mwauth

func AuthInterceptorLocal ¶

func AuthInterceptorLocal(ctx context.Context, req connect.AnyRequest, next connect.UnaryFunc) (connect.AnyResponse, error)

func AuthInterceptorLocalStreamHandlerLocal ¶

func AuthInterceptorLocalStreamHandlerLocal(next connect.StreamingHandlerFunc) connect.StreamingHandlerFunc

func CheckOwnerWorkspace ¶

func CheckOwnerWorkspace(ctx context.Context, su suser.UserService, workspaceID idwrap.IDWrap) (bool, error)

CheckOwnerWorkspace checks if the user in context belongs to the workspace

func CheckOwnerWorkspaceWithReader ¶

func CheckOwnerWorkspaceWithReader(ctx context.Context, userReader *sworkspace.UserReader, workspaceID idwrap.IDWrap) error

CheckOwnerWorkspaceWithReader checks if the user in context belongs to the workspace using a reader Returns nil if allowed, error if denied or not found

func CrashInterceptor ¶

func CrashInterceptor(ctx context.Context, req connect.AnyRequest, next connect.UnaryFunc) (resp connect.AnyResponse, err error)

func CreateAuthedContext ¶

func CreateAuthedContext(ctx context.Context, userID idwrap.IDWrap) context.Context

func GetContextUserID ¶

func GetContextUserID(ctx context.Context) (idwrap.IDWrap, error)

func NewAuthInterceptor ¶

func NewAuthInterceptor() *authInterceptor

func NewAuthInterceptorLocal ¶

func NewAuthInterceptorLocal() connect.UnaryInterceptorFunc

func NewAuthInterceptorOne ¶

func NewAuthInterceptorOne(secret []byte) connect.UnaryInterceptorFunc

func NewBetterAuthInterceptor ¶

func NewBetterAuthInterceptor(kf jwt.Keyfunc, us suser.UserService) *betterAuthInterceptor

NewBetterAuthInterceptor creates a new interceptor that validates BetterAuth JWT tokens using the given keyfunc and auto-provisions users in the main database.