@@ -99,7 +99,7 @@ func (a *Authorizer) authorize(ctx context.Context, conn pg.Conn, params Authori
|
||||
var errSessionExpired *ErrSessionExpired
|
||||
|
||||
if errors.As(err, &errSessionNotFound) || errors.As(err, &errSessionExpired) {
|
||||
return NewAssumptionNeededError(params.Principal, membership.ID)
|
||||
return NewAssumptionRequiredError(params.Principal, membership.ID)
|
||||
}
|
||||
|
||||
return fmt.Errorf("cannot get active child session for membership: %w", err)
|
||||
|
||||
@@ -183,17 +183,17 @@ func (e ErrInsufficientPermissions) Error() string {
|
||||
return fmt.Sprintf("identity %q does not have sufficient permissions to perform action %s on entity %q", e.IdentityID, e.Action, e.EntityID)
|
||||
}
|
||||
|
||||
type ErrAssumptionNeeded struct {
|
||||
type ErrAssumptionRequired struct {
|
||||
IdentityID gid.GID
|
||||
MembershipID gid.GID
|
||||
}
|
||||
|
||||
func NewAssumptionNeededError(identityID gid.GID, membershipID gid.GID) error {
|
||||
return &ErrAssumptionNeeded{IdentityID: identityID, MembershipID: membershipID}
|
||||
func NewAssumptionRequiredError(identityID gid.GID, membershipID gid.GID) error {
|
||||
return &ErrAssumptionRequired{IdentityID: identityID, MembershipID: membershipID}
|
||||
}
|
||||
|
||||
func (e ErrAssumptionNeeded) Error() string {
|
||||
return fmt.Sprintf("assumption for identity %q needed for membership %q", e.IdentityID, e.MembershipID)
|
||||
func (e ErrAssumptionRequired) Error() string {
|
||||
return fmt.Sprintf("assumption for identity %q required for membership %q", e.IdentityID, e.MembershipID)
|
||||
}
|
||||
|
||||
type ErrSessionNotFound struct{ SessionID gid.GID }
|
||||
|
||||
@@ -72,9 +72,9 @@ func NewAuthorizeFunc(
|
||||
}
|
||||
|
||||
if err := svc.Authorizer.Authorize(ctx, params); err != nil {
|
||||
var errAssumptionNeeded *iam.ErrAssumptionNeeded
|
||||
if errors.As(err, &errAssumptionNeeded) {
|
||||
return gqlutils.NotAssuming(ctx, err)
|
||||
var errAssumptionRequired *iam.ErrAssumptionRequired
|
||||
if errors.As(err, &errAssumptionRequired) {
|
||||
return gqlutils.AssumptionRequired(ctx, err)
|
||||
}
|
||||
|
||||
var errInsufficientPermissions *iam.ErrInsufficientPermissions
|
||||
|
||||
@@ -52,18 +52,18 @@ func Unauthenticatedf(ctx context.Context, format string, a ...any) *gqlerror.Er
|
||||
return Unauthenticated(ctx, fmt.Errorf(format, a...))
|
||||
}
|
||||
|
||||
func NotAssuming(ctx context.Context, err error) *gqlerror.Error {
|
||||
func AssumptionRequired(ctx context.Context, err error) *gqlerror.Error {
|
||||
return &gqlerror.Error{
|
||||
Message: err.Error(),
|
||||
Path: graphql.GetPath(ctx),
|
||||
Extensions: map[string]any{
|
||||
"code": "NOT_ASSUMING",
|
||||
"code": "ASSUMPTION_REQUIRED",
|
||||
},
|
||||
}
|
||||
}
|
||||
|
||||
func NotAssumingf(ctx context.Context, format string, a ...any) *gqlerror.Error {
|
||||
return NotAssuming(ctx, fmt.Errorf(format, a...))
|
||||
func AssumptionRequiredf(ctx context.Context, format string, a ...any) *gqlerror.Error {
|
||||
return AssumptionRequired(ctx, fmt.Errorf(format, a...))
|
||||
}
|
||||
|
||||
func Forbidden(ctx context.Context, err error) *gqlerror.Error {
|
||||
|
||||
Reference in New Issue
Block a user