pptx704
a3898d68fb
- Copy envd source from e2b-dev/infra, internalize shared dependencies
into envd/internal/shared/ (keys, filesystem, id, smap, utils)
- Switch from gRPC to Connect RPC for all envd services
- Update module paths to git.omukk.dev/wrenn/{sandbox,sandbox/envd}
- Add proto specs (process, filesystem) with buf-based code generation
- Implement full envd: process exec, filesystem ops, port forwarding,
cgroup management, MMDS integration, and HTTP API
- Update main module dependencies (firecracker SDK, pgx, goose, etc.)
- Remove placeholder .gitkeep files replaced by real implementations
48 lines
1.1 KiB
Go
48 lines
1.1 KiB
Go
package permissions
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os/user"
|
|
|
|
"connectrpc.com/authn"
|
|
"connectrpc.com/connect"
|
|
|
|
"git.omukk.dev/wrenn/sandbox/envd/internal/execcontext"
|
|
)
|
|
|
|
func AuthenticateUsername(_ context.Context, req authn.Request) (any, error) {
|
|
username, _, ok := req.BasicAuth()
|
|
if !ok {
|
|
// When no username is provided, ignore the authentication method (not all endpoints require it)
|
|
// Missing user is then handled in the GetAuthUser function
|
|
return nil, nil
|
|
}
|
|
|
|
u, err := GetUser(username)
|
|
if err != nil {
|
|
return nil, authn.Errorf("invalid username: '%s'", username)
|
|
}
|
|
|
|
return u, nil
|
|
}
|
|
|
|
func GetAuthUser(ctx context.Context, defaultUser string) (*user.User, error) {
|
|
u, ok := authn.GetInfo(ctx).(*user.User)
|
|
if !ok {
|
|
username, err := execcontext.ResolveDefaultUsername(nil, defaultUser)
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeUnauthenticated, fmt.Errorf("no user specified"))
|
|
}
|
|
|
|
u, err := GetUser(username)
|
|
if err != nil {
|
|
return nil, authn.Errorf("invalid default user: '%s'", username)
|
|
}
|
|
|
|
return u, nil
|
|
}
|
|
|
|
return u, nil
|
|
}
|