admin0

type DeleteAllPermissionsHandler ¶

type DeleteAllPermissionsHandler struct {
	Store *permissions.Store
}

DeleteAllPermissionsHandler removes every audience's permissions.

func (h *DeleteAllPermissionsHandler) ServeHTTP(w http.ResponseWriter, _ *http.Request)

type DeleteClaimsHandler ¶

type DeleteClaimsHandler struct {
	Store *claims.Store
}

DeleteClaimsHandler clears every custom claim.

func (h *DeleteClaimsHandler) ServeHTTP(w http.ResponseWriter, _ *http.Request)

type DeleteExpectationsHandler ¶

type DeleteExpectationsHandler struct {
	Store *matches.Store
}

DeleteExpectationsHandler clears expectations. An empty body clears all; a {method, path} body clears every expectation registered for that operation (the catch-all and every request-matched one).

Two intentional behaviours worth noting:

• An empty/whitespace-only body means "clear all". The read error from io.ReadAll is deliberately ignored: a failed or empty read falls through to ResetAll, which is a benign outcome for a teardown DELETE.
• Clearing an operation that was never registered is an idempotent no-op (returns 204). ResetEndpoint is documented as a no-op for unregistered keys, and DELETE intentionally does NOT validate {method, path} against the spec (unlike POST) because teardown should be forgiving.

func (h *DeleteExpectationsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type DeletePermissionsHandler ¶

type DeletePermissionsHandler struct {
	Store *permissions.Store
}

DeletePermissionsHandler clears the permissions for one audience.

func (h *DeletePermissionsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type Deps ¶

type Deps struct {
	Matches     *matches.Store
	Claims      *claims.Store
	Permissions *permissions.Store
	MFA         *mfa.Store
	Validator   *spec.Validator
}

Deps groups the in-memory stores admin0 controls.

type GetAllPermissionsHandler ¶

type GetAllPermissionsHandler struct {
	Store *permissions.Store
}

GetAllPermissionsHandler returns the full per-audience permission map.

func (h *GetAllPermissionsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type GetClaimsHandler ¶

type GetClaimsHandler struct {
	Store *claims.Store
}

GetClaimsHandler returns the per-process custom-claim map.

func (h *GetClaimsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type GetMFARequiredHandler ¶

type GetMFARequiredHandler struct {
	Store *mfa.Store
}

GetMFARequiredHandler reports whether the password and password-realm grants currently demand MFA step-up.

func (h *GetMFARequiredHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type GetPermissionsHandler ¶

type GetPermissionsHandler struct {
	Store *permissions.Store
}

GetPermissionsHandler returns the permissions registered for one audience.

func (h *GetPermissionsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type ListExpectationsHandler ¶

type ListExpectationsHandler struct {
	Store *matches.Store
}

ListExpectationsHandler returns every registered expectation.

func (h *ListExpectationsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type PostExpectationHandler ¶

type PostExpectationHandler struct {
	Store     *matches.Store
	Validator *spec.Validator
}

PostExpectationHandler registers (upserts) an expectation for the Management API operation identified by {method, path}.

func (h *PostExpectationHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type PutClaimsHandler ¶

type PutClaimsHandler struct {
	Store *claims.Store
}

PutClaimsHandler replaces the per-process custom-claim map with the JSON object in the request body.

func (h *PutClaimsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type PutMFARequiredHandler ¶

type PutMFARequiredHandler struct {
	Store *mfa.Store
}

PutMFARequiredHandler toggles MFA enforcement at runtime. Body: {"required":true|false}.

func (h *PutMFARequiredHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type PutPermissionsHandler ¶

type PutPermissionsHandler struct {
	Store *permissions.Store
}

PutPermissionsHandler sets the permissions for one audience to the JSON array in the request body.

func (h *PutPermissionsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type ResetHandler ¶

type ResetHandler struct {
	Deps Deps
}

ResetHandler wipes every store admin0 governs: registered matches, custom claims, and per-audience permissions.

func (h *ResetHandler) ServeHTTP(w http.ResponseWriter, _ *http.Request)