drone/types/check/serviceAccount.go
Johannes Batzill 8c2f900c80 Principals, ServiceAccounts, Tokens and auth.Sessions (#15)
This change introduces the concept of a principal (abstraction of call identity), and adds a new service account type principal. Also adds support for different tokens (session, PAT, SAT, OAuth2) and adds auth.Session which is being used to capture information about the caller and call method.
2022-09-25 23:44:51 -07:00

32 lines
788 B
Go

// Copyright 2021 Harness Inc. All rights reserved.
// Use of this source code is governed by the Polyform Free Trial License
// that can be found in the LICENSE.md file for this repository.
package check
import (
"github.com/harness/gitness/types"
"github.com/harness/gitness/types/enum"
)
var (
ErrServiceAccountParentTypeIsInvalid = &ValidationError{
"Provided parent type is invalid.",
}
)
// ServiceAccount returns true if the ServiceAccount if valid.
func ServiceAccount(sa *types.ServiceAccount) error {
// verify name
if err := Name(sa.Name); err != nil {
return err
}
// verify parentType is valid
if sa.ParentType != enum.ParentResourceTypeRepo && sa.ParentType != enum.ParentResourceTypeSpace {
return ErrServiceAccountParentTypeIsInvalid
}
return nil
}