string

+ Session *models.Session

+ Token string

+ User *models.User

+ type MFAContextKey string

+ const MFAMethodKey

+ const MFAStatusKey

+ const MFAUserIDKey

+ type MFAMiddleware struct

+ func NewMFAMiddleware(authManager *AuthManager) *MFAMiddleware

+ func (m *MFAMiddleware) ConditionalMFA(condition MFARequiredFunc, next http.Handler) http.Handler

+ func (m *MFAMiddleware) MFAByPath(paths []string, next http.Handler) http.Handler

+ func (m *MFAMiddleware) MFAByRole(roles []string, next http.Handler) http.Handler

+ func (m *MFAMiddleware) MFAVerifyHandler(w http.ResponseWriter, r *http.Request)

+ func (m *MFAMiddleware) OptionalMFA(next http.Handler) http.Handler

+ func (m *MFAMiddleware) RequireMFA(next http.Handler) http.Handler

+ type MFARequiredFunc func(r *http.Request) bool

+ type MFAStatus string

+ const MFAStatusCompleted

+ const MFAStatusNotRequired

+ const MFAStatusRequired

+ func GetMFAStatus(ctx context.Context) (MFAStatus, error)

+ type MultiAuditLogger struct

+ func NewMultiAuditLogger(loggers ...AuditLogger) *MultiAuditLogger

+ func (l *MultiAuditLogger) Close(ctx context.Context) error

+ func (l *MultiAuditLogger) GetAuditLogByID(ctx context.Context, id string) (*AuditLog, error)

+ func (l *MultiAuditLogger) GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*AuditLog, int, error)

+ func (l *MultiAuditLogger) Initialize(ctx context.Context) error

+ func (l *MultiAuditLogger) LogAudit(ctx context.Context, log *AuditLog) error

+ type PasswordPolicy struct

+ LockoutDuration int

+ LockoutThreshold int

+ MaxAge int

+ MinLength int

+ PreventReuseCount int

+ RequireLowercase bool

+ RequireNumbers bool

+ RequireSpecialChars bool

+ RequireUppercase bool

+ type Permission = string

+ type PersistentSessionStore interface

+ CloseWithContext func(ctx context.Context) error

+ Initialize func(ctx context.Context) error

+ type RBACConfig struct

+ CustomRoles []Role

+ DefaultRoles []string

+ RoleHierarchy map[string][]string

+ RolePermissions map[string][]string

+ func NewRBACConfig() *RBACConfig

+ type RBACConfigSettings struct

+ AllowDirectPermissions bool

+ DefaultRoles []string

+ RolePermissions map[string][]string

+ StrictHierarchy bool

+ type RBACManager interface

+ AddRoleToUser func(userID string, role string) error

+ Close func() error

+ GetUserPermissions func(userID string) ([]string, error)

+ GetUserRoles func(userID string) ([]string, error)

+ HasPermission func(userID string, permission string) (bool, error)

+ HasRole func(userID string, role string) (bool, error)

+ RemoveRoleFromUser func(userID string, role string) error

+ type RBACManagerAdapter struct

+ func NewRBACManagerAdapter(manager *SimpleRBACManager) *RBACManagerAdapter

+ func (a *RBACManagerAdapter) AddRoleToUser(userID string, role string) error

+ func (a *RBACManagerAdapter) Close() error

+ func (a *RBACManagerAdapter) GetUserPermissions(userID string) ([]string, error)

+ func (a *RBACManagerAdapter) GetUserRoles(userID string) ([]string, error)

+ func (a *RBACManagerAdapter) HasPermission(userID string, permission string) (bool, error)

+ func (a *RBACManagerAdapter) HasRole(userID string, role string) (bool, error)

+ func (a *RBACManagerAdapter) RemoveRoleFromUser(userID string, role string) error

+ type RBACManagerImpl struct

+ func NewRBACManagerImpl(userManager UserManager, roleStore RoleStore, auditLogger AuditLogger) *RBACManagerImpl

+ func (m *RBACManagerImpl) AddRoleToUser(ctx context.Context, userID string, role string) error

+ func (m *RBACManagerImpl) Close() error

+ func (m *RBACManagerImpl) GetUserPermissions(ctx context.Context, userID string) ([]string, error)

+ func (m *RBACManagerImpl) GetUserRoles(ctx context.Context, userID string) ([]string, error)

+ func (m *RBACManagerImpl) HasPermission(ctx context.Context, userID string, permission string) (bool, error)

+ func (m *RBACManagerImpl) HasRole(ctx context.Context, userID string, role string) (bool, error)

+ func (m *RBACManagerImpl) Initialize(ctx context.Context) error

+ func (m *RBACManagerImpl) RemoveRoleFromUser(ctx context.Context, userID string, role string) error

+ type RequestContext interface

+ GetIPAddress func() string

+ GetUserAgent func() string

+ GetUserID func() string

+ GetUsername func() string

+ func NewRequestContext(ctx context.Context, userID, username, ipAddress, userAgent string) RequestContext

+ type Role struct

+ CreatedAt time.Time

+ Description string

+ ID string

+ IsBuiltIn bool

+ Name string

+ ParentRoles []string

+ Permissions []string

+ UpdatedAt time.Time

+ type RoleName = string

+ type RoleStore interface

+ AddPermissionToRole func(ctx context.Context, role, permission string) error

+ AddRoleToUser func(ctx context.Context, userID, role string) error

+ GetAllPermissions func(ctx context.Context) ([]string, error)

+ GetAllRoles func(ctx context.Context) ([]string, error)

+ GetRolePermissions func(ctx context.Context, role string) ([]string, error)

+ GetUserRoles func(ctx context.Context, userID string) ([]string, error)

+ RemovePermissionFromRole func(ctx context.Context, role, permission string) error

+ RemoveRoleFromUser func(ctx context.Context, userID, role string) error

+ type SecurityConfig struct

+ IncidentAutoClose time.Duration

+ IncidentEscalationThreshold common.AuditSeverity

+ IncidentNotificationEmails []string

+ VulnerabilityCheckPeriod time.Duration

+ VulnerabilityNotificationEmails []string

+ type SecurityIncident struct

+ AssignedTo string

+ AuditLogIDs []string

+ CreatedAt time.Time

+ Description string

+ ID string

+ Metadata map[string]interface{}

+ ReportedBy string

+ ResolvedAt time.Time

+ Severity AuditSeverity

+ Status IncidentStatus

+ Title string

+ UpdatedAt time.Time

+ type SecurityIncidentConfig struct

+ AutoCreateIncidents bool

+ EnableIncidentTracking bool

+ EscalationThreshold AuditSeverity

+ NotificationEmails []string

+ ResponseTimeoutMinutes int

+ type SecurityManager interface

+ Close func() error

+ CloseIncident func(incidentID, resolution string) error

+ GetIncident func(incidentID string) (*models.SecurityIncident, error)

+ GetVulnerability func(vulnerabilityID string) (*models.Vulnerability, error)

+ ListIncidents func(filter map[string]interface{}, offset, limit int) ([]*models.SecurityIncident, int, error)

+ ListVulnerabilities func(filter map[string]interface{}, offset, limit int) ([]*models.Vulnerability, int, error)

+ MitigateVulnerability func(vulnerabilityID, mitigation string) error

+ ReportIncident func(title, description string, severity models.SecurityIncidentSeverity) (*models.SecurityIncident, error)

+ ReportVulnerability func(title, description string, severity models.VulnerabilitySeverity) (*models.Vulnerability, error)

+ ResolveVulnerability func(vulnerabilityID string) error

+ UpdateIncident func(incident *models.SecurityIncident) error

+ UpdateVulnerability func(vulnerability *models.Vulnerability) error

+ type SecurityManagerAdapter struct

+ func NewSecurityManagerAdapter(impl *BasicSecurityManager) *SecurityManagerAdapter

+ func (a *SecurityManagerAdapter) Close() error

+ func (a *SecurityManagerAdapter) CloseIncident(incidentID, resolution string) error

+ func (a *SecurityManagerAdapter) GetIncident(incidentID string) (*models.SecurityIncident, error)

+ func (a *SecurityManagerAdapter) GetVulnerability(vulnerabilityID string) (*models.Vulnerability, error)

+ func (a *SecurityManagerAdapter) ListIncidents(filter map[string]interface{}, offset, limit int) ([]*models.SecurityIncident, int, error)

+ func (a *SecurityManagerAdapter) ListVulnerabilities(filter map[string]interface{}, offset, limit int) ([]*models.Vulnerability, int, error)

+ func (a *SecurityManagerAdapter) MitigateVulnerability(vulnerabilityID, mitigation string) error

+ func (a *SecurityManagerAdapter) ReportIncident(title, description string, severity models.SecurityIncidentSeverity) (*models.SecurityIncident, error)

+ func (a *SecurityManagerAdapter) ReportVulnerability(title, description string, severity models.VulnerabilitySeverity) (*models.Vulnerability, error)

+ func (a *SecurityManagerAdapter) ResolveVulnerability(vulnerabilityID string) error

+ func (a *SecurityManagerAdapter) UpdateIncident(incident *models.SecurityIncident) error

+ func (a *SecurityManagerAdapter) UpdateVulnerability(vulnerability *models.Vulnerability) error

+ type Session struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ ID string

+ IPAddress string

+ LastActivity time.Time

+ MFACompleted bool

+ Metadata map[string]interface{}

+ RefreshToken string

+ Token string

+ UserAgent string

+ UserID string

+ func (s *Session) IsExpired() bool

+ type SessionFilter struct

+ Active *bool

+ CreatedAfter string

+ CreatedBefore string

+ IPAddress string

+ Limit int

+ MFACompleted *bool

+ Offset int

+ SortBy string

+ SortOrder string

+ UserAgent string

+ UserID string

+ type SessionManager struct

+ func NewSessionManager(store SessionStore, config *SessionPolicy, auditLogger AuditLogger) *SessionManager

+ func (m *SessionManager) CreateSession(ctx context.Context, userID, ipAddress, userAgent string, mfaCompleted bool) (*Session, error)

+ func (m *SessionManager) GetSessionFromContext(ctx context.Context) (*Session, error)

+ func (m *SessionManager) GetUserSessions(ctx context.Context, userID string) ([]*Session, error)

+ func (m *SessionManager) InvalidateSession(ctx context.Context, sessionID string) error

+ func (m *SessionManager) InvalidateUserSessions(ctx context.Context, userID string) error

+ func (m *SessionManager) RefreshSession(ctx context.Context, sessionID, refreshToken string) (*Session, error)

+ func (m *SessionManager) Stop()

+ func (m *SessionManager) ValidateSession(ctx context.Context, sessionID, token string, ipAddress, userAgent string) (*Session, error)

+ type SessionPolicy struct

+ CleanupInterval int

+ EnforceIPBinding bool

+ EnforceUserAgentBinding bool

+ InactivityTimeout int

+ MaxConcurrentSessions int

+ RefreshTokenExpiration int

+ TokenExpiration int

+ type SessionStore interface

+ CleanExpiredSessions func(ctx context.Context) error

+ Close func() error

+ CreateSession func(ctx context.Context, session *Session) error

+ DeleteSession func(ctx context.Context, id string) error

+ GetSession func(ctx context.Context, id string) (*Session, error)

+ GetUserSessions func(ctx context.Context, userID string) ([]*Session, error)

+ UpdateSession func(ctx context.Context, session *Session) error

+ type SimpleInMemorySessionStore struct

+ func NewSimpleInMemorySessionStore() *SimpleInMemorySessionStore

+ func (s *SimpleInMemorySessionStore) CleanExpiredSessions(ctx context.Context) error

+ func (s *SimpleInMemorySessionStore) CreateSession(ctx context.Context, session *Session) error

+ func (s *SimpleInMemorySessionStore) DeleteSession(ctx context.Context, id string) error

+ func (s *SimpleInMemorySessionStore) GetSession(ctx context.Context, id string) (*Session, error)

+ func (s *SimpleInMemorySessionStore) GetUserSessions(ctx context.Context, userID string) ([]*Session, error)

+ func (s *SimpleInMemorySessionStore) UpdateSession(ctx context.Context, session *Session) error

+ type SimpleRBACManager struct

+ func NewRBACManager(config *AccessControlConfig) *SimpleRBACManager

+ func NewSimpleRBACManager(config *AccessControlConfig) *SimpleRBACManager

+ func (m *SimpleRBACManager) AddPermission(permission Permission, description string) error

+ func (m *SimpleRBACManager) AddPermissionToRole(role string, permission Permission) error

+ func (m *SimpleRBACManager) AddRole(role string, description string) error

+ func (m *SimpleRBACManager) AddRolePermission(ctx context.Context, role string, permission Permission) error

+ func (m *SimpleRBACManager) AssignPermission(ctx context.Context, user *User, permission Permission) error

+ func (m *SimpleRBACManager) AssignRole(ctx context.Context, user *User, role string) error

+ func (m *SimpleRBACManager) Authorize(ctx context.Context, user *User, permission Permission) error

+ func (m *SimpleRBACManager) CreateRole(ctx context.Context, role string, permissions []Permission) error

+ func (m *SimpleRBACManager) DeleteRole(ctx context.Context, role string) error

+ func (m *SimpleRBACManager) GetAllRoles(ctx context.Context) []string

+ func (m *SimpleRBACManager) GetRolePermissions(ctx context.Context, role string) ([]Permission, error)

+ func (m *SimpleRBACManager) GetUserPermissions(ctx context.Context, user *User) []Permission

+ func (m *SimpleRBACManager) HasPermission(user *User, permission string) bool

+ func (m *SimpleRBACManager) HasPermissionWithContext(ctx context.Context, user *User, permission Permission) bool

+ func (m *SimpleRBACManager) HasRole(user *User, role string) bool

+ func (m *SimpleRBACManager) HasRoleWithContext(ctx context.Context, user *User, role string) bool

+ func (m *SimpleRBACManager) RemoveRolePermission(ctx context.Context, role string, permission Permission) error

+ func (m *SimpleRBACManager) RequireAllPermissions(permissions ...Permission) func(ctx context.Context, user *User) error

+ func (m *SimpleRBACManager) RequireAllRoles(roles ...string) func(ctx context.Context, user *User) error

+ func (m *SimpleRBACManager) RequireAnyPermission(permissions ...Permission) func(ctx context.Context, user *User) error

+ func (m *SimpleRBACManager) RequireAnyRole(roles ...string) func(ctx context.Context, user *User) error

+ func (m *SimpleRBACManager) RequirePermission(permission Permission) func(ctx context.Context, user *User) error

+ func (m *SimpleRBACManager) RequireRole(role string) func(ctx context.Context, user *User) error

+ func (m *SimpleRBACManager) RevokePermission(ctx context.Context, user *User, permission Permission) error

+ func (m *SimpleRBACManager) RevokeRole(ctx context.Context, user *User, role string) error

+ type StubUserManager struct

+ func (s *StubUserManager) Close() error

+ func (s *StubUserManager) CreateUser(user *models.User) error

+ func (s *StubUserManager) DeleteUser(userID string) error

+ func (s *StubUserManager) GetUser(userID string) (*models.User, error)

+ func (s *StubUserManager) GetUserByEmail(email string) (*models.User, error)

+ func (s *StubUserManager) GetUserByUsername(username string) (*models.User, error)

+ func (s *StubUserManager) ListUsers(filter map[string]interface{}, offset, limit int) ([]*models.User, int, error)

+ func (s *StubUserManager) UpdateUser(user *models.User) error

+ type TypesIncidentStore interface

+ Close func() error

+ CreateIncident func(ctx context.Context, incident *SecurityIncident) error

+ DeleteIncident func(ctx context.Context, id string) error

+ GetIncidentByID func(ctx context.Context, id string) (*SecurityIncident, error)

+ ListIncidents func(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*SecurityIncident, int, error)

+ UpdateIncident func(ctx context.Context, incident *SecurityIncident) error

+ type TypesRBACManager struct

+ func NewTypesRBACManager(config *AccessControlConfig) *TypesRBACManager

+ func (m *TypesRBACManager) AddPermissionToRole(ctx context.Context, role string, permission string) error

+ func (m *TypesRBACManager) AddPermissionToUser(ctx context.Context, user *User, permission string) error

+ func (m *TypesRBACManager) AddRole(ctx context.Context, role string) error

+ func (m *TypesRBACManager) AddRoleToUser(ctx context.Context, user *User, role string) error

+ func (m *TypesRBACManager) GetRolePermissions(ctx context.Context, role string) ([]string, error)

+ func (m *TypesRBACManager) GetRoles(ctx context.Context) []string

+ func (m *TypesRBACManager) GetUserPermissions(ctx context.Context, user *User) ([]string, error)

+ func (m *TypesRBACManager) Initialize(ctx context.Context) error

+ func (m *TypesRBACManager) RemovePermissionFromRole(ctx context.Context, role string, permission string) error

+ func (m *TypesRBACManager) RemovePermissionFromUser(ctx context.Context, user *User, permission string) error

+ func (m *TypesRBACManager) RemoveRole(ctx context.Context, role string) error

+ func (m *TypesRBACManager) RemoveRoleFromUser(ctx context.Context, user *User, role string) error

+ func (m *TypesRBACManager) RoleHasPermission(ctx context.Context, role string, permission string) (bool, error)

+ func (m *TypesRBACManager) UserHasPermission(ctx context.Context, user *User, permission string) (bool, error)

+ type TypesVulnerabilityStore interface

+ Close func() error

+ CreateVulnerability func(ctx context.Context, vulnerability *Vulnerability) error

+ DeleteVulnerability func(ctx context.Context, id string) error

+ GetVulnerabilityByID func(ctx context.Context, id string) (*Vulnerability, error)

+ ListVulnerabilities func(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*Vulnerability, int, error)

+ UpdateVulnerability func(ctx context.Context, vulnerability *Vulnerability) error

+ type User struct

+ Active bool

+ CreatedAt time.Time

+ Email string

+ Enabled bool

+ FailedLoginAttempts int

+ ID string

+ LastLogin time.Time

+ LastPasswordChange time.Time

+ Locked bool

+ MFAEnabled bool

+ MFAMethod string

+ MFAMethods []string

+ MFASecret string

+ Metadata map[string]interface{}

+ PasswordHash string

+ Permissions []string

+ Roles []string

+ UpdatedAt time.Time

+ Username string

+ type UserFilter struct

+ Active *bool

+ Email string

+ Limit int

+ Locked *bool

+ Offset int

+ Roles []string

+ SortBy string

+ SortOrder string

+ Username string

+ type UserManager interface

+ Close func() error

+ CreateUser func(user *models.User) error

+ DeleteUser func(userID string) error

+ GetUser func(userID string) (*models.User, error)

+ GetUserByEmail func(email string) (*models.User, error)

+ GetUserByUsername func(username string) (*models.User, error)

+ ListUsers func(filter map[string]interface{}, offset, limit int) ([]*models.User, int, error)

+ UpdateUser func(user *models.User) error

+ func NewUserManager() UserManager

+ func NewUserManagerAdapter(manager UserManager) UserManager

+ type UserStore interface

+ Close func() error

+ CreateUser func(ctx context.Context, user *User) error

+ DeleteUser func(ctx context.Context, id string) error

+ GetUserByEmail func(ctx context.Context, email string) (*User, error)

+ GetUserByID func(ctx context.Context, id string) (*User, error)

+ GetUserByUsername func(ctx context.Context, username string) (*User, error)

+ ListUsers func(ctx context.Context) ([]*User, error)

+ UpdateUser func(ctx context.Context, user *User) error

+ type Vulnerability struct

+ AffectedSystem string

+ AssignedTo string

+ CVE string

+ CreatedAt time.Time

+ Description string

+ ID string

+ Metadata map[string]interface{}

+ RemediationPlan string

+ ReportedBy string

+ ResolvedAt time.Time

+ Severity AuditSeverity

+ Status VulnerabilityStatus

+ Title string

+ UpdatedAt time.Time

+ type VulnerabilityConfig struct

+ AutoScanEnabled bool

+ EnableVulnerabilityTracking bool

+ RemediationDeadlineDays map[string]int

+ ReportRecipients []string

+ ScanSchedule string

+ type VulnerabilityFilter struct

+ Component string

+ CveID string

+ Limit int

+ Offset int

+ ReportedAfter string

+ Severity string

+ SortBy string

+ SortOrder string

+ Status string

+ type VulnerabilityStatus string

+ const VulnerabilityStatusDeferred

+ const VulnerabilityStatusInProgress

+ const VulnerabilityStatusNew

+ const VulnerabilityStatusRejected

+ const VulnerabilityStatusRemediated

+ const VulnerabilityStatusValidated

+ const VulnerabilityStatusVerified

+ type VulnerabilityStore interface

+ CreateVulnerability func(ctx context.Context, vulnerability *Vulnerability) error

+ DeleteVulnerability func(ctx context.Context, id string) error

+ GetVulnerability func(ctx context.Context, id string) (*Vulnerability, error)

+ ListVulnerabilities func(ctx context.Context, filter *LocalVulnerabilityFilter) ([]*Vulnerability, error)

+ UpdateVulnerability func(ctx context.Context, vulnerability *Vulnerability) error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL