76 lines
1.9 KiB
Go
76 lines
1.9 KiB
Go
|
package auth
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"net/http"
|
||
|
|
|
||
|
|
"github.com/pkg/errors"
|
||
|
|
"go.signoz.io/signoz/pkg/query-service/constants"
|
||
|
|
"go.signoz.io/signoz/pkg/query-service/dao"
|
||
|
|
"go.signoz.io/signoz/pkg/query-service/model"
|
||
|
|
)
|
||
|
|
|
||
|
|
type Group struct {
|
||
|
|
GroupID string
|
||
|
|
GroupName string
|
||
|
|
}
|
||
|
|
|
||
|
|
type AuthCache struct {
|
||
|
|
AdminGroupId string
|
||
|
|
EditorGroupId string
|
||
|
|
ViewerGroupId string
|
||
|
|
}
|
||
|
|
|
||
|
|
var AuthCacheObj AuthCache
|
||
|
|
|
||
|
|
// InitAuthCache reads the DB and initialize the auth cache.
|
||
|
|
func InitAuthCache(ctx context.Context) error {
|
||
|
|
|
||
|
|
setGroupId := func(groupName string, dest *string) error {
|
||
|
|
group, err := dao.DB().GetGroupByName(ctx, groupName)
|
||
|
|
if err != nil {
|
||
|
|
return errors.Wrapf(err.Err, "failed to get group %s", groupName)
|
||
|
|
}
|
||
|
|
*dest = group.Id
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
|
||
|
|
if err := setGroupId(constants.AdminGroup, &AuthCacheObj.AdminGroupId); err != nil {
|
||
|
|
return err
|
||
|
|
}
|
||
|
|
if err := setGroupId(constants.EditorGroup, &AuthCacheObj.EditorGroupId); err != nil {
|
||
|
|
return err
|
||
|
|
}
|
||
|
|
if err := setGroupId(constants.ViewerGroup, &AuthCacheObj.ViewerGroupId); err != nil {
|
||
|
|
return err
|
||
|
|
}
|
||
|
|
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func GetUserFromRequest(r *http.Request) (*model.UserPayload, error) {
|
||
|
|
accessJwt, err := ExtractJwtFromRequest(r)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
|
||
|
|
user, err := validateUser(accessJwt)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
return user, nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func IsSelfAccessRequest(user *model.UserPayload, id string) bool { return user.Id == id }
|
||
|
|
|
||
|
|
func IsViewer(user *model.UserPayload) bool { return user.GroupId == AuthCacheObj.ViewerGroupId }
|
||
|
|
func IsEditor(user *model.UserPayload) bool { return user.GroupId == AuthCacheObj.EditorGroupId }
|
||
|
|
func IsAdmin(user *model.UserPayload) bool { return user.GroupId == AuthCacheObj.AdminGroupId }
|
||
|
|
|
||
|
|
func ValidatePassword(password string) error {
|
||
|
|
if len(password) < minimumPasswordLength {
|
||
|
|
return errors.Errorf("Password should be atleast %d characters.", minimumPasswordLength)
|
||
|
|
}
|
||
|
|
return nil
|
||
|
|
}
|