package authorizer

import "github.com/open-policy-agent/opa/v1/server/authorizer"

Package authorizer provides authorization handlers to the server.

Index ¶

• func Decision(ref func() ast.Ref) func(*Basic)
• func EnablePrintStatements(yes bool) func(r *Basic)
• func GetBodyOnContext(ctx context.Context) (interface{}, bool)
• func InterQueryCache(interQueryCache cache.InterQueryCache) func(*Basic)
• func InterQueryValueCache(interQueryValueCache cache.InterQueryValueCache) func(*Basic)
• func NewBasic(inner http.Handler, compiler func() *ast.Compiler, store storage.Store, opts ...func(*Basic)) http.Handler
• func PrintHook(printHook print.Hook) func(*Basic)
• func Runtime(term *ast.Term) func(*Basic)
• func SetBodyOnContext(ctx context.Context, x interface{}) context.Context
• type Basic
• func (h *Basic) ServeHTTP(w http.ResponseWriter, r *http.Request)

Functions ¶

func Decision ¶

func Decision(ref func() ast.Ref) func(*Basic)

Decision returns an argument that sets the path of the authorization decision to query.

func EnablePrintStatements ¶

func EnablePrintStatements(yes bool) func(r *Basic)

EnablePrintStatements enables print() calls. If this option is not provided, print() calls will be erased from the policy. This option only applies to queries and policies that passed as raw strings, i.e., this function will not have any affect if the caller supplies the ast.Compiler instance.

func GetBodyOnContext ¶

func GetBodyOnContext(ctx context.Context) (interface{}, bool)

GetBodyOnContext returns the parsed input from the request context if it exists. The authorizer saves the parsed input on the context when it runs.

func InterQueryCache ¶

func InterQueryCache(interQueryCache cache.InterQueryCache) func(*Basic)

InterQueryCache enables the inter-query cache on the authorizer

func InterQueryValueCache ¶

func InterQueryValueCache(interQueryValueCache cache.InterQueryValueCache) func(*Basic)

InterQueryValueCache enables the inter-query value cache on the authorizer

func NewBasic ¶

func NewBasic(inner http.Handler, compiler func() *ast.Compiler, store storage.Store, opts ...func(*Basic)) http.Handler

NewBasic returns a new Basic object.

func PrintHook ¶

func PrintHook(printHook print.Hook) func(*Basic)

PrintHook sets the object to use for handling print statement outputs.

func Runtime ¶

func Runtime(term *ast.Term) func(*Basic)

Runtime returns an argument that sets the runtime on the authorizer.

func SetBodyOnContext ¶

func SetBodyOnContext(ctx context.Context, x interface{}) context.Context

SetBodyOnContext adds the parsed input value to the context. This function is only exposed for test purposes.

Types ¶

type Basic ¶

type Basic struct {
	// contains filtered or unexported fields
}

Basic provides policy-based authorization over incoming requests.

func (*Basic) ServeHTTP ¶

func (h *Basic) ServeHTTP(w http.ResponseWriter, r *http.Request)

Source Files ¶

authorizer.go