s-christoffandJim
6b78108ecf
* add new error funcs which take a ctx and deprecate existing funcs * use context where available when writing error events * remove circular internal/errors pkg dep * suppress some chatty errors using errors.WithoutEvent() * convert auth oidc funcs to take context where needed to write events Co-authored-by: Jim <jlambert@hashicorp.com>
79 lines
2.0 KiB
Go
79 lines
2.0 KiB
Go
package password
|
|
|
|
import (
|
|
"github.com/hashicorp/boundary/internal/auth/password/store"
|
|
"github.com/hashicorp/boundary/internal/errors"
|
|
"github.com/hashicorp/boundary/internal/oplog"
|
|
"google.golang.org/protobuf/proto"
|
|
)
|
|
|
|
// An Account contains a user name. It is owned by an auth method.
|
|
type Account struct {
|
|
*store.Account
|
|
tableName string
|
|
|
|
// CredentialId is included when Authenticate or ChangePassword is
|
|
// called. A new CredentialId is generated when a password is changed.
|
|
CredentialId string `gorm:"-"`
|
|
}
|
|
|
|
func allocAccount() *Account {
|
|
return &Account{
|
|
Account: &store.Account{},
|
|
}
|
|
}
|
|
|
|
// NewAccount creates a new in memory Account. LoginName, name, and
|
|
// description are the only valid options. All other options are ignored.
|
|
func NewAccount(authMethodId string, opt ...Option) (*Account, error) {
|
|
const op = "password.NewAccount"
|
|
// NOTE(mgaffney): The scopeId in the embedded *store.Account is
|
|
// populated by a trigger in the database.
|
|
if authMethodId == "" {
|
|
return nil, errors.NewDeprecated(errors.InvalidParameter, op, "missing auth method id")
|
|
}
|
|
|
|
opts := getOpts(opt...)
|
|
a := &Account{
|
|
Account: &store.Account{
|
|
AuthMethodId: authMethodId,
|
|
LoginName: opts.withLoginName,
|
|
Name: opts.withName,
|
|
Description: opts.withDescription,
|
|
},
|
|
}
|
|
return a, nil
|
|
}
|
|
|
|
func (a *Account) clone() *Account {
|
|
cp := proto.Clone(a.Account)
|
|
return &Account{
|
|
Account: cp.(*store.Account),
|
|
}
|
|
}
|
|
|
|
// TableName returns the table name.
|
|
func (a *Account) TableName() string {
|
|
if a.tableName != "" {
|
|
return a.tableName
|
|
}
|
|
return "auth_password_account"
|
|
}
|
|
|
|
// SetTableName sets the table name.
|
|
func (a *Account) SetTableName(n string) {
|
|
a.tableName = n
|
|
}
|
|
|
|
func (a *Account) oplog(op oplog.OpType) oplog.Metadata {
|
|
metadata := oplog.Metadata{
|
|
"resource-public-id": []string{a.GetPublicId()},
|
|
"resource-type": []string{"password account"},
|
|
"op-type": []string{op.String()},
|
|
}
|
|
if a.AuthMethodId != "" {
|
|
metadata["auth-method-id"] = []string{a.AuthMethodId}
|
|
}
|
|
return metadata
|
|
}
|