mirror of
https://github.com/bitechdev/ResolveSpec.git
synced 2026-10-02 19:41:57 +00:00
Hein
c9fa8c60f2
pkg/security no longer contains SQL. Every provider calls a store interface
from lookup, implemented by a procedure backend (Postgres stored procedures,
the default there) and a direct backend (dialect-driven SQL for postgres,
sqlite, mysql and mssql with configurable table and column names).
- add sectypes, lookup, lookup/{dialect,procedure,direct,backends,ddl,conformance}
- split totp and providers sub packages out of the core package
- replace SQLNames/TableNames/QueryMode with lookup.Config (see breaking_changes.md)
- direct backend now covers column/row security and API-key login
- move txsettings SQL to lookup.ApplyTxSettings; remove password.go
- move schema scripts under lookup/, add reference DDL per dialect
- add a shared conformance suite; run it on sqlite, and on Postgres in a
podman/docker container (RESOLVESPEC_TEST_CONTAINERS=1)
- fix procedure schema bugs found on real Postgres: duplicate p_data
parameter, JSON null arrays, expires_at timezone casts, passkey list
GROUP BY, missing resolvespec_passkey_login; accept zone-less timestamps
54 lines
2.0 KiB
Go
54 lines
2.0 KiB
Go
package security
|
|
|
|
import (
|
|
"github.com/bitechdev/ResolveSpec/pkg/common"
|
|
"github.com/bitechdev/ResolveSpec/pkg/security/lookup"
|
|
)
|
|
|
|
// TxSettingsFunc returns the transaction-local settings (e.g. RLS GUCs such as
|
|
// "app.user_id") to stamp on a transaction. It runs once per transaction, at
|
|
// OnTxBegin, before any other SQL. Returning an error rolls the transaction back.
|
|
type TxSettingsFunc func(secCtx SecurityContext) (map[string]string, error)
|
|
|
|
// SetTxSettings sets the function that provides transaction-local settings for
|
|
// every transaction opened by a spec that registered its security hooks with this
|
|
// list. Pass nil to disable. May be called before or after RegisterSecurityHooks.
|
|
func (m *SecurityList) SetTxSettings(fn TxSettingsFunc) {
|
|
m.txSettingsMu.Lock()
|
|
defer m.txSettingsMu.Unlock()
|
|
m.txSettings = fn
|
|
}
|
|
|
|
// TxSettings returns the configured TxSettingsFunc, or nil.
|
|
func (m *SecurityList) TxSettings() TxSettingsFunc {
|
|
m.txSettingsMu.RLock()
|
|
defer m.txSettingsMu.RUnlock()
|
|
return m.txSettings
|
|
}
|
|
|
|
// StampTxSettings runs the list's TxSettingsFunc and applies the result to tx as
|
|
// transaction-local settings (set_config(name, value, true)). No-op when no
|
|
// function is configured or it returns no settings. tx must be the transaction
|
|
// itself, never the pool: the settings are lost on any other connection.
|
|
func StampTxSettings(secCtx SecurityContext, list *SecurityList, tx common.Database) error {
|
|
if list == nil {
|
|
return nil
|
|
}
|
|
fn := list.TxSettings()
|
|
if fn == nil {
|
|
return nil
|
|
}
|
|
settings, err := fn(secCtx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return ApplyTxSettings(secCtx, tx, settings)
|
|
}
|
|
|
|
// ApplyTxSettings sets each entry as a transaction-local setting on tx, in name
|
|
// order. Postgres only; any other driver with a non-empty map is an error so a
|
|
// missing RLS stamp fails closed. The SQL lives in lookup.ApplyTxSettings.
|
|
func ApplyTxSettings(secCtx SecurityContext, tx common.Database, settings map[string]string) error {
|
|
return lookup.ApplyTxSettings(secCtx.GetContext(), tx, settings)
|
|
}
|