Documentation
¶
Overview ¶
handlers/lineage.go
Index ¶
- Constants
- Variables
- func CombineShares(shares [][]byte) ([]byte, error)
- func TLSAuthMiddleware(next http.Handler) http.Handler
- type CertificateAuthorityInput
- type CreateKeyRequest
- type CreateKeyResponse
- type CreateSecretRequest
- type DecryptRequest
- type DecryptResponse
- type EncryptRequest
- type EncryptResponse
- type GeneratedCertificate
- type Handler
- func (h *Handler) AccessSecret(w http.ResponseWriter, r *http.Request)
- func (h *Handler) AccessSharedLink(w http.ResponseWriter, r *http.Request)
- func (h *Handler) AddUserToGroup(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ApproveRequest(w http.ResponseWriter, r *http.Request)
- func (h *Handler) AuthKeycloak(w http.ResponseWriter, r *http.Request)
- func (h *Handler) Authenticate(next http.Handler) http.Handler
- func (h *Handler) AuthenticateAppRole(w http.ResponseWriter, r *http.Request)
- func (h *Handler) AuthenticateUser(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CheckPermission(permission string, next http.Handler) http.Handler
- func (h *Handler) CreateAppRole(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreateApprovalRequest(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreateClientCert(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreateGroup(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreatePath(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreateSecret(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreateSharedLink(w http.ResponseWriter, r *http.Request)
- func (h *Handler) CreateUser(w http.ResponseWriter, r *http.Request)
- func (h *Handler) Decrypt(w http.ResponseWriter, r *http.Request)
- func (h *Handler) DeletePolicy(w http.ResponseWriter, r *http.Request)
- func (h *Handler) DeleteSecret(w http.ResponseWriter, r *http.Request)
- func (h *Handler) DownloadCA(w http.ResponseWriter, r *http.Request)
- func (h *Handler) DownloadCertificate(w http.ResponseWriter, r *http.Request)
- func (h *Handler) DownloadClientCA(w http.ResponseWriter, r *http.Request)
- func (h *Handler) Encrypt(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ExecuteWorkflow(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetAppRoles(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetAuditLogs(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetDashboardSummary(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetDeletedSecrets(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetEvents(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetNotifications(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetPath(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetPathPermissions(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetPathPolicy(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetPolicies(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetPolicyAuditLogs(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetRecentActivity(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetSecret(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetSecretHistory(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetSecretLineage(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetSecretVersion(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetSecrets(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetTemplates(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetWorkflow(w http.ResponseWriter, r *http.Request)
- func (h *Handler) GetWorkflows(w http.ResponseWriter, r *http.Request)
- func (h *Handler) Hmac(w http.ResponseWriter, r *http.Request)
- func (h *Handler) HmacVerify(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListAllPaths(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListApprovalRequests(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListClientCerts(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListGroupUsers(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListGroups(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListTransitKeys(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListUserGroups(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListUserPaths(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ListUsers(w http.ResponseWriter, r *http.Request)
- func (h *Handler) LogSecretAccess(secretID, userID string, source string) error
- func (h *Handler) NewHandler() *mux.Router
- func (h *Handler) RegisterUser(w http.ResponseWriter, r *http.Request)
- func (h *Handler) RejectRequest(w http.ResponseWriter, r *http.Request)
- func (h *Handler) RemoveUserFromGroup(w http.ResponseWriter, r *http.Request)
- func (h *Handler) RestoreDeletedSecret(w http.ResponseWriter, r *http.Request)
- func (h *Handler) RotateSecret(w http.ResponseWriter, r *http.Request)
- func (h *Handler) SaveOrCreateWorkflow(w http.ResponseWriter, r *http.Request)
- func (h *Handler) SavePolicy(w http.ResponseWriter, r *http.Request)
- func (h *Handler) ScanForSecrets(w http.ResponseWriter, r *http.Request)
- func (h *Handler) SealHandler(w http.ResponseWriter, r *http.Request)
- func (h *Handler) SealStatusHandler(w http.ResponseWriter, r *http.Request)
- func (h *Handler) SearchSecrets(w http.ResponseWriter, r *http.Request)
- func (h *Handler) Sign(w http.ResponseWriter, r *http.Request)
- func (h *Handler) UnsealHandler(w http.ResponseWriter, r *http.Request)
- func (h *Handler) UpdatePath(w http.ResponseWriter, r *http.Request)
- func (h *Handler) UpdateSecretMetadata(w http.ResponseWriter, r *http.Request)
- func (h *Handler) UserInGroup(userID int64, groupName string) bool
- func (h *Handler) Verify(w http.ResponseWriter, r *http.Request)
- type HmacRequest
- type HmacResponse
- type HmacVerifyRequest
- type KeycloakAuthRequest
- type LineageEdge
- type LineageNode
- type LineageResponse
- type PathResponse
- type SealRequest
- type SecretResponse
- type SignRequest
- type SignResponse
- type VerifyRequest
- type VerifyResponse
- type WorkflowRequest
Constants ¶
View Source
const ( AccessLevelList = "list" AccessLevelRead = "read" AccessLevelCreate = "create" AccessLevelUpdate = "update" AccessLevelDelete = "delete" AccessLevelOwner = "owner" )
Variables ¶
View Source
var ( KeycloakURL = "http://localhost:9999" ClientID = "apiClient" ClientSecet = "4NZ9L23PRPEo51yZnclWCbXEyWU70rgU" Realm = "myrealm" )
Functions ¶
func CombineShares ¶
CombineShares combines the shares to reconstruct the master key
Types ¶
type CreateKeyRequest ¶
Request and Response Types
type CreateKeyResponse ¶
type CreateSecretRequest ¶
type CreateSecretRequest struct { PathID string `json:"path_id"` Key string `json:"key"` Value string `json:"value"` MultiValue map[string]interface{} `json:"multi_value"` ExpiresAt *time.Time `json:"expires_at,omitempty"` Metadata map[string]interface{} `json:"metadata"` IsOneTime bool `json:"is_one_time"` RotationInterval string `json:"rotation_interval"` IsMultiValue bool `json:"is_multi_value"` Path string `json:"path"` Tags []string `json:"tags"` }
type DecryptRequest ¶
type DecryptResponse ¶
type DecryptResponse struct {
Plaintext string `json:"plaintext"`
}
type EncryptRequest ¶
type EncryptResponse ¶
type EncryptResponse struct {
Ciphertext string `json:"ciphertext"`
}
type GeneratedCertificate ¶
type Handler ¶
type Handler struct { DB *pg.DB Config config.Config CryptoOps crypt.CryptographicOperations // Z zanzibar.Zanzibar Producer messaging.Producer Consumer messaging.Consumer KAuth *keycloak.KAuth JWTKey []byte }
func (*Handler) AccessSecret ¶
func (h *Handler) AccessSecret(w http.ResponseWriter, r *http.Request)
func (*Handler) AccessSharedLink ¶
func (h *Handler) AccessSharedLink(w http.ResponseWriter, r *http.Request)
Access a shared link
func (*Handler) AddUserToGroup ¶
func (h *Handler) AddUserToGroup(w http.ResponseWriter, r *http.Request)
func (*Handler) ApproveRequest ¶
func (h *Handler) ApproveRequest(w http.ResponseWriter, r *http.Request)
func (*Handler) AuthKeycloak ¶
func (h *Handler) AuthKeycloak(w http.ResponseWriter, r *http.Request)
func (*Handler) AuthenticateAppRole ¶
func (h *Handler) AuthenticateAppRole(w http.ResponseWriter, r *http.Request)
func (*Handler) AuthenticateUser ¶
func (h *Handler) AuthenticateUser(w http.ResponseWriter, r *http.Request)
func (*Handler) CheckPermission ¶
func (*Handler) CreateAppRole ¶
func (h *Handler) CreateAppRole(w http.ResponseWriter, r *http.Request)
func (*Handler) CreateApprovalRequest ¶
func (h *Handler) CreateApprovalRequest(w http.ResponseWriter, r *http.Request)
func (*Handler) CreateClientCert ¶
func (h *Handler) CreateClientCert(w http.ResponseWriter, r *http.Request)
func (*Handler) CreateGroup ¶
func (h *Handler) CreateGroup(w http.ResponseWriter, r *http.Request)
func (*Handler) CreatePath ¶
func (h *Handler) CreatePath(w http.ResponseWriter, r *http.Request)
func (*Handler) CreateSecret ¶
func (h *Handler) CreateSecret(w http.ResponseWriter, r *http.Request)
func (*Handler) CreateSharedLink ¶
func (h *Handler) CreateSharedLink(w http.ResponseWriter, r *http.Request)
Create a shared link
func (*Handler) CreateUser ¶
func (h *Handler) CreateUser(w http.ResponseWriter, r *http.Request)
func (*Handler) DeletePolicy ¶
func (h *Handler) DeletePolicy(w http.ResponseWriter, r *http.Request)
func (*Handler) DeleteSecret ¶
func (h *Handler) DeleteSecret(w http.ResponseWriter, r *http.Request)
func (*Handler) DownloadCA ¶
func (h *Handler) DownloadCA(w http.ResponseWriter, r *http.Request)
func (*Handler) DownloadCertificate ¶
func (h *Handler) DownloadCertificate(w http.ResponseWriter, r *http.Request)
func (*Handler) DownloadClientCA ¶
func (h *Handler) DownloadClientCA(w http.ResponseWriter, r *http.Request)
func (*Handler) Encrypt ¶
func (h *Handler) Encrypt(w http.ResponseWriter, r *http.Request)
Handlers
func (*Handler) ExecuteWorkflow ¶
func (h *Handler) ExecuteWorkflow(w http.ResponseWriter, r *http.Request)
func (*Handler) GetAppRoles ¶
func (h *Handler) GetAppRoles(w http.ResponseWriter, r *http.Request)
func (*Handler) GetAuditLogs ¶
func (h *Handler) GetAuditLogs(w http.ResponseWriter, r *http.Request)
func (*Handler) GetDashboardSummary ¶
func (h *Handler) GetDashboardSummary(w http.ResponseWriter, r *http.Request)
func (*Handler) GetDeletedSecrets ¶
func (h *Handler) GetDeletedSecrets(w http.ResponseWriter, r *http.Request)
func (*Handler) GetNotifications ¶
func (h *Handler) GetNotifications(w http.ResponseWriter, r *http.Request)
func (*Handler) GetPathPermissions ¶
func (h *Handler) GetPathPermissions(w http.ResponseWriter, r *http.Request)
func (*Handler) GetPathPolicy ¶
func (h *Handler) GetPathPolicy(w http.ResponseWriter, r *http.Request)
func (*Handler) GetPolicies ¶
func (h *Handler) GetPolicies(w http.ResponseWriter, r *http.Request)
func (*Handler) GetPolicyAuditLogs ¶
func (h *Handler) GetPolicyAuditLogs(w http.ResponseWriter, r *http.Request)
func (*Handler) GetRecentActivity ¶
func (h *Handler) GetRecentActivity(w http.ResponseWriter, r *http.Request)
func (*Handler) GetSecretHistory ¶
func (h *Handler) GetSecretHistory(w http.ResponseWriter, r *http.Request)
func (*Handler) GetSecretLineage ¶
func (h *Handler) GetSecretLineage(w http.ResponseWriter, r *http.Request)
func (*Handler) GetSecretVersion ¶
func (h *Handler) GetSecretVersion(w http.ResponseWriter, r *http.Request)
func (*Handler) GetSecrets ¶
func (h *Handler) GetSecrets(w http.ResponseWriter, r *http.Request)
func (*Handler) GetTemplates ¶
func (h *Handler) GetTemplates(w http.ResponseWriter, r *http.Request)
func (*Handler) GetWorkflow ¶
func (h *Handler) GetWorkflow(w http.ResponseWriter, r *http.Request)
func (*Handler) GetWorkflows ¶
func (h *Handler) GetWorkflows(w http.ResponseWriter, r *http.Request)
func (*Handler) HmacVerify ¶
func (h *Handler) HmacVerify(w http.ResponseWriter, r *http.Request)
func (*Handler) ListAllPaths ¶
func (h *Handler) ListAllPaths(w http.ResponseWriter, r *http.Request)
ListAllPaths returns all paths regardless of permissions
func (*Handler) ListApprovalRequests ¶
func (h *Handler) ListApprovalRequests(w http.ResponseWriter, r *http.Request)
func (*Handler) ListClientCerts ¶
func (h *Handler) ListClientCerts(w http.ResponseWriter, r *http.Request)
func (*Handler) ListGroupUsers ¶
func (h *Handler) ListGroupUsers(w http.ResponseWriter, r *http.Request)
func (*Handler) ListGroups ¶
func (h *Handler) ListGroups(w http.ResponseWriter, r *http.Request)
func (*Handler) ListTransitKeys ¶
func (h *Handler) ListTransitKeys(w http.ResponseWriter, r *http.Request)
func (*Handler) ListUserGroups ¶
func (h *Handler) ListUserGroups(w http.ResponseWriter, r *http.Request)
func (*Handler) ListUserPaths ¶
func (h *Handler) ListUserPaths(w http.ResponseWriter, r *http.Request)
func (*Handler) LogSecretAccess ¶
func (*Handler) NewHandler ¶
func (*Handler) RegisterUser ¶
func (h *Handler) RegisterUser(w http.ResponseWriter, r *http.Request)
func (*Handler) RejectRequest ¶
func (h *Handler) RejectRequest(w http.ResponseWriter, r *http.Request)
func (*Handler) RemoveUserFromGroup ¶
func (h *Handler) RemoveUserFromGroup(w http.ResponseWriter, r *http.Request)
func (*Handler) RestoreDeletedSecret ¶
func (h *Handler) RestoreDeletedSecret(w http.ResponseWriter, r *http.Request)
func (*Handler) RotateSecret ¶
func (h *Handler) RotateSecret(w http.ResponseWriter, r *http.Request)
func (*Handler) SaveOrCreateWorkflow ¶
func (h *Handler) SaveOrCreateWorkflow(w http.ResponseWriter, r *http.Request)
func (*Handler) SavePolicy ¶
func (h *Handler) SavePolicy(w http.ResponseWriter, r *http.Request)
func (*Handler) ScanForSecrets ¶
func (h *Handler) ScanForSecrets(w http.ResponseWriter, r *http.Request)
func (*Handler) SealHandler ¶
func (h *Handler) SealHandler(w http.ResponseWriter, r *http.Request)
func (*Handler) SealStatusHandler ¶
func (h *Handler) SealStatusHandler(w http.ResponseWriter, r *http.Request)
func (*Handler) SearchSecrets ¶
func (h *Handler) SearchSecrets(w http.ResponseWriter, r *http.Request)
func (*Handler) UnsealHandler ¶
func (h *Handler) UnsealHandler(w http.ResponseWriter, r *http.Request)
func (*Handler) UpdatePath ¶
func (h *Handler) UpdatePath(w http.ResponseWriter, r *http.Request)
func (*Handler) UpdateSecretMetadata ¶
func (h *Handler) UpdateSecretMetadata(w http.ResponseWriter, r *http.Request)
type HmacRequest ¶
type HmacResponse ¶
type HmacResponse struct {
HMAC string `json:"hmac"`
}
type HmacVerifyRequest ¶
type KeycloakAuthRequest ¶
type LineageEdge ¶
type LineageNode ¶
type LineageResponse ¶
type LineageResponse struct { Nodes []LineageNode `json:"nodes"` Edges []LineageEdge `json:"edges"` }
type PathResponse ¶
type SealRequest ¶
type SealRequest struct {
}type SecretResponse ¶
type SecretResponse struct { ID string `json:"id"` PathID string `json:"path_id"` Key string `json:"key"` Version int `json:"version"` Checksum string `json:"checksum"` Metadata map[string]interface{} `json:"metadata"` IsMultiValue bool `json:"is_multi_value"` Tags []string `json:"tags"` CreatedAt time.Time `json:"created_at"` UpdatedAt time.Time `json:"updated_at"` IsOneTime bool `json:"is_one_time"` ExpiresAt *time.Time `json:"expires_at,omitempty"` RotatedAt *time.Time `json:"rotated_at,omitempty"` RotationInterval string `json:"rotation_interval,omitempty"` LastRotatedAt *time.Time `json:"last_rotated_at,omitempty"` CreatedBy string `json:"created_by"` Value string `json:"value"` Path string `json:"path"` KeyType string `json:"key_type"` CreatedByUser string `json:"created_by_user,omitempty"` }
type SignRequest ¶
type SignResponse ¶
type SignResponse struct {
Signature string `json:"signature"`
}
type VerifyRequest ¶
type VerifyResponse ¶
type VerifyResponse struct {
Verified bool `json:"verified"`
}
type WorkflowRequest ¶
Source Files
¶
- access.go
- app_roles.go
- approval_request.go
- assign_access.go
- audit_log.go
- certificates.go
- dashboard.go
- init.go
- lineage.go
- login.go
- middleware.go
- notifications.go
- path_permissions.go
- paths.go
- pki.go
- policy.go
- rbac.go
- scan_secrets.go
- seal_unseal.go
- secrets.go
- shared_links.go
- templates.go
- transit.go
- users_groups.go
- workflows.go
Click to show internal directories.
Click to hide internal directories.