-
Notifications
You must be signed in to change notification settings - Fork 15
/
ac.go
74 lines (59 loc) · 1.58 KB
/
ac.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
package accesscontrol
import (
"net/http"
"github.com/avenga/couper/errors"
"github.com/avenga/couper/eval"
)
type (
Map map[string]AccessControl
ValidateFunc func(*http.Request) error
List []*ListItem
ListItem struct {
control AccessControl
controlErrHandler http.Handler
kind string
label string
}
)
func NewItem(nameLabel string, control AccessControl, errHandler http.Handler) *ListItem {
return &ListItem{
control: control,
controlErrHandler: errHandler,
kind: errors.TypeToSnake(control),
label: nameLabel,
}
}
type AccessControl interface {
Validate(req *http.Request) error
}
type DisablePrivateCaching interface {
DisablePrivateCaching() bool
}
type ProtectedHandler interface {
Child() http.Handler
}
var _ AccessControl = ValidateFunc(func(_ *http.Request) error { return nil })
func (i ListItem) Validate(req *http.Request) error {
if err := i.control.Validate(req); err != nil {
if e, ok := err.(*errors.Error); ok {
return e.Label(i.label)
}
return errors.AccessControl.Label(i.label).Kind(i.kind).With(err)
}
evalCtx := eval.ContextFromRequest(req)
*req = *req.WithContext(evalCtx.WithClientRequest(req))
return nil
}
func (i ListItem) ErrorHandler() http.Handler {
return i.controlErrHandler
}
func (i ListItem) DisablePrivateCaching() bool {
if c, ok := i.control.(DisablePrivateCaching); ok {
return c.DisablePrivateCaching()
}
// not implemented, always disabled
return true
}
func (f ValidateFunc) Validate(req *http.Request) error {
return f(req)
}