wagoe.platform.core.http.access — com.wagoe/wagoe-platform 1.2.0

Who may reach a route, and what a refused caller is told.

Every route requires a signed-in user unless its route data carries :public true (BOU-568). A refusal has the shape the user module's require-authenticated interceptor answers with, so a client sees one 401 whichever layer refused it: the one error body of wagoe.platform.core.http.errors (BOU-586). No Content-Type: muuntaja encodes a map body only when none is set (ZZP-120). What needs no HTTP stack lives in wagoe.core.http.access (BOU-930).

admin? clj

(admin? request)

See wagoe.core.http.access/admin?.

correlation-id clj

(correlation-id request fresh)

See wagoe.core.http.access/correlation-id.

error-page-html clj

(error-page-html status message correlation-id)

A bare error page, for an app that renders none of its own.

escape-html clj

(escape-html s)

s safe in HTML text or an attribute.

forbidden-response clj

(forbidden-response message request correlation-id)

See wagoe.core.http.access/forbidden-response.

in-tenant-scope? clj

(in-tenant-scope? request)

See wagoe.core.http.access/in-tenant-scope?.

platform-admin? clj

(platform-admin? user)

See wagoe.core.http.access/platform-admin?.

public? clj

(public? data)

Whether Reitit endpoint data opts out of authentication.

refusal-response clj

(refusal-response status error message correlation-id)

See wagoe.core.http.access/refusal-response.

same-id? clj

(same-id? a b)

See wagoe.core.http.access/same-id?.

tenant-admin? clj

(tenant-admin? request)

See wagoe.core.http.access/tenant-admin?.

unauthorized-response clj

(unauthorized-response message request correlation-id)

401 for an API caller; a web page sends the browser to the login form, which returns it here afterwards.

web-request? clj

(web-request? request)

Whether request is for a page under /web.