jay brown
108 lines
2.7 KiB
Go
108 lines
2.7 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"sort"
|
|
|
|
"queryorchestration/internal/rbac" // Replace with your actual module name
|
|
)
|
|
|
|
//type DummyServiceConfig struct {
|
|
// service.BaseConfig
|
|
//}
|
|
|
|
func PrintEnvironmentVariables() {
|
|
// Get all environment variables
|
|
envVars := os.Environ()
|
|
|
|
// Sort them for consistent output
|
|
sort.Strings(envVars)
|
|
|
|
// Print each variable in "key = value" format
|
|
for _, env := range envVars {
|
|
// Find the first equals sign to split the string
|
|
for i := 0; i < len(env); i++ {
|
|
if env[i] == '=' {
|
|
key := env[:i]
|
|
value := env[i+1:]
|
|
fmt.Printf("%s = %s\n", key, value)
|
|
break
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
func main() {
|
|
PrintEnvironmentVariables()
|
|
//cfg := &DummyServiceConfig{}
|
|
//errGettingConfig := serviceconfig.InitializeConfig(cfg)
|
|
//if errGettingConfig != nil {
|
|
// log.Fatal(errGettingConfig)
|
|
//}
|
|
// use the config here for the key provider parameters
|
|
// Example with local key provider for testing
|
|
localProvider := rbac.NewLocalKeyProvider("private_key.pem", "public_key.pem")
|
|
|
|
// Generate a mock JWT with multiple Cognito groups
|
|
groups := []string{"admins", "developers", "querybuilders", "uploaders", "exporters"}
|
|
tokenString, err := rbac.GenerateTestJWT(localProvider, "test-user-id", "test@example.com", groups)
|
|
if err != nil {
|
|
fmt.Println("Error generating token:", err)
|
|
return
|
|
}
|
|
|
|
fmt.Printf("raw token: %s\n", tokenString)
|
|
|
|
token, claims, err := rbac.ValidateJWT(tokenString, localProvider)
|
|
if err != nil {
|
|
fmt.Println("Token validation failed:", err)
|
|
return
|
|
}
|
|
|
|
// Print token details for debugging
|
|
rbac.PrintTokenDetails(token)
|
|
|
|
// Example with Cognito key provider for production
|
|
/*
|
|
cognitoProvider := rbac.NewCognitoKeyProvider("us-east-1", "us-east-1_XXXXXXXXX")
|
|
token, claims, err := rbac.ValidateJWT(tokenString, cognitoProvider)
|
|
*/
|
|
|
|
if token.Valid {
|
|
// Extract the token details
|
|
details := rbac.ExtractTokenDetails(token, claims)
|
|
|
|
fmt.Println("Token is valid.")
|
|
fmt.Println("User ID:", details.UserID)
|
|
fmt.Println("Email:", details.Email)
|
|
fmt.Println("Expires:", details.Expiration)
|
|
|
|
if len(details.Groups) > 0 {
|
|
fmt.Println("User Groups:")
|
|
for _, group := range details.Groups {
|
|
fmt.Println("-", group)
|
|
}
|
|
} else {
|
|
fmt.Println("No groups found in token.")
|
|
}
|
|
|
|
// Check if user is in a specific group
|
|
if rbac.HasGroup(claims, "admins") {
|
|
fmt.Println("User is an admin.")
|
|
}
|
|
|
|
// Check if user is in any of these groups
|
|
if rbac.HasAnyGroup(claims, []string{"developers", "querybuilders"}) {
|
|
fmt.Println("User can modify or query data.")
|
|
}
|
|
|
|
// Check if user is in all of these groups
|
|
if rbac.HasAllGroups(claims, []string{"uploaders", "exporters"}) {
|
|
fmt.Println("User can both upload and export data.")
|
|
}
|
|
} else {
|
|
fmt.Println("Invalid token")
|
|
}
|
|
}
|