Home Explore Help
Sign In
SMusatov
/
memos
mirror of https://github.com/usememos/memos.git
1
0
Fork 0
Files
Tree: 5ec3150e0e
Branches Tags
memos
/
server
/
router
/
api
/
v1
/
acl_config.go

acl_config.go 2.0 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839 
  1. package v1
    2. 

  2. 

  3. var authenticationAllowlistMethods = map[string]bool{
    4. 

  4. 	"/memos.api.v1.WorkspaceService/GetWorkspaceProfile":          true,
    5. 

  5. 	"/memos.api.v1.WorkspaceSettingService/GetWorkspaceSetting":   true,
    6. 

  6. 	"/memos.api.v1.WorkspaceSettingService/ListWorkspaceSettings": true,
    7. 

  7. 	"/memos.api.v1.IdentityProviderService/GetIdentityProvider":   true,
    8. 

  8. 	"/memos.api.v1.IdentityProviderService/ListIdentityProviders": true,
    9. 

  9. 	"/memos.api.v1.AuthService/GetAuthStatus":                     true,
    10. 

  10. 	"/memos.api.v1.AuthService/SignIn":                            true,
    11. 

  11. 	"/memos.api.v1.AuthService/SignInWithSSO":                     true,
    12. 

  12. 	"/memos.api.v1.AuthService/SignOut":                           true,
    13. 

  13. 	"/memos.api.v1.AuthService/SignUp":                            true,
    14. 

  14. 	"/memos.api.v1.UserService/GetUser":                           true,
    15. 

  15. 	"/memos.api.v1.UserService/GetUserAvatarBinary":               true,
    16. 

  16. 	"/memos.api.v1.UserService/ListAllUserStats":                  true,
    17. 

  17. 	"/memos.api.v1.UserService/SearchUsers":                       true,
    18. 

  18. 	"/memos.api.v1.MemoService/GetMemo":                           true,
    19. 

  19. 	"/memos.api.v1.MemoService/GetMemoByUid":                      true,
    20. 

  20. 	"/memos.api.v1.MemoService/ListMemos":                         true,
    21. 

  21. 	"/memos.api.v1.MarkdownService/GetLinkMetadata":               true,
    22. 

  22. 	"/memos.api.v1.ResourceService/GetResourceBinary":             true,
    23. 

  23. 	"/memos.api.v1.ResourceService/GetResourceByUid":              true,
    24. 

  24. }
    25. 

  25. 

  26. // isUnauthorizeAllowedMethod returns whether the method is exempted from authentication.
    27. 

  27. func isUnauthorizeAllowedMethod(fullMethodName string) bool {
    28. 

  28. 	return authenticationAllowlistMethods[fullMethodName]
    29. 

  29. }
    30. 

  30. 

  31. var allowedMethodsOnlyForAdmin = map[string]bool{
    32. 

  32. 	"/memos.api.v1.UserService/CreateUser":                      true,
    33. 

  33. 	"/memos.api.v1.WorkspaceSettingService/SetWorkspaceSetting": true,
    34. 

  34. }
    35. 

  35. 

  36. // isOnlyForAdminAllowedMethod returns true if the method is allowed to be called only by admin.
    37. 

  37. func isOnlyForAdminAllowedMethod(methodName string) bool {
    38. 

  38. 	return allowedMethodsOnlyForAdmin[methodName]
    39. 

  39. }
    40.