[Feature] Authorization Service V0

Author: ajanikow

.golangci.yaml

@@ -57,6 +57,10 @@ linters-settings:
         alias: pbAuthenticationV1
       - pkg: github.com/arangodb/kube-arangodb/integrations/authentication/v1
         alias: pbImplAuthenticationV1
+      - pkg: github.com/arangodb/kube-arangodb/integrations/authorization/v0/definition
+        alias: pbAuthorizationV0
+      - pkg: github.com/arangodb/kube-arangodb/integrations/authorization/v0
+        alias: pbImplAuthorizationV0
       - pkg: github.com/arangodb/kube-arangodb/integrations/shared/v1/definition
         alias: pbSharedV1
       - pkg: github.com/arangodb/kube-arangodb/integrations/shared/v1

.protolint.yaml

@@ -0,0 +1,6 @@
+lint:
+  rules:
+    all_default: true
+  rules_option:
+    max_line_length:
+      max_chars: 128

CHANGELOG.md

@@ -4,6 +4,8 @@
 - (Feature) Extract GRPC Server
 - (Feature) Extract Integration Service
 - (Documentation) Move ML Extension example under "CRD overview"
+- (Feature) Authentication Service V1
+- (Feature) Authorization Service V0
 
 ## [1.2.37](https://github.com/arangodb/kube-arangodb/tree/1.2.37) (2024-01-22)
 - (Documentation) Improve documentation rendering for GitHub Pages

Makefile

@@ -347,6 +347,14 @@ linter:
 linter-fix:
 	@$(GOPATH)/bin/golangci-lint run --fix --build-tags "$(GOBUILDTAGS)" $(foreach LINT_EXCLUDE,$(LINT_EXCLUDES),--exclude '$(LINT_EXCLUDE)') ./...
 
+.PHONY: protolint protolint-fix
+
+protolint:
+	@$(GOPATH)/bin/protolint lint $(PROTOSOURCES)
+
+protolint-fix:
+	@$(GOPATH)/bin/protolint lint --fix $(PROTOSOURCES)
+
 .PHONY: vulncheck vulncheck-optional
 vulncheck:
 	@echo ">> Checking for known vulnerabilities (required)"
@@ -726,6 +734,8 @@ tools-min: update-vendor
 	@GOBIN=$(GOPATH)/bin go install github.com/google/addlicense@6d92264d717064f28b32464f0f9693a5b4ef0239
 	@echo ">> Fetching yamlfmt"
 	@GOBIN=$(GOPATH)/bin go install github.com/google/yamlfmt/cmd/[email protected]
+	@echo ">> Fetching protolinter"
+	@GOBIN=$(GOPATH)/bin go install github.com/yoheimuta/protolint/cmd/[email protected]
 
 .PHONY: tools
 tools: tools-min

integrations/authentication/v1/definition/consts.go

@@ -0,0 +1,25 @@
+//
+// DISCLAIMER
+//
+// Copyright 2024 ArangoDB GmbH, Cologne, Germany
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// Copyright holder is ArangoDB GmbH, Cologne, Germany
+//
+
+package definition
+
+const (
+	Name = "authentication.v1"
+)

integrations/authentication/v1/definition/definition.pb.go

@@ -20,11 +20,11 @@
 
 syntax = "proto3";
 
+package authentication;
+
 import "google/protobuf/duration.proto";
 
-option go_package = "github.com/arangodb/kube-arangodb/integrations/v1/definition";
-
-package authentication;
+option go_package = "github.com/arangodb/kube-arangodb/integrations/authentication/v1/definition";
 
 // AuthenticationV1 define ServiceInterface for Authentication V1
 service AuthenticationV1 {
@@ -38,48 +38,48 @@ service AuthenticationV1 {
 // ValidateRequest defines request for AuthenticationV1 Validate Request
 message ValidateRequest {
   // Token specifies a token extracted from the request or used currently
-  string Token = 1;
+  string token = 1;
 }
 
 // ValidateResponse defines response for AuthenticationV1 Validate Request
 message ValidateResponse {
   // IsValid returns information about the validity of the token
-  bool IsValid = 1;
+  bool is_valid = 1;
 
   // Message message for the validation phase
-  string Message = 2;
+  string message = 2;
 
   // Details returns token details if the token is valid
-  optional ValidateResponseDetails Details = 3;
+  optional ValidateResponseDetails details = 3;
 }
 
 // ValidateResponseDetails defines optional response for AuthenticationV1 Validate Request.
 // Returned only if the Token provided in the request is valid.
 message ValidateResponseDetails {
   // Lifetime specify the lifetime of the token
-  google.protobuf.Duration Lifetime = 1;
+  google.protobuf.Duration lifetime = 1;
 
   // User returns the User used in the Token. If a user is not specified, `root` is returned
-  string User = 2;
+  string user = 2;
 }
 
 // CreateTokenRequest defines request for AuthenticationV1 CreateToken Request
 message CreateTokenRequest {
   // Lifetime specifies the lifetime of the token as duration. Defaults to 1 hour
-  optional google.protobuf.Duration Lifetime = 1;
+  optional google.protobuf.Duration lifetime = 1;
 
   // User specify the User for which token should be created. By default, the default user is used (root in most cases)
-  optional string User = 2;
+  optional string user = 2;
 }
 
 // CreateTokenResponse defines response for AuthenticationV1 CreateToken Request
 message CreateTokenResponse {
   // Lifetime specify the lifetime of the token as the duration
-  google.protobuf.Duration Lifetime = 1;
+  google.protobuf.Duration lifetime = 1;
 
   // User returns the User used in the Token
-  string User = 2;
+  string user = 2;
 
   // Token returns the Token as a string
-  string Token = 3;
-}
+  string token = 3;
+}

integrations/authentication/v1/definition/definition.proto

@@ -68,7 +68,7 @@ type implementation struct {
 }
 
 func (i *implementation) Name() string {
-	return "authentication.v1"
+	return pbAuthenticationV1.Name
 }
 
 func (i *implementation) Health() svc.HealthState {