Documentation
¶
Index ¶
- Constants
- Variables
- func BuildLabelSelectorFromMap(labels map[string]string) string
- func IsValidActorOrderByField[T string | ActorOrderByField](field T) bool
- func IsValidConnectionOrderByField[T string | ConnectionOrderByField](field T) bool
- func IsValidConnectionState[T string | ConnectionState](state T) bool
- func IsValidConnectorOrderByField[T string | ConnectorOrderByField](field T) bool
- func IsValidConnectorVersionOrderByField[T string | ConnectorVersionOrderByField](field T) bool
- func IsValidConnectorVersionState[T string | ConnectorVersionState](state T) bool
- func IsValidNamespaceOrderByField[T string | NamespaceOrderByField](field T) bool
- func IsValidNamespaceState[T string | NamespaceState](state T) bool
- func ValidateLabelKey(key string) error
- func ValidateLabelValue(value string) error
- func ValidateLabels(labels map[string]string) error
- type Actor
- type ActorOrderByField
- type Connection
- type ConnectionOrderByField
- type ConnectionState
- type Connector
- type ConnectorOrderByField
- type ConnectorVersion
- type ConnectorVersionId
- type ConnectorVersionOrderByField
- type ConnectorVersionState
- type ConnectorVersionStates
- type DB
- func MustApplyBlankTestDbConfig(t testing.TB, cfg config.C) (config.C, DB)
- func MustApplyBlankTestDbConfigRaw(t testing.TB, cfg config.C) (config.C, DB, *sql.DB)
- func NewConnectionForRoot(root *config.Root, logger *slog.Logger) (DB, error)
- func NewPostgresConnection(dbConfig *config.DatabasePostgres, secretKey config.KeyDataType, ...) (DB, error)
- func NewSqliteConnection(dbConfig *config.DatabaseSqlite, secretKey config.KeyDataType, l *slog.Logger) (DB, error)
- type DeletedHandling
- type IActorData
- type IActorDataExtended
- type LabelOperator
- type LabelRequirement
- type LabelSelector
- type Labels
- type ListActorsBuilder
- type ListActorsExecutor
- type ListConnectionsBuilder
- type ListConnectionsExecutor
- type ListConnectorVersionsBuilder
- type ListConnectorVersionsExecutor
- type ListConnectorsBuilder
- type ListConnectorsExecutor
- type ListNamespacesBuilder
- type ListNamespacesExecutor
- type Namespace
- type NamespaceOrderByField
- type NamespaceState
- type OAuth2Token
- type OAuth2TokenWithConnection
- type Permissions
- type UpsertConnectorVersionResult
- type UsedNonce
Constants ¶
const ( // LabelKeyNameMaxLength is the maximum length for the name portion of a label key LabelKeyNameMaxLength = 63 // LabelKeyPrefixMaxLength is the maximum length for the optional prefix portion of a label key LabelKeyPrefixMaxLength = 253 // LabelValueMaxLength is the maximum length for a label value LabelValueMaxLength = 63 )
Kubernetes-style label restrictions
const ActorTable = "actors"
const ConnectionsTable = "connections"
const ConnectorVersionsTable = "connector_versions"
const MigrateMutexKeyName = "db-migrate-lock"
MigrateMutexKeyName is the key that can be used when locking to perform a migration in redis.
const NamespacesTable = "namespaces"
const OAuth2TokensTable = "oauth2_tokens"
const UsedNoncesTable = "used_nonces"
Variables ¶
var ( ValidateNamespacePath = aschema.ValidateNamespacePath ValidateNamespaceMatcher = aschema.ValidateNamespaceMatcher SplitNamespacePathToPrefixes = aschema.SplitNamespacePathToPrefixes DepthOfNamespacePath = aschema.DepthOfNamespacePath )
var ErrDuplicate = errors.New("duplicate record")
ErrDuplicate is returned when a database operation that is expected to be unique fails because a duplicate record already exists.
var ErrNamespaceDoesNotExist = errors.New("namespace does not exist")
ErrNamespaceDoesNotExist is returned when a namespace does not exist for a resource that is attempting to be created in the specified namespace.
var ErrNotFound = errors.New("record not found")
ErrNotFound is returned when a database operation that is expected to find a record does not find the record.
var ErrViolation = errors.New("database constraint violation")
ErrViolation is returned when a constraint in the database is violated (e.g. multiple rows with the same ID) after an operation that should have been unique.
Functions ¶
func BuildLabelSelectorFromMap ¶
BuildLabelSelectorFromMap creates a label selector string from key-value pairs. Keys are sorted for deterministic output. Example: {"type": "salesforce", "env": "prod"} -> "env=prod,type=salesforce"
func IsValidActorOrderByField ¶
func IsValidActorOrderByField[T string | ActorOrderByField](field T) bool
IsValidActorOrderByField checks if the given value is a valid ActorOrderByField.
func IsValidConnectionOrderByField ¶
func IsValidConnectionOrderByField[T string | ConnectionOrderByField](field T) bool
func IsValidConnectionState ¶
func IsValidConnectionState[T string | ConnectionState](state T) bool
func IsValidConnectorOrderByField ¶
func IsValidConnectorOrderByField[T string | ConnectorOrderByField](field T) bool
func IsValidConnectorVersionOrderByField ¶
func IsValidConnectorVersionOrderByField[T string | ConnectorVersionOrderByField](field T) bool
func IsValidConnectorVersionState ¶
func IsValidConnectorVersionState[T string | ConnectorVersionState](state T) bool
func IsValidNamespaceOrderByField ¶
func IsValidNamespaceOrderByField[T string | NamespaceOrderByField](field T) bool
func IsValidNamespaceState ¶
func IsValidNamespaceState[T string | NamespaceState](state T) bool
func ValidateLabelKey ¶
ValidateLabelKey validates a single label key according to Kubernetes restrictions. Format: [prefix/]name - prefix (optional): valid DNS subdomain, max 253 characters - name (required): 1-63 characters, must start/end with alphanumeric, may contain '-', '_', '.'
func ValidateLabelValue ¶
ValidateLabelValue validates a single label value according to Kubernetes restrictions. - 0-63 characters (can be empty) - if non-empty: must start and end with alphanumeric, may contain alphanumeric, '-', '_', '.'
func ValidateLabels ¶
ValidateLabels validates all labels in a map according to Kubernetes restrictions.
Types ¶
type Actor ¶
type Actor struct {
Id uuid.UUID
Namespace string
ExternalId string
Permissions Permissions
Labels Labels
EncryptedKey *string
CreatedAt time.Time
UpdatedAt time.Time
DeletedAt *time.Time
}
Actor is some entity taking action within the system.
func (*Actor) CanSelfSign ¶
CanSelfSign returns true if this actor has an encrypted key and can self-sign requests
func (*Actor) GetEncryptedKey ¶
func (*Actor) GetExternalId ¶
func (*Actor) GetNamespace ¶
func (*Actor) GetPermissions ¶
func (a *Actor) GetPermissions() []aschema.Permission
type ActorOrderByField ¶
type ActorOrderByField string
const ( ActorOrderByCreatedAt ActorOrderByField = "created_at" ActorOrderByUpdatedAt ActorOrderByField = "updated_at" ActorOrderByNamespace ActorOrderByField = "namespace" ActorOrderByExternalId ActorOrderByField = "external_id" ActorOrderByDeletedAt ActorOrderByField = "deleted_at" )
type Connection ¶
type Connection struct {
Id uuid.UUID
Namespace string
State ConnectionState
ConnectorId uuid.UUID
ConnectorVersion uint64
Labels Labels
CreatedAt time.Time
UpdatedAt time.Time
DeletedAt *time.Time
}
func (*Connection) GetConnectorId ¶
func (c *Connection) GetConnectorId() uuid.UUID
func (*Connection) GetConnectorVersion ¶
func (c *Connection) GetConnectorVersion() uint64
func (*Connection) GetId ¶
func (c *Connection) GetId() uuid.UUID
func (*Connection) GetNamespace ¶
func (c *Connection) GetNamespace() string
func (*Connection) Validate ¶
func (c *Connection) Validate() error
type ConnectionOrderByField ¶
type ConnectionOrderByField string
const ( ConnectionOrderById ConnectionOrderByField = "id" ConnectionOrderByNamespace ConnectionOrderByField = "namespace" ConnectionOrderByState ConnectionOrderByField = "state" ConnectionOrderByCreatedAt ConnectionOrderByField = "created_at" ConnectionOrderByUpdatedAt ConnectionOrderByField = "updated_at" )
type ConnectionState ¶
type ConnectionState string
const ( ConnectionStateCreated ConnectionState = "created" ConnectionStateReady ConnectionState = "ready" ConnectionStateDisabled ConnectionState = "disabled" ConnectionStateDisconnecting ConnectionState = "disconnecting" ConnectionStateDisconnected ConnectionState = "disconnected" )
type Connector ¶
type Connector struct {
ConnectorVersion
TotalVersions int64
States ConnectorVersionStates
}
Connector object is returned from queries for connectors, with one record per id. It aggregates some information across all versions for a connector.
type ConnectorOrderByField ¶
type ConnectorOrderByField string
const ( ConnectorOrderById ConnectorOrderByField = "id" ConnectorOrderByVersion ConnectorOrderByField = "version" ConnectorOrderByNamespace ConnectorOrderByField = "namespace" ConnectorOrderByState ConnectorOrderByField = "state" ConnectorOrderByCreatedAt ConnectorOrderByField = "created_at" ConnectorOrderByUpdatedAt ConnectorOrderByField = "updated_at" ConnectorOrderByType ConnectorOrderByField = "type" )
type ConnectorVersion ¶
type ConnectorVersion struct {
Id uuid.UUID
Version uint64
Namespace string
State ConnectorVersionState
Hash string
EncryptedDefinition string
Labels Labels
CreatedAt time.Time
UpdatedAt time.Time
DeletedAt *time.Time
}
func (*ConnectorVersion) GetId ¶
func (cv *ConnectorVersion) GetId() uuid.UUID
func (*ConnectorVersion) GetNamespace ¶
func (cv *ConnectorVersion) GetNamespace() string
func (*ConnectorVersion) GetVersion ¶
func (cv *ConnectorVersion) GetVersion() uint64
func (*ConnectorVersion) Validate ¶
func (cv *ConnectorVersion) Validate() error
type ConnectorVersionId ¶
type ConnectorVersionOrderByField ¶
type ConnectorVersionOrderByField string
const ( ConnectorVersionOrderById ConnectorVersionOrderByField = "id" ConnectorVersionOrderByVersion ConnectorVersionOrderByField = "version" ConnectorVersionOrderByState ConnectorVersionOrderByField = "state" ConnectorVersionOrderByCreatedAt ConnectorVersionOrderByField = "created_at" ConnectorVersionOrderByUpdatedAt ConnectorVersionOrderByField = "updated_at" )
type ConnectorVersionState ¶
type ConnectorVersionState string
const ( // ConnectorVersionStateDraft means the connector definition is being worked on and new users should not connect to // this version and existing users should not be upgraded to this version ConnectorVersionStateDraft ConnectorVersionState = "draft" // ConnectorVersionStatePrimary means that the version has been published and this should be the version used for // new connections. Existing connections of this connector will be upgraded to this version if possible, or // transitioned to a state where action is required to complete the upgrade. ConnectorVersionStatePrimary ConnectorVersionState = "primary" // ConnectorVersionStateActive means that a newer version of the connector has been published, but connections // still exist on this version that have not been upgraded. ConnectorVersionStateActive ConnectorVersionState = "active" // ConnectorVersionStateArchived means that this is an old version of the connect that does not have any active // connections running on the version. ConnectorVersionStateArchived ConnectorVersionState = "archived" )
func (*ConnectorVersionState) Scan ¶
func (s *ConnectorVersionState) Scan(value interface{}) error
Scan implements the sql.Scanner interface for ConnectorVersionState
type ConnectorVersionStates ¶
type ConnectorVersionStates []ConnectorVersionState
ConnectorVersionStates is a custom type for a slice of ConnectorVersionState
func (*ConnectorVersionStates) Scan ¶
func (s *ConnectorVersionStates) Scan(value interface{}) error
Scan implements the sql.Scanner interface for ConnectorVersionStates
type DB ¶
type DB interface {
Migrate(ctx context.Context) error
Ping(ctx context.Context) bool
GetNamespace(ctx context.Context, path string) (*Namespace, error)
CreateNamespace(ctx context.Context, ns *Namespace) error
EnsureNamespaceByPath(ctx context.Context, path string) error
DeleteNamespace(ctx context.Context, path string) error
SetNamespaceState(ctx context.Context, path string, state NamespaceState) error
UpdateNamespaceLabels(ctx context.Context, path string, labels map[string]string) (*Namespace, error)
PutNamespaceLabels(ctx context.Context, path string, labels map[string]string) (*Namespace, error)
DeleteNamespaceLabels(ctx context.Context, path string, keys []string) (*Namespace, error)
ListNamespacesBuilder() ListNamespacesBuilder
ListNamespacesFromCursor(ctx context.Context, cursor string) (ListNamespacesExecutor, error)
GetActor(ctx context.Context, id uuid.UUID) (*Actor, error)
GetActorByExternalId(ctx context.Context, namespace, externalId string) (*Actor, error)
CreateActor(ctx context.Context, actor *Actor) error
UpsertActor(ctx context.Context, actor IActorData) (*Actor, error)
DeleteActor(ctx context.Context, id uuid.UUID) error
PutActorLabels(ctx context.Context, id uuid.UUID, labels map[string]string) (*Actor, error)
DeleteActorLabels(ctx context.Context, id uuid.UUID, keys []string) (*Actor, error)
ListActorsBuilder() ListActorsBuilder
ListActorsFromCursor(ctx context.Context, cursor string) (ListActorsExecutor, error)
GetConnectorVersion(ctx context.Context, id uuid.UUID, version uint64) (*ConnectorVersion, error)
GetConnectorVersions(ctx context.Context, requested []ConnectorVersionId) (map[ConnectorVersionId]*ConnectorVersion, error)
GetConnectorVersionForLabels(ctx context.Context, labelSelector string) (*ConnectorVersion, error)
GetConnectorVersionForLabelsAndVersion(ctx context.Context, labelSelector string, version uint64) (*ConnectorVersion, error)
GetConnectorVersionForState(ctx context.Context, id uuid.UUID, state ConnectorVersionState) (*ConnectorVersion, error)
NewestConnectorVersionForId(ctx context.Context, id uuid.UUID) (*ConnectorVersion, error)
NewestPublishedConnectorVersionForId(ctx context.Context, id uuid.UUID) (*ConnectorVersion, error)
UpsertConnectorVersion(ctx context.Context, cv *ConnectorVersion) error
SetConnectorVersionState(ctx context.Context, id uuid.UUID, version uint64, state ConnectorVersionState) error
ListConnectorVersionsBuilder() ListConnectorVersionsBuilder
ListConnectorVersionsFromCursor(ctx context.Context, cursor string) (ListConnectorVersionsExecutor, error)
ListConnectorsBuilder() ListConnectorsBuilder
ListConnectorsFromCursor(ctx context.Context, cursor string) (ListConnectorsExecutor, error)
GetConnection(ctx context.Context, id uuid.UUID) (*Connection, error)
CreateConnection(ctx context.Context, c *Connection) error
DeleteConnection(ctx context.Context, id uuid.UUID) error
SetConnectionState(ctx context.Context, id uuid.UUID, state ConnectionState) error
UpdateConnectionLabels(ctx context.Context, id uuid.UUID, labels map[string]string) (*Connection, error)
PutConnectionLabels(ctx context.Context, id uuid.UUID, labels map[string]string) (*Connection, error)
DeleteConnectionLabels(ctx context.Context, id uuid.UUID, keys []string) (*Connection, error)
ListConnectionsBuilder() ListConnectionsBuilder
ListConnectionsFromCursor(ctx context.Context, cursor string) (ListConnectionsExecutor, error)
/*
* OAuth2 tokens
*/
GetOAuth2Token(ctx context.Context, connectionId uuid.UUID) (*OAuth2Token, error)
InsertOAuth2Token(
ctx context.Context,
connectionId uuid.UUID,
refreshedFrom *uuid.UUID,
encryptedRefreshToken string,
encryptedAccessToken string,
accessTokenExpiresAt *time.Time,
scopes string,
) (*OAuth2Token, error)
DeleteOAuth2Token(ctx context.Context, tokenId uuid.UUID) error
DeleteAllOAuth2TokensForConnection(ctx context.Context, connectionId uuid.UUID) error
// EnumerateOAuth2TokensExpiringWithin enumerates OAuth2 tokens that are expiring within a specified time interval
// of now. This includes tokens that are already expired. Deleted tokens are not considered, nor are tokens tied
// to a deleted connection.
EnumerateOAuth2TokensExpiringWithin(
ctx context.Context,
duration time.Duration,
callback func(tokens []*OAuth2TokenWithConnection, lastPage bool) (stop bool, err error),
) error
HasNonceBeenUsed(ctx context.Context, nonce uuid.UUID) (hasBeenUsed bool, err error)
CheckNonceValidAndMarkUsed(ctx context.Context, nonce uuid.UUID, retainRecordUntil time.Time) (wasValid bool, err error)
DeleteExpiredNonces(ctx context.Context) (err error)
}
func MustApplyBlankTestDbConfig ¶
MustApplyBlankTestDbConfig applies a test database configuration to the specified config root. The database is guaranteed to be blank and migrated. This method uses a temp file so that the database will be eventually cleaned up after the process exits. Note that the configuration in the root will be modified for the database and populated for the GlobalAESKey if it is not already populated.
To support debugging tests by inspecting the SQLite database, if the SQLITE_TEST_DATABASE_PATH env var is set this method will use the database at that path. It will delete the existing file at that path to recreate unless the SQLITE_TEST_DATABASE_PATH_CLEAR env var is set to false.
To run tests against Postgres, set AUTH_PROXY_TEST_DATABASE_PROVIDER=postgres and configure the connection with POSTGRES_TEST_HOST, POSTGRES_TEST_PORT, POSTGRES_TEST_USER, POSTGRES_TEST_PASSWORD, POSTGRES_TEST_DATABASE, and POSTGRES_TEST_OPTIONS. You can also tune POSTGRES_TEST_MAX_PARALLEL and POSTGRES_TEST_MAX_CONNS to reduce connection pressure.
Parameters: - t: the test instance used for naming and cleanup - cfg: the config to apply the database config to. This may be nil, in which case a new config is created. This method will overwrite the existing config.
Returns: - the config with information populated for the database. If a config was passed in, the same value is returned with data populated. - a database instance configured with the specified root. This database can be used directly, or if the root used again, it will connect to the same database instance.
func NewConnectionForRoot ¶
NewConnectionForRoot creates a new database connection from the specified configuration. The type of the database returned will be determined by the configuration. Same as NewConnection.
func NewPostgresConnection ¶
func NewPostgresConnection(dbConfig *config.DatabasePostgres, secretKey config.KeyDataType, l *slog.Logger) (DB, error)
NewPostgresConnection creates a new database connection to a Postgres database.
Parameters: - dbConfig: the configuration for the Postgres database - secretKey: the AES key used to secure cursors
func NewSqliteConnection ¶
func NewSqliteConnection(dbConfig *config.DatabaseSqlite, secretKey config.KeyDataType, l *slog.Logger) (DB, error)
NewSqliteConnection creates a new database connection to a SQLite database.
Parameters: - dbConfig: the configuration for the SQLite database - secretKey: the AES key used to secure cursors
type DeletedHandling ¶
type DeletedHandling bool
const ( // DeletedHandlingExclude will exclude deleted records from the result set DeletedHandlingExclude DeletedHandling = false // DeletedHandlingInclude will include deleted records in the result set DeletedHandlingInclude DeletedHandling = true )
type IActorData ¶
type IActorDataExtended ¶
type IActorDataExtended interface {
IActorData
GetEncryptedKey() *string
}
IActorDataExtended extends IActorData with additional fields for labels and encrypted key. This interface is used when creating or updating actors with extended data such as labels for tracking the source of admin syncs, or encrypted keys for admin authentication.
type LabelOperator ¶
type LabelOperator string
const ( LabelOperatorEqual LabelOperator = "=" LabelOperatorNotEqual LabelOperator = "!=" LabelOperatorExists LabelOperator = "exists" LabelOperatorNotExists LabelOperator = "!exists" )
type LabelRequirement ¶
type LabelRequirement struct {
Key string
Operator LabelOperator
Value string
}
type LabelSelector ¶
type LabelSelector []LabelRequirement
func ParseLabelSelector ¶
func ParseLabelSelector(selector string) (LabelSelector, error)
ParseLabelSelector parses a Kubernetes-style label selector string. Supported syntax: - key=value, key==value - key!=value - key (exists) - !key (does not exist)
func (LabelSelector) ApplyToSqlBuilderWithProvider ¶
func (s LabelSelector) ApplyToSqlBuilderWithProvider(q sq.SelectBuilder, labelsColumn string, provider config.DatabaseProvider) sq.SelectBuilder
func (LabelSelector) String ¶
func (s LabelSelector) String() string
type Labels ¶
Labels is a map of key-value pairs following Kubernetes label restrictions. Keys follow the format [prefix/]name where: - prefix (optional): valid DNS subdomain, max 253 characters - name (required): 1-63 characters, alphanumeric start/end, may contain '-', '_', '.' Values: 0-63 characters, if non-empty must start/end with alphanumeric
type ListActorsBuilder ¶
type ListActorsBuilder interface {
ListActorsExecutor
ForExternalId(externalId string) ListActorsBuilder
ForNamespaceMatcher(matcher string) ListActorsBuilder
ForNamespaceMatchers(matchers []string) ListActorsBuilder
Limit(int32) ListActorsBuilder
OrderBy(ActorOrderByField, pagination.OrderBy) ListActorsBuilder
IncludeDeleted() ListActorsBuilder
ForLabelSelector(selector string) ListActorsBuilder
}
type ListActorsExecutor ¶
type ListActorsExecutor interface {
FetchPage(context.Context) pagination.PageResult[*Actor]
Enumerate(context.Context, func(pagination.PageResult[*Actor]) (keepGoing bool, err error)) error
}
type ListConnectionsBuilder ¶
type ListConnectionsBuilder interface {
ListConnectionsExecutor
Limit(int32) ListConnectionsBuilder
ForState(ConnectionState) ListConnectionsBuilder
ForStates([]ConnectionState) ListConnectionsBuilder
ForNamespaceMatcher(matcher string) ListConnectionsBuilder
ForNamespaceMatchers(matchers []string) ListConnectionsBuilder
OrderBy(ConnectionOrderByField, pagination.OrderBy) ListConnectionsBuilder
IncludeDeleted() ListConnectionsBuilder
WithDeletedHandling(DeletedHandling) ListConnectionsBuilder
ForLabelSelector(selector string) ListConnectionsBuilder
}
type ListConnectionsExecutor ¶
type ListConnectionsExecutor interface {
FetchPage(context.Context) pagination.PageResult[Connection]
Enumerate(context.Context, func(pagination.PageResult[Connection]) (keepGoing bool, err error)) error
}
type ListConnectorVersionsBuilder ¶
type ListConnectorVersionsBuilder interface {
ListConnectorVersionsExecutor
Limit(int32) ListConnectorVersionsBuilder
ForId(uuid.UUID) ListConnectorVersionsBuilder
ForVersion(uint64) ListConnectorVersionsBuilder
ForState(ConnectorVersionState) ListConnectorVersionsBuilder
ForStates([]ConnectorVersionState) ListConnectorVersionsBuilder
ForNamespaceMatcher(string) ListConnectorVersionsBuilder
ForNamespaceMatchers([]string) ListConnectorVersionsBuilder
OrderBy(ConnectorVersionOrderByField, pagination.OrderBy) ListConnectorVersionsBuilder
IncludeDeleted() ListConnectorVersionsBuilder
ForLabelSelector(selector string) ListConnectorVersionsBuilder
}
type ListConnectorVersionsExecutor ¶
type ListConnectorVersionsExecutor interface {
FetchPage(context.Context) pagination.PageResult[ConnectorVersion]
Enumerate(context.Context, func(pagination.PageResult[ConnectorVersion]) (keepGoing bool, err error)) error
}
type ListConnectorsBuilder ¶
type ListConnectorsBuilder interface {
ListConnectorsExecutor
Limit(int32) ListConnectorsBuilder
ForType(string) ListConnectorsBuilder
ForId(uuid.UUID) ListConnectorsBuilder
ForNamespaceMatcher(string) ListConnectorsBuilder
ForNamespaceMatchers([]string) ListConnectorsBuilder
ForState(ConnectorVersionState) ListConnectorsBuilder
ForStates([]ConnectorVersionState) ListConnectorsBuilder
OrderBy(ConnectorOrderByField, pagination.OrderBy) ListConnectorsBuilder
IncludeDeleted() ListConnectorsBuilder
ForLabelSelector(selector string) ListConnectorsBuilder
}
type ListConnectorsExecutor ¶
type ListConnectorsExecutor interface {
FetchPage(context.Context) pagination.PageResult[Connector]
Enumerate(context.Context, func(pagination.PageResult[Connector]) (keepGoing bool, err error)) error
}
type ListNamespacesBuilder ¶
type ListNamespacesBuilder interface {
ListNamespacesExecutor
Limit(int32) ListNamespacesBuilder
ForPathPrefix(path string) ListNamespacesBuilder
ForDepth(depth uint64) ListNamespacesBuilder
ForChildrenOf(path string) ListNamespacesBuilder
ForNamespaceMatcher(matcher string) ListNamespacesBuilder
ForNamespaceMatchers(matchers []string) ListNamespacesBuilder
ForState(NamespaceState) ListNamespacesBuilder
OrderBy(NamespaceOrderByField, pagination.OrderBy) ListNamespacesBuilder
IncludeDeleted() ListNamespacesBuilder
ForLabelSelector(selector string) ListNamespacesBuilder
}
type ListNamespacesExecutor ¶
type ListNamespacesExecutor interface {
FetchPage(context.Context) pagination.PageResult[Namespace]
Enumerate(context.Context, func(pagination.PageResult[Namespace]) (keepGoing bool, err error)) error
}
type Namespace ¶
type Namespace struct {
Path string
State NamespaceState
Labels Labels
CreatedAt time.Time
UpdatedAt time.Time
DeletedAt *time.Time
// contains filtered or unexported fields
}
Namespace is the grouping of resources within AuthProxy.
func (*Namespace) GetNamespace ¶
type NamespaceOrderByField ¶
type NamespaceOrderByField string
const ( NamespaceOrderByPath NamespaceOrderByField = "path" NamespaceOrderByState NamespaceOrderByField = "state" NamespaceOrderByCreatedAt NamespaceOrderByField = "created_at" NamespaceOrderByUpdatedAt NamespaceOrderByField = "updated_at" )
type NamespaceState ¶
type NamespaceState string
const ( NamespaceStateActive NamespaceState = "active" NamespaceStateDestroying NamespaceState = "destroying" NamespaceStateDestroyed NamespaceState = "destroyed" )
type OAuth2Token ¶
type OAuth2Token struct {
Id uuid.UUID
ConnectionId uuid.UUID // Foreign key to Connection; not enforced by database
RefreshedFromId *uuid.UUID
EncryptedRefreshToken string
EncryptedAccessToken string
AccessTokenExpiresAt *time.Time
Scopes string
CreatedAt time.Time
DeletedAt *time.Time
}
func (*OAuth2Token) IsAccessTokenExpired ¶
func (t *OAuth2Token) IsAccessTokenExpired(ctx context.Context) bool
type OAuth2TokenWithConnection ¶
type OAuth2TokenWithConnection struct {
Token OAuth2Token
Connection Connection
}
type Permissions ¶
type Permissions []aschema.Permission
Permissions is a custom type for a slice of permissions. The values are serlized to json.
func (*Permissions) Scan ¶
func (p *Permissions) Scan(value interface{}) error
Scan implements the sql.Scanner interface for Permissions
type UpsertConnectorVersionResult ¶
type UpsertConnectorVersionResult struct {
ConnectorVersion *ConnectorVersion
State ConnectorVersionState
Version uint64
}
type UsedNonce ¶
UsedNonce represents a onetime use value (UUID) that has already been used in the system and cannot be used again. When used outside the system, nonces should also use some sort of expiry mechanism such that when they are used there is a known time that they must be retained until so that the list of used nonces doesn't grow infinitely.