Jay Brown
daf4d4b94b
draft pr for the test demo harness for permit.io * harness working for permit.io demo * user is const * aws profile * permit import code for research * cleanup * create user tool poc * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/permit-io-demo * tests for user creation * add audit logs and dry-run * add tests sanity check the requested roles * update docs for delete * disable/enable users and test * more tests and make user name required only for create operations * clean up * add docs * aws tag tests * audit -> slog * attempt build fix devbox * edit * just devbox * remove lock change for merge * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/permit-io-demo
82 lines
2.6 KiB
Go
82 lines
2.6 KiB
Go
package config
|
|
|
|
import (
|
|
"context"
|
|
PermitErrors "github.com/permitio/permit-golang/pkg/errors"
|
|
"github.com/permitio/permit-golang/pkg/openapi"
|
|
"strings"
|
|
)
|
|
|
|
type PermitContext struct {
|
|
APIKeyLevel APIKeyLevel
|
|
ProjectId string
|
|
EnvironmentId string
|
|
}
|
|
|
|
type PermitContextInterface interface {
|
|
SetPermitContext(project string, environment string, apiKeyLevel APIKeyLevel)
|
|
GetProject() string
|
|
GetEnvironment() string
|
|
GetContext() *PermitContext
|
|
}
|
|
|
|
func (p *PermitContext) SetPermitContext(project string, environment string, apiKeyLevel APIKeyLevel) {
|
|
p.ProjectId = project
|
|
p.EnvironmentId = environment
|
|
p.APIKeyLevel = apiKeyLevel
|
|
}
|
|
|
|
func (p *PermitContext) GetContext() *PermitContext {
|
|
return p
|
|
}
|
|
|
|
func (p *PermitContext) GetEnvironment() string {
|
|
return p.EnvironmentId
|
|
}
|
|
|
|
func (p *PermitContext) GetProject() string {
|
|
return p.ProjectId
|
|
}
|
|
|
|
func PermitContextFactory(ctx context.Context, client *openapi.APIClient, project string, environment string, isUserInput bool) (*PermitContext, error) {
|
|
apiKeysScopeRead, httpRes, err := client.APIKeysApi.GetApiKeyScope(ctx).Execute()
|
|
err = PermitErrors.HttpErrorHandle(err, httpRes)
|
|
additionalErrorMessage := PermitErrors.EmptyErrorMessage
|
|
if err != nil {
|
|
if strings.Contains(err.Error(), string(PermitErrors.ForbiddenMessage)) {
|
|
additionalErrorMessage = PermitErrors.ForbiddenMessage
|
|
}
|
|
if strings.Contains(err.Error(), string(PermitErrors.UnauthorizedMessage)) {
|
|
additionalErrorMessage = PermitErrors.UnauthorizedMessage
|
|
}
|
|
return nil, PermitErrors.NewPermitContextError(additionalErrorMessage)
|
|
}
|
|
apiKeyLevel := GetApiKeyLevel(apiKeysScopeRead)
|
|
if isUserInput {
|
|
if apiKeyLevel == EnvironmentAPIKeyLevel {
|
|
if environment == "" || project == "" {
|
|
return nil, PermitErrors.NewPermitContextError("You initiated the Permit.io " +
|
|
"client with an Environment level API key, " +
|
|
"please set a context with the API key related environment and project")
|
|
}
|
|
}
|
|
if apiKeyLevel == ProjectAPIKeyLevel {
|
|
if project == "" {
|
|
return nil, PermitErrors.NewPermitContextError("You initiated the Permit.io " +
|
|
"client with a Project level API key, " +
|
|
"please set a context with the API key related project")
|
|
}
|
|
}
|
|
return NewPermitContext(apiKeyLevel, project, environment), nil
|
|
}
|
|
return NewPermitContext(apiKeyLevel, apiKeysScopeRead.GetProjectId(), apiKeysScopeRead.GetEnvironmentId()), nil
|
|
}
|
|
|
|
func NewPermitContext(apiKeyLevel APIKeyLevel, project string, environment string) *PermitContext {
|
|
return &PermitContext{
|
|
APIKeyLevel: apiKeyLevel,
|
|
ProjectId: project,
|
|
EnvironmentId: environment,
|
|
}
|
|
}
|