2320e1e0be
Add Driver interface and implementations for Google Workspace, Linear, Slack, 1Password, HubSpot, DocuSign, Notion, Brex, Tally, Cloudflare, CSV, Probo memberships, Sentry, OpenAI, Supabase, GitHub, Intercom, and Resend. Include name resolvers, VCR test infrastructure with cassettes, and RFC 5988 link header parser. Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
60 lines
2.4 KiB
Go
60 lines
2.4 KiB
Go
// Copyright (c) 2026 Probo Inc <hello@getprobo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package drivers
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
"go.probo.inc/probo/pkg/coredata"
|
|
)
|
|
|
|
// AccountRecord represents a single account from an access source or identity
|
|
// source. All fields are best-effort; sources populate what they can.
|
|
type AccountRecord struct {
|
|
Email string
|
|
FullName string
|
|
Role string // system role/permission (e.g. "Admin", "Viewer")
|
|
JobTitle string // HR job title / department (e.g. "Software Engineer")
|
|
Active bool
|
|
IsAdmin bool
|
|
MFAStatus coredata.MFAStatus
|
|
AuthMethod coredata.AccessEntryAuthMethod
|
|
AccountType coredata.AccessEntryAccountType
|
|
LastLogin *time.Time
|
|
CreatedAt *time.Time
|
|
ExternalID string // system-specific user ID
|
|
}
|
|
|
|
// maxPaginationPages is the upper bound on the number of pages a driver will
|
|
// fetch from an external API. This prevents infinite loops if an API returns
|
|
// a non-empty cursor on every response.
|
|
const maxPaginationPages = 500
|
|
|
|
// ErrPaginationLimitReached is returned when a driver exhausts the maximum
|
|
// number of pagination pages without reaching the end of the result set.
|
|
var ErrPaginationLimitReached = fmt.Errorf("pagination limit of %d pages reached", maxPaginationPages)
|
|
|
|
// Driver defines the interface for fetching accounts from an access or
|
|
// identity source. Each driver implementation corresponds to a specific
|
|
// system (e.g. Google Workspace, AWS IAM, Probo memberships, CSV).
|
|
//
|
|
// All sources in a campaign's scope return "who actually has access" data.
|
|
type Driver interface {
|
|
// ListAccounts returns all accounts from the source system.
|
|
ListAccounts(ctx context.Context) ([]AccountRecord, error)
|
|
}
|