Todd KnightandJeff Mitchell
1ddc59f81e
* Adding Add/Set/Remove principals API calls. * Add SDK custom methods. Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
108 lines
2.9 KiB
Go
108 lines
2.9 KiB
Go
package roles
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/hashicorp/watchtower/api"
|
|
)
|
|
|
|
func (s Role) AddPrincipals(ctx context.Context, groups, users []string) (*Role, *api.Error, error) {
|
|
if s.Client == nil {
|
|
return nil, nil, fmt.Errorf("nil client in AddPrincipals request")
|
|
}
|
|
// We assume that the client provided has the org and optionally the project id of the request.
|
|
|
|
body := map[string]interface{}{
|
|
"group_ids": groups,
|
|
"user_ids": users,
|
|
"version": s.Version,
|
|
}
|
|
|
|
req, err := s.Client.NewRequest(ctx, "POST", fmt.Sprintf("roles/%s:add-principals", s.Id), body)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error creating AddPrincipals request: %w", err)
|
|
}
|
|
|
|
resp, err := s.Client.Do(req)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error performing client request during AddPrincipals call: %w", err)
|
|
}
|
|
|
|
target := new(Role)
|
|
apiErr, err := resp.Decode(target)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error decoding AddPrincipals repsonse: %w", err)
|
|
}
|
|
|
|
target.Client = s.Client
|
|
|
|
return target, apiErr, nil
|
|
}
|
|
|
|
func (s Role) SetPrincipals(ctx context.Context, groups, users []string) (*Role, *api.Error, error) {
|
|
if s.Client == nil {
|
|
return nil, nil, fmt.Errorf("nil client in SetPrincipals request")
|
|
}
|
|
// We assume that the client provided has the org and optionally the project id of the request.
|
|
|
|
body := map[string]interface{}{
|
|
"group_ids": groups,
|
|
"user_ids": users,
|
|
"version": s.Version,
|
|
}
|
|
|
|
req, err := s.Client.NewRequest(ctx, "POST", fmt.Sprintf("roles/%s:set-principals", s.Id), body)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error creating SetPrincipals request: %w", err)
|
|
}
|
|
|
|
resp, err := s.Client.Do(req)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error performing client request during SetPrincipals call: %w", err)
|
|
}
|
|
|
|
target := new(Role)
|
|
apiErr, err := resp.Decode(target)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error decoding SetPrincipals repsonse: %w", err)
|
|
}
|
|
|
|
target.Client = s.Client
|
|
|
|
return target, apiErr, nil
|
|
}
|
|
|
|
func (s Role) RemovePrincipals(ctx context.Context, groups, users []string) (*Role, *api.Error, error) {
|
|
if s.Client == nil {
|
|
return nil, nil, fmt.Errorf("nil client in RemovePrincipals request")
|
|
}
|
|
// We assume that the client provided has the org and optionally the project id of the request.
|
|
|
|
body := map[string]interface{}{
|
|
"group_ids": groups,
|
|
"user_ids": users,
|
|
"version": s.Version,
|
|
}
|
|
|
|
req, err := s.Client.NewRequest(ctx, "POST", fmt.Sprintf("roles/%s:remove-principals", s.Id), body)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error creating RemovePrincipals request: %w", err)
|
|
}
|
|
|
|
resp, err := s.Client.Do(req)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error performing client request during RemovePrincipals call: %w", err)
|
|
}
|
|
|
|
target := new(Role)
|
|
apiErr, err := resp.Decode(target)
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("error decoding RemovePrincipals repsonse: %w", err)
|
|
}
|
|
|
|
target.Client = s.Client
|
|
|
|
return target, apiErr, nil
|
|
}
|