/
token.go
191 lines (163 loc) · 5.02 KB
/
token.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
package fastly
import (
"fmt"
"net/http"
"sort"
"time"
)
// TokenScope is used to match possible authorization scopes
type TokenScope string
const (
// GlobalScope is the default scope covering all supported capabilities.
GlobalScope TokenScope = "global"
// PurgeSelectScope allows purging with surrogate key and URL, disallows purging with purge all.
PurgeSelectScope TokenScope = "purge_select"
// PurgeAllScope allows purging an entire service via purge_all.
PurgeAllScope TokenScope = "purge_all"
// GlobalReadScope allows read-only access to account information, configuration, and stats.
GlobalReadScope TokenScope = "global:read"
)
// Token represents an API token which are used to authenticate requests to the
// Fastly API.
type Token struct {
ID string `mapstructure:"id"`
Name string `mapstructure:"name"`
UserID string `mapstructure:"user_id"`
Services []string `mapstructure:"services"`
AccessToken string `mapstructure:"access_token"`
Scope TokenScope `mapstructure:"scope"`
IP string `mapstructure:"ip"`
CreatedAt *time.Time `mapstructure:"created_at"`
LastUsedAt *time.Time `mapstructure:"last_used_at"`
ExpiresAt *time.Time `mapstructure:"expires_at"`
}
// tokensByName is a sortable list of tokens.
type tokensByName []*Token
// Len, Swap, and Less implement the sortable interface.
func (s tokensByName) Len() int { return len(s) }
func (s tokensByName) Swap(i, j int) { s[i], s[j] = s[j], s[i] }
func (s tokensByName) Less(i, j int) bool {
return s[i].Name < s[j].Name
}
// ListTokens returns the full list of tokens belonging to the currently
// authenticated user.
func (c *Client) ListTokens() ([]*Token, error) {
resp, err := c.Get("/tokens", nil)
if err != nil {
return nil, err
}
var t []*Token
if err := decodeBodyMap(resp.Body, &t); err != nil {
return nil, err
}
sort.Stable(tokensByName(t))
return t, nil
}
// ListCustomerTokensInput is used as input to the ListCustomerTokens function.
type ListCustomerTokensInput struct {
CustomerID string
}
// ListCustomerTokens returns the full list of tokens belonging to a specific
// customer.
func (c *Client) ListCustomerTokens(i *ListCustomerTokensInput) ([]*Token, error) {
if i.CustomerID == "" {
return nil, ErrMissingCustomerID
}
path := fmt.Sprintf("/customer/%s/tokens", i.CustomerID)
resp, err := c.Get(path, nil)
if err != nil {
return nil, err
}
var t []*Token
if err := decodeBodyMap(resp.Body, &t); err != nil {
return nil, err
}
sort.Stable(tokensByName(t))
return t, nil
}
// GetTokenSelf retrieves the token information for the the access_token used
// used to authenticate the request. Returns a 401 if the token has expired
// and a 403 for invalid access token.
func (c *Client) GetTokenSelf() (*Token, error) {
resp, err := c.Get("/tokens/self", nil)
if err != nil {
return nil, err
}
var t *Token
if err := decodeBodyMap(resp.Body, &t); err != nil {
return nil, err
}
return t, nil
}
// CreateTokenInput is used as input to the Token function.
type CreateTokenInput struct {
Name string `form:"name,omitempty"`
Scope TokenScope `form:"scope,omitempty"`
Username string `form:"username,omitempty"`
Password string `form:"password,omitempty"`
Services []string `form:"services,omitempty"`
ExpiresAt *time.Time `form:"expires_at,omitempty"`
}
// CreateToken creates a new API token with the given information.
func (c *Client) CreateToken(i *CreateTokenInput) (*Token, error) {
_, err := c.PostForm("/sudo", i, nil)
if err != nil {
return nil, err
}
resp, err := c.PostForm("/tokens", i, nil)
if err != nil {
return nil, err
}
var t *Token
if err := decodeBodyMap(resp.Body, &t); err != nil {
return nil, err
}
return t, nil
}
// DeleteTokenInput is used as input to the DeleteToken function.
type DeleteTokenInput struct {
TokenID string
}
// DeleteToken revokes a specific token by its ID.
func (c *Client) DeleteToken(i *DeleteTokenInput) error {
if i.TokenID == "" {
return ErrMissingTokenID
}
path := fmt.Sprintf("/tokens/%s", i.TokenID)
resp, err := c.Delete(path, nil)
if err != nil {
return err
}
if resp.StatusCode != http.StatusNoContent {
return ErrNotOK
}
return nil
}
// DeleteTokenSelf revokes the token used to authorise the request.
func (c *Client) DeleteTokenSelf() error {
resp, err := c.Delete("/tokens/self", nil)
if err != nil {
return err
}
if resp.StatusCode != http.StatusNoContent {
return ErrNotOK
}
return nil
}
// BatchDeleteTokensInput is used as input to BatchDeleteTokens.
type BatchDeleteTokensInput struct {
Tokens []*BatchToken
}
// BatchToken represents the JSONAPI data to be sent to the API.
// Reference: https://github.com/google/jsonapi#primary
type BatchToken struct {
ID string `jsonapi:"primary,token,omitempty"`
}
// BatchDeleteTokens revokes multiple tokens.
func (c *Client) BatchDeleteTokens(i *BatchDeleteTokensInput) error {
if len(i.Tokens) == 0 {
return ErrMissingTokensValue
}
_, err := c.DeleteJSONAPIBulk("/tokens", i.Tokens, nil)
return err
}