Fix Userinfo (#63)

This is purely a token introspection type now, we are no longer piggy backing RBAC on it, instead prefering the ACL interface. A vast part of this is moving RBAC and authorization into identity to save pain and suffering. A little bit of coupling still exists in order to get access to the request subject for auditing.
unikorn-cloud · Jul 4, 2024 · 87356b1 · 87356b1
1 parent 924989b
commit 87356b1
Show file tree

Hide file tree

Showing 12 changed files with 4 additions and 534 deletions.
diff --git a/charts/core/Chart.yaml b/charts/core/Chart.yaml
@@ -4,8 +4,8 @@ description: A Helm chart for deploying Unikorn Core
 
 type: application
 
-version: v0.1.56
-appVersion: v0.1.56
+version: v0.1.57
+appVersion: v0.1.57
 
 icon: https://assets.unikorn-cloud.org/images/logos/dark-on-light/icon.svg
 

diff --git a/pkg/authorization/constants/roles.go b/pkg/authorization/constants/roles.go
diff --git a/pkg/authorization/rbac/authorizer.go b/pkg/authorization/rbac/authorizer.go
diff --git a/pkg/authorization/rbac/helpers.go b/pkg/authorization/rbac/helpers.go
diff --git a/pkg/authorization/rbac/interfaces.go b/pkg/authorization/rbac/interfaces.go
diff --git a/pkg/authorization/rbac/types.go b/pkg/authorization/rbac/types.go
diff --git a/pkg/authorization/userinfo/rbac.go b/pkg/authorization/userinfo/rbac.go
diff --git a/pkg/authorization/userinfo/types.go b/pkg/authorization/userinfo/types.go
@@ -18,11 +18,6 @@ package userinfo
 
 import (
 	"github.com/go-jose/go-jose/v3/jwt"
-
-	"github.com/unikorn-cloud/core/pkg/authorization/rbac"
 )
 
-type UserInfo struct {
-	jwt.Claims `json:",inline"`
-	RBAC       *rbac.Permissions `json:"rbac,omitempty"`
-}
+type UserInfo jwt.Claims
diff --git a/pkg/server/middleware/openapi/schema.go → pkg/openapi/helpers.go b/pkg/server/middleware/openapi/schema.go → pkg/openapi/helpers.go
diff --git a/pkg/server/middleware/cors/cors.go b/pkg/server/middleware/cors/cors.go
@@ -24,8 +24,8 @@ import (
 
 	"github.com/spf13/pflag"
 
+	"github.com/unikorn-cloud/core/pkg/openapi"
 	"github.com/unikorn-cloud/core/pkg/server/errors"
-	"github.com/unikorn-cloud/core/pkg/server/middleware/openapi"
 	"github.com/unikorn-cloud/core/pkg/util"
 )
 

diff --git a/pkg/server/middleware/openapi/interfaces.go b/pkg/server/middleware/openapi/interfaces.go