Packages
arke_server
0.4.0
0.5.1
0.5.0
0.4.3
0.4.2
0.4.1
0.4.0
0.4.0-bulk.0
0.3.18
0.3.17
0.3.16
0.3.15
0.3.14
0.3.13
0.3.12
0.3.11
0.3.10
0.3.9
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.1.42
0.1.41
0.1.40
0.1.39
0.1.38
0.1.37
0.1.36
0.1.35
0.1.34
0.1.33
0.1.32
0.1.31
0.1.30
0.1.29
0.1.28
0.1.27
0.1.26
0.1.25
0.1.24
0.1.23
0.1.22
0.1.21
0.1.20
0.1.19
0.1.18
0.1.17
0.1.16
0.1.15
0.1.14
0.1.13
0.1.12
0.1.11
0.1.10
0.1.9
0.1.8
0.1.7
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
Arke server
Current section
Files
Jump to
Current section
Files
lib/arke_server/plugs/auth_pipeline.ex
# Copyright 2023 Arkemis S.r.l.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
########################################################################
### STANDARD AUTH PIPELINE #############################################
########################################################################
defmodule ArkeServer.Plugs.AuthPipeline do
@moduledoc """
Pipeline To ensure that the user is always authenticated and authorized
"""
use Guardian.Plug.Pipeline,
otp_app: :arke_auth,
module: ArkeAuth.Guardian,
error_handler: ArkeServer.ErrorHandlers.Auth
plug(Guardian.Plug.VerifyHeader, scheme: "Bearer")
plug(Guardian.Plug.EnsureAuthenticated)
plug(Guardian.Plug.LoadResource)
end
defmodule ArkeServer.Plugs.ImpersonateAuthPipeline do
@moduledoc """
Pipeline to ensure authentication of user and impersonate user
"""
use Guardian.Plug.Pipeline,
otp_app: :arke_auth,
module: ArkeAuth.Guardian,
error_handler: ArkeServer.ErrorHandlers.Auth
plug(Guardian.Plug.VerifyHeader, scheme: "Bearer")
plug(Guardian.Plug.EnsureAuthenticated)
plug(Guardian.Plug.LoadResource)
plug(Guardian.Plug.VerifyHeader,
scheme: "Bearer",
header_name: "impersonate-token",
key: "impersonate"
)
plug(Guardian.Plug.EnsureAuthenticated, key: :impersonate)
plug(Guardian.Plug.LoadResource, key: :impersonate)
end
defmodule ArkeServer.Plugs.NotAuthPipeline do
@moduledoc """
Pipeline for all the non-authorized endpoints
"""
use Guardian.Plug.Pipeline,
otp_app: :arke_auth,
module: ArkeAuth.Guardian,
error_handler: ArkeServer.ErrorHandlers.Auth
plug(Guardian.Plug.EnsureNotAuthenticated)
end
########################################################################
### SSO AUTH PIPELINE ##################################################
########################################################################
defmodule ArkeServer.Plugs.SSOAuthPipeline do
@moduledoc """
Pipeline to ensure the existence of an arke user from a sso jwt token
"""
use Guardian.Plug.Pipeline,
otp_app: :arke_auth,
module: ArkeAuth.SSOGuardian,
error_handler: ArkeServer.ErrorHandlers.SSOAuth
plug(Guardian.Plug.VerifyHeader, scheme: "Bearer")
plug(Guardian.Plug.EnsureAuthenticated)
plug(Guardian.Plug.LoadResource)
end
defmodule ArkeServer.Plugs.SSONotAuthPipeline do
@moduledoc """
Pipeline for all the non-authorized endpoints
"""
use Guardian.Plug.Pipeline,
otp_app: :arke_auth,
module: ArkeAuth.SSOGuardian,
error_handler: ArkeServer.ErrorHandlers.SSOAuth
plug(Guardian.Plug.EnsureNotAuthenticated)
end