1
0
mirror of https://github.com/rancher/types.git synced 2025-06-21 11:21:54 +00:00

Merge pull request #1104 from cbron/token-hashing

Token Hashing
This commit is contained in:
Caleb Bron 2020-03-02 19:53:39 -07:00 committed by GitHub
commit b56ddaf96b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 12 additions and 2 deletions

View File

@ -29,6 +29,7 @@ import (
rbacv1 "github.com/rancher/types/apis/rbac.authorization.k8s.io/v1"
storagev1 "github.com/rancher/types/apis/storage.k8s.io/v1"
"github.com/rancher/types/config/dialer"
"github.com/rancher/types/config/systemtokens"
"github.com/rancher/types/peermanager"
"github.com/rancher/types/user"
"github.com/rancher/wrangler-api/pkg/generated/controllers/rbac"
@ -57,6 +58,7 @@ type ScaledContext struct {
Schemas *types.Schemas
AccessControl types.AccessControl
Dialer dialer.Factory
SystemTokens systemtokens.Interface
UserManager user.Manager
PeerManager peermanager.PeerManager
@ -89,6 +91,8 @@ func (c *ScaledContext) NewManagementContext() (*ManagementContext, error) {
}
mgmt.Dialer = c.Dialer
mgmt.UserManager = c.UserManager
mgmt.SystemTokens = c.SystemTokens
c.managementContext = mgmt
return mgmt, nil
}
@ -167,6 +171,7 @@ type ManagementContext struct {
Scheme *runtime.Scheme
Dialer dialer.Factory
UserManager user.Manager
SystemTokens systemtokens.Interface
Management managementv3.Interface
Project projectv3.Interface

View File

@ -0,0 +1,5 @@
package systemtokens
type Interface interface {
EnsureSystemToken(name, description, kind, username string, overrideTTL *int64) (string, error)
}

View File

@ -9,8 +9,8 @@ import (
type Manager interface {
SetPrincipalOnCurrentUser(apiContext *types.APIContext, principal v3.Principal) (*v3.User, error)
GetUser(apiContext *types.APIContext) string
EnsureToken(tokenName, description, kind, userName string) (string, error)
EnsureClusterToken(clusterName, tokenName, description, kind, userName string) (string, error)
EnsureToken(tokenName, description, kind, userName string, ttl *int64) (string, error)
EnsureClusterToken(clusterName, tokenName, description, kind, userName string, ttl *int64) (string, error)
EnsureUser(principalName, displayName string) (*v3.User, error)
CheckAccess(accessMode string, allowedPrincipalIDs []string, userPrincipalID string, groups []v3.Principal) (bool, error)
SetPrincipalOnCurrentUserByUserID(userID string, principal v3.Principal) (*v3.User, error)