66 lines
1.7 KiB
Go
66 lines
1.7 KiB
Go
package schema
|
|
|
|
import (
|
|
"regexp"
|
|
)
|
|
|
|
// AccessControlConfiguration represents the configuration related to ACLs.
|
|
type AccessControlConfiguration struct {
|
|
DefaultPolicy string `koanf:"default_policy"`
|
|
Networks []ACLNetwork `koanf:"networks"`
|
|
Rules []ACLRule `koanf:"rules"`
|
|
}
|
|
|
|
// ACLNetwork represents one ACL network group entry.
|
|
type ACLNetwork struct {
|
|
Name string `koanf:"name"`
|
|
Networks []string `koanf:"networks"`
|
|
}
|
|
|
|
// ACLRule represents one ACL rule entry.
|
|
type ACLRule struct {
|
|
Domains []string `koanf:"domain"`
|
|
DomainsRegex []regexp.Regexp `koanf:"domain_regex"`
|
|
Policy string `koanf:"policy"`
|
|
Subjects [][]string `koanf:"subject"`
|
|
Networks []string `koanf:"networks"`
|
|
Resources []regexp.Regexp `koanf:"resources"`
|
|
Methods []string `koanf:"methods"`
|
|
Query [][]ACLQueryRule `koanf:"query"`
|
|
}
|
|
|
|
// ACLQueryRule represents the ACL query criteria.
|
|
type ACLQueryRule struct {
|
|
Operator string `koanf:"operator"`
|
|
Key string `koanf:"key"`
|
|
Value any `koanf:"value"`
|
|
}
|
|
|
|
// DefaultACLNetwork represents the default configuration related to access control network group configuration.
|
|
var DefaultACLNetwork = []ACLNetwork{
|
|
{
|
|
Name: "localhost",
|
|
Networks: []string{"127.0.0.1"},
|
|
},
|
|
{
|
|
Name: "internal",
|
|
Networks: []string{"10.0.0.0/8"},
|
|
},
|
|
}
|
|
|
|
// DefaultACLRule represents the default configuration related to access control rule configuration.
|
|
var DefaultACLRule = []ACLRule{
|
|
{
|
|
Domains: []string{"public.example.com"},
|
|
Policy: "bypass",
|
|
},
|
|
{
|
|
Domains: []string{"singlefactor.example.com"},
|
|
Policy: "one_factor",
|
|
},
|
|
{
|
|
Domains: []string{"secure.example.com"},
|
|
Policy: "two_factor",
|
|
},
|
|
}
|