-
Notifications
You must be signed in to change notification settings - Fork 84
/
model.go
79 lines (70 loc) · 2.54 KB
/
model.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
package tenantmapping
import (
"crypto/sha256"
"fmt"
"github.com/kyma-incubator/compass/components/director/pkg/consumer"
"github.com/kyma-incubator/compass/components/director/pkg/graphql"
"github.com/kyma-incubator/compass/components/hydrator/pkg/oathkeeper"
)
const (
scopesPerConsumerTypePrefix = "scopesPerConsumerType"
)
// ObjectContext missing godoc
type ObjectContext struct {
KeysExtra
Tenant *graphql.Tenant
Scopes string
ScopesMergeStrategy scopesMergeStrategy
Region string
OauthClientID string
ConsumerID string
AuthFlow oathkeeper.AuthFlow
ConsumerType consumer.Type
ContextProvider string
Subject string
}
type scopesMergeStrategy string
const (
overrideAllScopes scopesMergeStrategy = "overrideAllScopes"
mergeWithOtherScopes scopesMergeStrategy = "mergeWithOtherScopes"
intersectWithOtherScopes scopesMergeStrategy = "intersectWithOtherScopes"
)
// KeysExtra contains the keys that should be used for Tenant and ExternalTenant in the IDToken claims
type KeysExtra struct {
TenantKey string
ExternalTenantKey string
}
// NewObjectContext missing godoc
func NewObjectContext(tenant *graphql.Tenant, keysExtra KeysExtra, scopes string, scopesMergeStrategy scopesMergeStrategy, region, clientID, consumerID string, authFlow oathkeeper.AuthFlow, consumerType consumer.Type, contextProvider string, subject string) ObjectContext {
return ObjectContext{
Tenant: tenant,
KeysExtra: keysExtra,
Scopes: scopes,
ScopesMergeStrategy: scopesMergeStrategy,
Region: region,
OauthClientID: clientID,
ConsumerID: consumerID,
AuthFlow: authFlow,
ConsumerType: consumerType,
ContextProvider: contextProvider,
Subject: subject,
}
}
func RedactConsumerIDForLogging(original ObjectContext) ObjectContext {
if original.ConsumerType == consumer.User {
return ObjectContext{
Tenant: original.Tenant,
KeysExtra: original.KeysExtra,
Scopes: original.Scopes,
ScopesMergeStrategy: original.ScopesMergeStrategy,
Region: original.Region,
OauthClientID: original.OauthClientID,
ConsumerID: fmt.Sprintf("REDACTED_%x", sha256.Sum256([]byte(original.ConsumerID))),
AuthFlow: original.AuthFlow,
ConsumerType: original.ConsumerType,
ContextProvider: original.ContextProvider,
Subject: original.Subject,
}
}
return original
}