auth

package

Go to main page

Versions in this module

v1

v1.0.10

Feb 3, 2025

Changes in this version

+ const IpaVersion

type AccessControlPolicy

+ func (acp *AccessControlPolicy) Validate() error

+ type Base64Encoded []byte

+ func (b *Base64Encoded) UnmarshalJSON(data []byte) error

+ type Base64EncodedWrapped []byte

+ func (b *Base64EncodedWrapped) MarshalJSON() ([]byte, error)

+ func (b *Base64EncodedWrapped) UnmarshalJSON(data []byte) error

type GetBucketAclOutput

+ XMLName xml.Name

type Grt

+ func (g *Grt) UnmarshalXML(d *xml.Decoder, start xml.StartElement) error

+ type IpaIAMService struct

+ func NewIpaIAMService(rootAcc Account, host, vaultName, username, password string, ...) (*IpaIAMService, error)

+ func (ipa *IpaIAMService) CreateAccount(account Account) error

+ func (ipa *IpaIAMService) DeleteUserAccount(access string) error

+ func (ipa *IpaIAMService) GetUserAccount(access string) (Account, error)

+ func (ipa *IpaIAMService) ListUserAccounts() ([]Account, error)

+ func (ipa *IpaIAMService) Shutdown() error

+ func (ipa *IpaIAMService) UpdateUserAccount(access string, props MutableProps) error

type Opts

+ IpaDebug bool

+ IpaHost string

+ IpaInsecure bool

+ IpaPassword string

+ IpaUser string

+ IpaVaultName string

+ type Permission string

+ const PermissionFullControl

+ const PermissionRead

+ const PermissionReadAcp

+ const PermissionWrite

+ const PermissionWriteAcp

v1.0.9

Dec 7, 2024

v1.0.8

Oct 28, 2024

Changes in this version

type Action

+ const GetObjectVersionAction

+ type ListUserAccountsResult struct

+ Accounts []Account

type Role

+ func (r Role) IsValid() bool

v1.0.7

Sep 18, 2024

v1.0.6

Aug 29, 2024

Changes in this version

type Opts

+ RootAccount Account

v1.0.5

Aug 6, 2024

v1.0.4

Jul 17, 2024

Changes in this version

+ type Grant struct

+ Grantee *Grt

+ Permission types.Permission

type Grantee

+ Type types.Type

+ type Grt struct

+ ID string

+ Type types.Type

+ XMLNS string

+ XMLXSI types.Type

+ type PutBucketAclInput struct

+ ACL types.BucketCannedACL

+ AccessControlPolicy *AccessControlPolicy

+ Bucket *string

+ GrantFullControl *string

+ GrantRead *string

+ GrantReadACP *string

+ GrantWrite *string

+ GrantWriteACP *string

v1.0.3

Jul 11, 2024

Changes in this version

type Action

+ const GetBucketOwnershipControlsAction

+ const PutBucketOwnershipControlsAction

v1.0.2

Jun 25, 2024

Changes in this version

type IAMCache

+ func (c *IAMCache) UpdateUserAccount(access string, props MutableProps) error

type IAMService

+ UpdateUserAccount func(access string, props MutableProps) error

type IAMServiceInternal

+ func (s *IAMServiceInternal) UpdateUserAccount(access string, props MutableProps) error

type IAMServiceS3

+ func (s *IAMServiceS3) UpdateUserAccount(access string, props MutableProps) error

type IAMServiceSingle

+ func (IAMServiceSingle) UpdateUserAccount(access string, props MutableProps) error

type LdapIAMService

+ func (ld *LdapIAMService) UpdateUserAccount(access string, props MutableProps) error

+ type MutableProps struct

+ GroupID *int

+ Secret *string

+ UserID *int

type Opts

+ LDAPGroupIdAtr string

+ LDAPUserIdAtr string

type VaultIAMService

+ func (vt *VaultIAMService) UpdateUserAccount(access string, props MutableProps) error

v1.0.1

Jun 11, 2024

v1.0.0

Jun 11, 2024

Changes in this version

+ const ResourceArnPrefix

+ var ErrNoSuchUser = errors.New("user not found")

+ var ErrNotSupported = errors.New("method is not supported")

+ var ErrUserExists = errors.New("user already exists")

+ func CheckIfAccountsExist(accs []string, iam IAMService) ([]string, error)

+ func CheckObjectAccess(ctx context.Context, bucket, userAccess string, objects []string, bypass bool, ...) error

+ func IsAdminOrOwner(acct Account, isRoot bool, acl ACL) error

+ func MayCreateBucket(acct Account, isRoot bool) error

+ func ParseBucketLockConfigurationInput(input []byte) ([]byte, error)

+ func ParseBucketLockConfigurationOutput(input []byte) (*types.ObjectLockConfiguration, error)

+ func ParseObjectLegalHoldOutput(status *bool) *types.ObjectLockLegalHold

+ func ParseObjectLockRetentionInput(input []byte) ([]byte, error)

+ func ParseObjectLockRetentionOutput(input []byte) (*types.ObjectLockRetention, error)

+ func UpdateACL(input *s3.PutBucketAclInput, acl ACL, iam IAMService) ([]byte, error)

+ func ValidatePolicyDocument(policyBin []byte, bucket string, iam IAMService) error

+ func VerifyAccess(ctx context.Context, be backend.Backend, opts AccessOptions) error

+ func VerifyBucketPolicy(policy []byte, access, bucket, object string, action Action) error

+ func VerifyObjectCopyAccess(ctx context.Context, be backend.Backend, copySource string, opts AccessOptions) error

+ type ACL struct

+ ACL types.BucketCannedACL

+ Grantees []Grantee

+ Owner string

+ func ParseACL(data []byte) (ACL, error)

+ type AccessControlList struct

+ Grants []types.Grant

+ type AccessControlPolicy struct

+ AccessControlList AccessControlList

+ Owner types.Owner

+ type AccessOptions struct

+ Acc Account

+ Acl ACL

+ AclPermission types.Permission

+ Action Action

+ Bucket string

+ IsRoot bool

+ Object string

+ Readonly bool

+ type Account struct

+ Access string

+ GroupID int

+ Role Role

+ Secret string

+ UserID int

+ type Action string

+ const AbortMultipartUploadAction

+ const AllActions

+ const BypassGovernanceRetentionAction

+ const CreateBucketAction

+ const DeleteBucketAction

+ const DeleteBucketPolicyAction

+ const DeleteObjectAction

+ const DeleteObjectTaggingAction

+ const GetBucketAclAction

+ const GetBucketObjectLockConfigurationAction

+ const GetBucketPolicyAction

+ const GetBucketTaggingAction

+ const GetBucketVersioningAction

+ const GetObjectAclAction

+ const GetObjectAction

+ const GetObjectAttributesAction

+ const GetObjectLegalHoldAction

+ const GetObjectRetentionAction

+ const GetObjectTaggingAction

+ const ListBucketAction

+ const ListBucketMultipartUploadsAction

+ const ListBucketVersionsAction

+ const ListMultipartUploadPartsAction

+ const PutBucketAclAction

+ const PutBucketObjectLockConfigurationAction

+ const PutBucketPolicyAction

+ const PutBucketTaggingAction

+ const PutBucketVersioningAction

+ const PutObjectAclAction

+ const PutObjectAction

+ const PutObjectLegalHoldAction

+ const PutObjectRetentionAction

+ const PutObjectTaggingAction

+ const RestoreObjectAction

+ func (a Action) IsObjectAction() bool

+ func (a Action) IsValid() error

+ func (a Action) WildCardMatch(act Action) bool

+ type Actions map[Action]struct

+ func (a *Actions) UnmarshalJSON(data []byte) error

+ func (a Actions) Add(str string) error

+ func (a Actions) FindMatch(action Action) bool

+ type BucketLockConfig struct

+ CreatedAt *time.Time

+ DefaultRetention *types.DefaultRetention

+ Enabled bool

+ type BucketPolicy struct

+ Statement []BucketPolicyItem

+ func (bp *BucketPolicy) Validate(bucket string, iam IAMService) error

+ type BucketPolicyAccessType string

+ const BucketPolicyAccessTypeAllow

+ const BucketPolicyAccessTypeDeny

+ func (bpat BucketPolicyAccessType) Validate() error

+ type BucketPolicyItem struct

+ Actions Actions

+ Effect BucketPolicyAccessType

+ Principals Principals

+ Resources Resources

+ func (bpi *BucketPolicyItem) Validate(bucket string, iam IAMService) error

+ type GetBucketAclOutput struct

+ AccessControlList AccessControlList

+ Owner *types.Owner

+ func ParseACLOutput(data []byte) (GetBucketAclOutput, error)

+ type Grantee struct

+ Access string

+ Permission types.Permission

+ type IAMCache struct

+ func NewCache(service IAMService, expireTime, cleanupInterval time.Duration) *IAMCache

+ func (c *IAMCache) CreateAccount(account Account) error

+ func (c *IAMCache) DeleteUserAccount(access string) error

+ func (c *IAMCache) GetUserAccount(access string) (Account, error)

+ func (c *IAMCache) ListUserAccounts() ([]Account, error)

+ func (c *IAMCache) Shutdown() error

+ type IAMService interface

+ CreateAccount func(account Account) error

+ DeleteUserAccount func(access string) error

+ GetUserAccount func(access string) (Account, error)

+ ListUserAccounts func() ([]Account, error)

+ Shutdown func() error

+ func New(o *Opts) (IAMService, error)

+ func NewLDAPService(url, bindDN, pass, queryBase, accAtr, secAtr, roleAtr, objClasses string) (IAMService, error)

+ func NewVaultIAMService(...) (IAMService, error)

+ type IAMServiceInternal struct

+ func NewInternal(dir string) (*IAMServiceInternal, error)

+ func (s *IAMServiceInternal) CreateAccount(account Account) error

+ func (s *IAMServiceInternal) DeleteUserAccount(access string) error

+ func (s *IAMServiceInternal) GetUserAccount(access string) (Account, error)

+ func (s *IAMServiceInternal) ListUserAccounts() ([]Account, error)

+ func (s *IAMServiceInternal) Shutdown() error

+ type IAMServiceS3 struct

+ func NewS3(access, secret, region, bucket, endpoint string, sslSkipVerify, debug bool) (*IAMServiceS3, error)

+ func (s *IAMServiceS3) CreateAccount(account Account) error

+ func (s *IAMServiceS3) DeleteUserAccount(access string) error

+ func (s *IAMServiceS3) GetUserAccount(access string) (Account, error)

+ func (s *IAMServiceS3) ListUserAccounts() ([]Account, error)

+ func (s *IAMServiceS3) Shutdown() error

+ type IAMServiceSingle struct

+ func (IAMServiceSingle) CreateAccount(account Account) error

+ func (IAMServiceSingle) DeleteUserAccount(access string) error

+ func (IAMServiceSingle) GetUserAccount(access string) (Account, error)

+ func (IAMServiceSingle) ListUserAccounts() ([]Account, error)

+ func (IAMServiceSingle) Shutdown() error

+ type LdapIAMService struct

+ func (ld *LdapIAMService) CreateAccount(account Account) error

+ func (ld *LdapIAMService) DeleteUserAccount(access string) error

+ func (ld *LdapIAMService) GetUserAccount(access string) (Account, error)

+ func (ld *LdapIAMService) ListUserAccounts() ([]Account, error)

+ func (ld *LdapIAMService) Shutdown() error

+ type Opts struct

+ CacheDisable bool

+ CachePrune int

+ CacheTTL int

+ Dir string

+ LDAPAccessAtr string

+ LDAPBindDN string

+ LDAPObjClasses string

+ LDAPPassword string

+ LDAPQueryBase string

+ LDAPRoleAtr string

+ LDAPSecretAtr string

+ LDAPServerURL string

+ S3Access string

+ S3Bucket string

+ S3Debug bool

+ S3DisableSSlVerfiy bool

+ S3Endpoint string

+ S3Region string

+ S3Secret string

+ VaultClientCert string

+ VaultClientCertKey string

+ VaultEndpointURL string

+ VaultMountPath string

+ VaultRoleId string

+ VaultRoleSecret string

+ VaultRootToken string

+ VaultSecretStoragePath string

+ VaultServerCert string

+ type Principals map[string]struct

+ func (p *Principals) UnmarshalJSON(data []byte) error

+ func (p Principals) Add(key string)

+ func (p Principals) Contains(userAccess string) bool

+ func (p Principals) ToSlice() []string

+ func (p Principals) Validate(iam IAMService) error

+ type Resources map[string]struct

+ func (r *Resources) UnmarshalJSON(data []byte) error

+ func (r Resources) Add(rc string) error

+ func (r Resources) ContainsBucketPattern() bool

+ func (r Resources) ContainsObjectPattern() bool

+ func (r Resources) FindMatch(resource string) bool

+ func (r Resources) Validate(bucket string) error

+ type Role string

+ const RoleAdmin

+ const RoleUser

+ const RoleUserPlus

+ type UpdateAcctFunc func([]byte) ([]byte, error)

+ type VaultIAMService struct

+ func (vt *VaultIAMService) CreateAccount(account Account) error

+ func (vt *VaultIAMService) DeleteUserAccount(access string) error

+ func (vt *VaultIAMService) GetUserAccount(access string) (Account, error)

+ func (vt *VaultIAMService) ListUserAccounts() ([]Account, error)

+ func (vt *VaultIAMService) Shutdown() error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL