Servant.Server.Auth.Token

The module is server side implementation of Servant.API.Auth.Token API and intended to be used as drop in module for user servers or as external micro service.

Use guardAuthToken to check authorisation headers in endpoints of your server:

-- | Read a single customer from DB
customerGet :: CustomerId -- ^ Customer unique id
  -> MToken' '["customer-read"] -- ^ Required permissions for auth token
  -> ServerM Customer -- ^ Customer data
customerGet i token = do
  guardAuthToken token
  guard404 "customer" $ getCustomer i

Implementation

authServer :: AuthHandler m => ServerT AuthAPI m

Implementation of AuthAPI

Server API

class MonadIO m => HasStorage m where

Abstract storage interface. External libraries can implement this in terms of PostgreSQL or acid-state.

Methods

getUserImpl :: UserImplId -> m (Maybe UserImpl)

Getting user from storage

getUserImpl :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> m (Maybe UserImpl)

Getting user from storage

getUserImplByLogin :: Login -> m (Maybe (WithId UserImplId UserImpl))

Getting user from storage by login

getUserImplByLogin :: (m ~ t n, MonadTrans t, HasStorage n) => Login -> m (Maybe (WithId UserImplId UserImpl))

Getting user from storage by login

listUsersPaged :: Page -> PageSize -> m ([WithId UserImplId UserImpl], Word)

Get paged list of users and total count of users

listUsersPaged :: (m ~ t n, MonadTrans t, HasStorage n) => Page -> PageSize -> m ([WithId UserImplId UserImpl], Word)

Get paged list of users and total count of users

getUserImplPermissions :: UserImplId -> m [WithId UserPermId UserPerm]

Get user permissions, ascending by tag

getUserImplPermissions :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> m [WithId UserPermId UserPerm]

Get user permissions, ascending by tag

deleteUserPermissions :: UserImplId -> m ()

Delete user permissions

deleteUserPermissions :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> m ()

Delete user permissions

insertUserPerm :: UserPerm -> m UserPermId

Insertion of new user permission

insertUserPerm :: (m ~ t n, MonadTrans t, HasStorage n) => UserPerm -> m UserPermId

Insertion of new user permission

insertUserImpl :: UserImpl -> m UserImplId

Insertion of new user

insertUserImpl :: (m ~ t n, MonadTrans t, HasStorage n) => UserImpl -> m UserImplId

Insertion of new user

replaceUserImpl :: UserImplId -> UserImpl -> m ()

Replace user with new value

replaceUserImpl :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> UserImpl -> m ()

Replace user with new value

deleteUserImpl :: UserImplId -> m ()

Delete user by id

deleteUserImpl :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> m ()

Delete user by id

hasPerm :: UserImplId -> Permission -> m Bool

Check whether the user has particular permission

hasPerm :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> Permission -> m Bool

Check whether the user has particular permission

getFirstUserByPerm :: Permission -> m (Maybe (WithId UserImplId UserImpl))

Get any user with given permission

getFirstUserByPerm :: (m ~ t n, MonadTrans t, HasStorage n) => Permission -> m (Maybe (WithId UserImplId UserImpl))

Get any user with given permission

selectUserImplGroups :: UserImplId -> m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

Select user groups and sort them by ascending name

selectUserImplGroups :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

Select user groups and sort them by ascending name

clearUserImplGroups :: UserImplId -> m ()

Remove user from all groups

clearUserImplGroups :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> m ()

Remove user from all groups

insertAuthUserGroup :: AuthUserGroup -> m AuthUserGroupId

Add new user group

insertAuthUserGroup :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroup -> m AuthUserGroupId

Add new user group

insertAuthUserGroupUsers :: AuthUserGroupUsers -> m AuthUserGroupUsersId

Add user to given group

insertAuthUserGroupUsers :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupUsers -> m AuthUserGroupUsersId

Add user to given group

insertAuthUserGroupPerms :: AuthUserGroupPerms -> m AuthUserGroupPermsId

Add permission to given group

insertAuthUserGroupPerms :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupPerms -> m AuthUserGroupPermsId

Add permission to given group

getAuthUserGroup :: AuthUserGroupId -> m (Maybe AuthUserGroup)

Find user group by id

getAuthUserGroup :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> m (Maybe AuthUserGroup)

Find user group by id

listAuthUserGroupPermissions :: AuthUserGroupId -> m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

Get list of permissions of given group

listAuthUserGroupPermissions :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

Get list of permissions of given group

listAuthUserGroupUsers :: AuthUserGroupId -> m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

Get list of all users of the group

listAuthUserGroupUsers :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

Get list of all users of the group

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> m ()

Replace record of user group

replaceAuthUserGroup :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> AuthUserGroup -> m ()

Replace record of user group

clearAuthUserGroupUsers :: AuthUserGroupId -> m ()

Remove all users from group

clearAuthUserGroupUsers :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> m ()

Remove all users from group

clearAuthUserGroupPerms :: AuthUserGroupId -> m ()

Remove all permissions from group

clearAuthUserGroupPerms :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> m ()

Remove all permissions from group

deleteAuthUserGroup :: AuthUserGroupId -> m ()

Delete user group from storage

deleteAuthUserGroup :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> m ()

Delete user group from storage

listGroupsPaged :: Page -> PageSize -> m ([WithId AuthUserGroupId AuthUserGroup], Word)

Get paged list of user groups with total count

listGroupsPaged :: (m ~ t n, MonadTrans t, HasStorage n) => Page -> PageSize -> m ([WithId AuthUserGroupId AuthUserGroup], Word)

Get paged list of user groups with total count

setAuthUserGroupName :: AuthUserGroupId -> Text -> m ()

Set group name

setAuthUserGroupName :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> Text -> m ()

Set group name

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> m ()

Set group parent

setAuthUserGroupParent :: (m ~ t n, MonadTrans t, HasStorage n) => AuthUserGroupId -> Maybe AuthUserGroupId -> m ()

Set group parent

insertSingleUseCode :: UserSingleUseCode -> m UserSingleUseCodeId

Add new single use code

insertSingleUseCode :: (m ~ t n, MonadTrans t, HasStorage n) => UserSingleUseCode -> m UserSingleUseCodeId

Add new single use code

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> m ()

Set usage time of the single use code

setSingleUseCodeUsed :: (m ~ t n, MonadTrans t, HasStorage n) => UserSingleUseCodeId -> Maybe UTCTime -> m ()

Set usage time of the single use code

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

Find unused code for the user and expiration time greater than the given time

getUnusedCode :: (m ~ t n, MonadTrans t, HasStorage n) => SingleUseCode -> UserImplId -> UTCTime -> m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

Find unused code for the user and expiration time greater than the given time

invalidatePermanentCodes :: UserImplId -> UTCTime -> m ()

Invalidate all permanent codes for user and set use time for them

invalidatePermanentCodes :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> UTCTime -> m ()

Invalidate all permanent codes for user and set use time for them

selectLastRestoreCode :: UserImplId -> UTCTime -> m (Maybe (WithId UserRestoreId UserRestore))

Select last valid restoration code by the given current time

selectLastRestoreCode :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> UTCTime -> m (Maybe (WithId UserRestoreId UserRestore))

Select last valid restoration code by the given current time

insertUserRestore :: UserRestore -> m UserRestoreId

Insert new restore code

insertUserRestore :: (m ~ t n, MonadTrans t, HasStorage n) => UserRestore -> m UserRestoreId

Insert new restore code

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> m (Maybe (WithId UserRestoreId UserRestore))

Find unexpired by the time restore code

findRestoreCode :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> RestoreCode -> UTCTime -> m (Maybe (WithId UserRestoreId UserRestore))

Find unexpired by the time restore code

replaceRestoreCode :: UserRestoreId -> UserRestore -> m ()

Replace restore code with new value

replaceRestoreCode :: (m ~ t n, MonadTrans t, HasStorage n) => UserRestoreId -> UserRestore -> m ()

Replace restore code with new value

findAuthToken :: UserImplId -> UTCTime -> m (Maybe (WithId AuthTokenId AuthToken))

Find first non-expired by the time token for user

findAuthToken :: (m ~ t n, MonadTrans t, HasStorage n) => UserImplId -> UTCTime -> m (Maybe (WithId AuthTokenId AuthToken))

Find first non-expired by the time token for user

findAuthTokenByValue :: SimpleToken -> m (Maybe (WithId AuthTokenId AuthToken))

Find token by value

findAuthTokenByValue :: (m ~ t n, MonadTrans t, HasStorage n) => SimpleToken -> m (Maybe (WithId AuthTokenId AuthToken))

Find token by value

insertAuthToken :: AuthToken -> m AuthTokenId

Insert new token

insertAuthToken :: (m ~ t n, MonadTrans t, HasStorage n) => AuthToken -> m AuthTokenId

Insert new token

replaceAuthToken :: AuthTokenId -> AuthToken -> m ()

Replace auth token with new value

replaceAuthToken :: (m ~ t n, MonadTrans t, HasStorage n) => AuthTokenId -> AuthToken -> m ()

Replace auth token with new value

Instances

HasStorage m => HasStorage (ExceptT e m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> ExceptT e m (Maybe UserImpl)

getUserImplByLogin :: Login -> ExceptT e m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> ExceptT e m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> ExceptT e m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> ExceptT e m ()

insertUserPerm :: UserPerm -> ExceptT e m UserPermId

insertUserImpl :: UserImpl -> ExceptT e m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> ExceptT e m ()

deleteUserImpl :: UserImplId -> ExceptT e m ()

hasPerm :: UserImplId -> Permission -> ExceptT e m Bool

getFirstUserByPerm :: Permission -> ExceptT e m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> ExceptT e m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> ExceptT e m ()

insertAuthUserGroup :: AuthUserGroup -> ExceptT e m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> ExceptT e m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> ExceptT e m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> ExceptT e m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> ExceptT e m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> ExceptT e m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> ExceptT e m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> ExceptT e m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> ExceptT e m ()

deleteAuthUserGroup :: AuthUserGroupId -> ExceptT e m ()

listGroupsPaged :: Page -> PageSize -> ExceptT e m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> ExceptT e m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> ExceptT e m ()

insertSingleUseCode :: UserSingleUseCode -> ExceptT e m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> ExceptT e m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> ExceptT e m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> ExceptT e m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> ExceptT e m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> ExceptT e m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> ExceptT e m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> ExceptT e m ()

findAuthToken :: UserImplId -> UTCTime -> ExceptT e m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> ExceptT e m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> ExceptT e m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> ExceptT e m ()

(HasStorage m, Monoid w) => HasStorage (WriterT w m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> WriterT w m (Maybe UserImpl)

getUserImplByLogin :: Login -> WriterT w m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> WriterT w m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> WriterT w m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> WriterT w m ()

insertUserPerm :: UserPerm -> WriterT w m UserPermId

insertUserImpl :: UserImpl -> WriterT w m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> WriterT w m ()

deleteUserImpl :: UserImplId -> WriterT w m ()

hasPerm :: UserImplId -> Permission -> WriterT w m Bool

getFirstUserByPerm :: Permission -> WriterT w m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> WriterT w m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> WriterT w m ()

insertAuthUserGroup :: AuthUserGroup -> WriterT w m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> WriterT w m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> WriterT w m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> WriterT w m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> WriterT w m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> WriterT w m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> WriterT w m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> WriterT w m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> WriterT w m ()

deleteAuthUserGroup :: AuthUserGroupId -> WriterT w m ()

listGroupsPaged :: Page -> PageSize -> WriterT w m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> WriterT w m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> WriterT w m ()

insertSingleUseCode :: UserSingleUseCode -> WriterT w m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> WriterT w m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> WriterT w m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> WriterT w m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> WriterT w m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> WriterT w m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> WriterT w m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> WriterT w m ()

findAuthToken :: UserImplId -> UTCTime -> WriterT w m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> WriterT w m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> WriterT w m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> WriterT w m ()

HasStorage m => HasStorage (StateT s m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> StateT s m (Maybe UserImpl)

getUserImplByLogin :: Login -> StateT s m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> StateT s m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> StateT s m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> StateT s m ()

insertUserPerm :: UserPerm -> StateT s m UserPermId

insertUserImpl :: UserImpl -> StateT s m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> StateT s m ()

deleteUserImpl :: UserImplId -> StateT s m ()

hasPerm :: UserImplId -> Permission -> StateT s m Bool

getFirstUserByPerm :: Permission -> StateT s m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> StateT s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> StateT s m ()

insertAuthUserGroup :: AuthUserGroup -> StateT s m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> StateT s m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> StateT s m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> StateT s m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> StateT s m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> StateT s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> StateT s m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> StateT s m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> StateT s m ()

deleteAuthUserGroup :: AuthUserGroupId -> StateT s m ()

listGroupsPaged :: Page -> PageSize -> StateT s m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> StateT s m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> StateT s m ()

insertSingleUseCode :: UserSingleUseCode -> StateT s m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> StateT s m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> StateT s m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> StateT s m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> StateT s m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> StateT s m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> StateT s m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> StateT s m ()

findAuthToken :: UserImplId -> UTCTime -> StateT s m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> StateT s m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> StateT s m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> StateT s m ()

HasStorage m => HasStorage (StateT s m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> StateT s m (Maybe UserImpl)

getUserImplByLogin :: Login -> StateT s m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> StateT s m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> StateT s m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> StateT s m ()

insertUserPerm :: UserPerm -> StateT s m UserPermId

insertUserImpl :: UserImpl -> StateT s m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> StateT s m ()

deleteUserImpl :: UserImplId -> StateT s m ()

hasPerm :: UserImplId -> Permission -> StateT s m Bool

getFirstUserByPerm :: Permission -> StateT s m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> StateT s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> StateT s m ()

insertAuthUserGroup :: AuthUserGroup -> StateT s m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> StateT s m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> StateT s m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> StateT s m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> StateT s m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> StateT s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> StateT s m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> StateT s m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> StateT s m ()

deleteAuthUserGroup :: AuthUserGroupId -> StateT s m ()

listGroupsPaged :: Page -> PageSize -> StateT s m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> StateT s m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> StateT s m ()

insertSingleUseCode :: UserSingleUseCode -> StateT s m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> StateT s m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> StateT s m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> StateT s m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> StateT s m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> StateT s m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> StateT s m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> StateT s m ()

findAuthToken :: UserImplId -> UTCTime -> StateT s m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> StateT s m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> StateT s m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> StateT s m ()

(HasStorage m, Monoid w) => HasStorage (WriterT w m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> WriterT w m (Maybe UserImpl)

getUserImplByLogin :: Login -> WriterT w m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> WriterT w m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> WriterT w m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> WriterT w m ()

insertUserPerm :: UserPerm -> WriterT w m UserPermId

insertUserImpl :: UserImpl -> WriterT w m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> WriterT w m ()

deleteUserImpl :: UserImplId -> WriterT w m ()

hasPerm :: UserImplId -> Permission -> WriterT w m Bool

getFirstUserByPerm :: Permission -> WriterT w m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> WriterT w m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> WriterT w m ()

insertAuthUserGroup :: AuthUserGroup -> WriterT w m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> WriterT w m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> WriterT w m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> WriterT w m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> WriterT w m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> WriterT w m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> WriterT w m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> WriterT w m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> WriterT w m ()

deleteAuthUserGroup :: AuthUserGroupId -> WriterT w m ()

listGroupsPaged :: Page -> PageSize -> WriterT w m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> WriterT w m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> WriterT w m ()

insertSingleUseCode :: UserSingleUseCode -> WriterT w m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> WriterT w m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> WriterT w m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> WriterT w m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> WriterT w m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> WriterT w m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> WriterT w m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> WriterT w m ()

findAuthToken :: UserImplId -> UTCTime -> WriterT w m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> WriterT w m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> WriterT w m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> WriterT w m ()

HasStorage m => HasStorage (ReaderT r m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> ReaderT r m (Maybe UserImpl)

getUserImplByLogin :: Login -> ReaderT r m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> ReaderT r m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> ReaderT r m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> ReaderT r m ()

insertUserPerm :: UserPerm -> ReaderT r m UserPermId

insertUserImpl :: UserImpl -> ReaderT r m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> ReaderT r m ()

deleteUserImpl :: UserImplId -> ReaderT r m ()

hasPerm :: UserImplId -> Permission -> ReaderT r m Bool

getFirstUserByPerm :: Permission -> ReaderT r m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> ReaderT r m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> ReaderT r m ()

insertAuthUserGroup :: AuthUserGroup -> ReaderT r m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> ReaderT r m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> ReaderT r m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> ReaderT r m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> ReaderT r m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> ReaderT r m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> ReaderT r m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> ReaderT r m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> ReaderT r m ()

deleteAuthUserGroup :: AuthUserGroupId -> ReaderT r m ()

listGroupsPaged :: Page -> PageSize -> ReaderT r m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> ReaderT r m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> ReaderT r m ()

insertSingleUseCode :: UserSingleUseCode -> ReaderT r m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> ReaderT r m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> ReaderT r m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> ReaderT r m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> ReaderT r m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> ReaderT r m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> ReaderT r m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> ReaderT r m ()

findAuthToken :: UserImplId -> UTCTime -> ReaderT r m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> ReaderT r m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> ReaderT r m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> ReaderT r m ()

HasStorage m => HasStorage (ContT r m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> ContT r m (Maybe UserImpl)

getUserImplByLogin :: Login -> ContT r m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> ContT r m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> ContT r m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> ContT r m ()

insertUserPerm :: UserPerm -> ContT r m UserPermId

insertUserImpl :: UserImpl -> ContT r m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> ContT r m ()

deleteUserImpl :: UserImplId -> ContT r m ()

hasPerm :: UserImplId -> Permission -> ContT r m Bool

getFirstUserByPerm :: Permission -> ContT r m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> ContT r m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> ContT r m ()

insertAuthUserGroup :: AuthUserGroup -> ContT r m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> ContT r m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> ContT r m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> ContT r m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> ContT r m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> ContT r m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> ContT r m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> ContT r m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> ContT r m ()

deleteAuthUserGroup :: AuthUserGroupId -> ContT r m ()

listGroupsPaged :: Page -> PageSize -> ContT r m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> ContT r m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> ContT r m ()

insertSingleUseCode :: UserSingleUseCode -> ContT r m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> ContT r m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> ContT r m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> ContT r m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> ContT r m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> ContT r m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> ContT r m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> ContT r m ()

findAuthToken :: UserImplId -> UTCTime -> ContT r m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> ContT r m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> ContT r m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> ContT r m ()

(HasStorage m, Monoid w) => HasStorage (RWST r w s m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> RWST r w s m (Maybe UserImpl)

getUserImplByLogin :: Login -> RWST r w s m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> RWST r w s m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> RWST r w s m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> RWST r w s m ()

insertUserPerm :: UserPerm -> RWST r w s m UserPermId

insertUserImpl :: UserImpl -> RWST r w s m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> RWST r w s m ()

deleteUserImpl :: UserImplId -> RWST r w s m ()

hasPerm :: UserImplId -> Permission -> RWST r w s m Bool

getFirstUserByPerm :: Permission -> RWST r w s m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> RWST r w s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> RWST r w s m ()

insertAuthUserGroup :: AuthUserGroup -> RWST r w s m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> RWST r w s m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> RWST r w s m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> RWST r w s m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> RWST r w s m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> RWST r w s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> RWST r w s m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> RWST r w s m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> RWST r w s m ()

deleteAuthUserGroup :: AuthUserGroupId -> RWST r w s m ()

listGroupsPaged :: Page -> PageSize -> RWST r w s m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> RWST r w s m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> RWST r w s m ()

insertSingleUseCode :: UserSingleUseCode -> RWST r w s m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> RWST r w s m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> RWST r w s m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> RWST r w s m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> RWST r w s m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> RWST r w s m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> RWST r w s m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> RWST r w s m ()

findAuthToken :: UserImplId -> UTCTime -> RWST r w s m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> RWST r w s m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> RWST r w s m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> RWST r w s m ()

(HasStorage m, Monoid w) => HasStorage (RWST r w s m)

Defined in Servant.Server.Auth.Token.Model

Methods

getUserImpl :: UserImplId -> RWST r w s m (Maybe UserImpl)

getUserImplByLogin :: Login -> RWST r w s m (Maybe (WithId UserImplId UserImpl))

listUsersPaged :: Page -> PageSize -> RWST r w s m ([WithId UserImplId UserImpl], Word)

getUserImplPermissions :: UserImplId -> RWST r w s m [WithId UserPermId UserPerm]

deleteUserPermissions :: UserImplId -> RWST r w s m ()

insertUserPerm :: UserPerm -> RWST r w s m UserPermId

insertUserImpl :: UserImpl -> RWST r w s m UserImplId

replaceUserImpl :: UserImplId -> UserImpl -> RWST r w s m ()

deleteUserImpl :: UserImplId -> RWST r w s m ()

hasPerm :: UserImplId -> Permission -> RWST r w s m Bool

getFirstUserByPerm :: Permission -> RWST r w s m (Maybe (WithId UserImplId UserImpl))

selectUserImplGroups :: UserImplId -> RWST r w s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

clearUserImplGroups :: UserImplId -> RWST r w s m ()

insertAuthUserGroup :: AuthUserGroup -> RWST r w s m AuthUserGroupId

insertAuthUserGroupUsers :: AuthUserGroupUsers -> RWST r w s m AuthUserGroupUsersId

insertAuthUserGroupPerms :: AuthUserGroupPerms -> RWST r w s m AuthUserGroupPermsId

getAuthUserGroup :: AuthUserGroupId -> RWST r w s m (Maybe AuthUserGroup)

listAuthUserGroupPermissions :: AuthUserGroupId -> RWST r w s m [WithId AuthUserGroupPermsId AuthUserGroupPerms]

listAuthUserGroupUsers :: AuthUserGroupId -> RWST r w s m [WithId AuthUserGroupUsersId AuthUserGroupUsers]

replaceAuthUserGroup :: AuthUserGroupId -> AuthUserGroup -> RWST r w s m ()

clearAuthUserGroupUsers :: AuthUserGroupId -> RWST r w s m ()

clearAuthUserGroupPerms :: AuthUserGroupId -> RWST r w s m ()

deleteAuthUserGroup :: AuthUserGroupId -> RWST r w s m ()

listGroupsPaged :: Page -> PageSize -> RWST r w s m ([WithId AuthUserGroupId AuthUserGroup], Word)

setAuthUserGroupName :: AuthUserGroupId -> Text -> RWST r w s m ()

setAuthUserGroupParent :: AuthUserGroupId -> Maybe AuthUserGroupId -> RWST r w s m ()

insertSingleUseCode :: UserSingleUseCode -> RWST r w s m UserSingleUseCodeId

setSingleUseCodeUsed :: UserSingleUseCodeId -> Maybe UTCTime -> RWST r w s m ()

getUnusedCode :: SingleUseCode -> UserImplId -> UTCTime -> RWST r w s m (Maybe (WithId UserSingleUseCodeId UserSingleUseCode))

invalidatePermanentCodes :: UserImplId -> UTCTime -> RWST r w s m ()

selectLastRestoreCode :: UserImplId -> UTCTime -> RWST r w s m (Maybe (WithId UserRestoreId UserRestore))

insertUserRestore :: UserRestore -> RWST r w s m UserRestoreId

findRestoreCode :: UserImplId -> RestoreCode -> UTCTime -> RWST r w s m (Maybe (WithId UserRestoreId UserRestore))

replaceRestoreCode :: UserRestoreId -> UserRestore -> RWST r w s m ()

findAuthToken :: UserImplId -> UTCTime -> RWST r w s m (Maybe (WithId AuthTokenId AuthToken))

findAuthTokenByValue :: SimpleToken -> RWST r w s m (Maybe (WithId AuthTokenId AuthToken))

insertAuthToken :: AuthToken -> RWST r w s m AuthTokenId

replaceAuthToken :: AuthTokenId -> AuthToken -> RWST r w s m ()

type AuthHandler m = (HasAuthConfig m, MonadError ServantErr m, MonadIO m, HasStorage m)

Context that is needed to run the auth server

Helpers

guardAuthToken :: forall perms m. (PermsList perms, AuthHandler m) => MToken perms -> m ()

If the token is missing or the user of the token doesn't have needed permissions, throw 401 response

guardAuthToken' :: AuthHandler m => Maybe SimpleToken -> [Permission] -> m (WithId AuthTokenId AuthToken)

Same as guardAuthToken but returns record about the token

class WithAuthToken a where

Minimal complete definition

withAuthToken

Methods

withAuthToken :: PermsList perms => a -> MToken perms -> a

Authenticate an entire API rather than each individual endpoint.

As such, for a given HasServer instance api, if you have:

  f :: ServerT api m

then:

  withAuthToken f :: (AuthHandler m) => ServerT (TokenHeader perms :> api) m

(Note that the types don't reflect this, as it isn't possible to guarantee what all possible ServerT instances might be.)

Instances

AuthHandler m => WithAuthToken (m a)

Defined in Servant.Server.Auth.Token

Methods

withAuthToken :: PermsList perms => m a -> MToken perms -> m a

WithAuthToken r => WithAuthToken (a -> r)

Defined in Servant.Server.Auth.Token

Methods

withAuthToken :: PermsList perms => (a -> r) -> MToken perms -> a -> r

(WithAuthToken a, WithAuthToken b) => WithAuthToken (a :<|> b)

Defined in Servant.Server.Auth.Token

Methods

withAuthToken :: PermsList perms => (a :<|> b) -> MToken perms -> a :<|> b

ensureAdmin :: HasStorage m => Int -> Login -> Password -> Email -> m ()

Ensures that DB has at leas one admin, if not, creates a new one with specified info.

authUserByToken :: AuthHandler m => MToken '[] -> m UserImplId

Getting user id by token

Combinators

data AuthPerm (perms :: [Symbol])

An authentication combinator.

TODO maybe move in the servant-auth-api library

Instances

(HasServer api context, PermsList (PlainPerms perms), HasContextEntry context AuthAction) => HasServer (AuthPerm perms :> api :: *) context

Defined in Servant.Server.Auth.Token.Combinator

Associated Types

type ServerT (AuthPerm perms :> api) m :: *

Methods

route :: Proxy (AuthPerm perms :> api) -> Context context -> Delayed env (Server (AuthPerm perms :> api)) -> Router env

hoistServerWithContext :: Proxy (AuthPerm perms :> api) -> Proxy context -> (forall x. m x -> n x) -> ServerT (AuthPerm perms :> api) m -> ServerT (AuthPerm perms :> api) n

type ServerT (AuthPerm perms :> api :: *) m

Defined in Servant.Server.Auth.Token.Combinator

type ServerT (AuthPerm perms :> api :: *) m = ServerT api m

newtype AuthAction

An authentication handler.

Constructors

AuthAction

Fields

• unAuthAction :: Maybe SimpleToken -> [Permission] -> Handler ()

API methods

authSignin

Arguments

:: AuthHandler m

=> Maybe Login

Login query parameter

-> Maybe Password

Password query parameter

-> Maybe Seconds

Expire query parameter, how many seconds the token is valid

-> m (OnlyField "token" SimpleToken)

If everything is OK, return token

Implementation of "signin" method

authSigninGetCode

Arguments

:: AuthHandler m

=> Maybe Login

User login, required

-> m Unit

Authorisation via code of single usage.

Implementation of AuthSigninGetCodeMethod endpoint.

Logic of authorisation via this method is:

• Client sends GET request to AuthSigninGetCodeMethod endpoint
• Server generates single use token and sends it via SMS or email, defined in configuration by singleUseCodeSender field.
• Client sends POST request to AuthSigninPostCodeMethod endpoint
• Server responds with auth token.
• Client uses the token with other requests as authorisation header
• Client can extend lifetime of token by periodically pinging of AuthTouchMethod endpoint
• Client can invalidate token instantly by AuthSignoutMethod
• Client can get info about user with AuthTokenInfoMethod endpoint.

See also: authSigninPostCode

authSigninPostCode

Arguments

:: AuthHandler m

=> Maybe Login

User login, required

-> Maybe SingleUseCode

Received single usage code, required

-> Maybe Seconds

Time interval after which the token expires, Nothing means some default value

-> m (OnlyField "token" SimpleToken)

Authorisation via code of single usage.

Logic of authorisation via this method is:

• Client sends GET request to AuthSigninGetCodeMethod endpoint
• Server generates single use token and sends it via SMS or email, defined in configuration by singleUseCodeSender field.
• Client sends POST request to AuthSigninPostCodeMethod endpoint
• Server responds with auth token.
• Client uses the token with other requests as authorisation header
• Client can extend lifetime of token by periodically pinging of AuthTouchMethod endpoint
• Client can invalidate token instantly by AuthSignoutMethod
• Client can get info about user with AuthTokenInfoMethod endpoint.

See also: authSigninGetCode

authTouch

Arguments

:: AuthHandler m

=> Maybe Seconds

Expire query parameter, how many seconds the token should be valid by now. Nothing means default value defined in server config.

-> MToken '[]

Authorisation header with token

-> m Unit

Implementation of "touch" method

authToken

Arguments

:: AuthHandler m

=> MToken '[]

Authorisation header with token

-> m RespUserInfo

Implementation of "token" method, return info about user binded to the token

authSignout

Arguments

:: AuthHandler m

=> Maybe (Token '[])

Authorisation header with token

-> m Unit

Implementation of "signout" method

authSignup

Arguments

:: AuthHandler m

=> ReqRegister

Registration info

-> MToken' '["auth-register"]

Authorisation header with token

-> m (OnlyField "user" UserId)

Implementation of "signup" method

authUsersInfo

Arguments

:: AuthHandler m

=> Maybe Page

Page num parameter

-> Maybe PageSize

Page size parameter

-> MToken' '["auth-info"]

Authorisation header with token

-> m RespUsersInfo

Implementation of get "users" method

authUserInfo

Arguments

:: AuthHandler m

=> UserId

User id

-> MToken' '["auth-info"]

Authorisation header with token

-> m RespUserInfo

Implementation of get "user" method

authUserPatch

Arguments

:: AuthHandler m

=> UserId

User id

-> PatchUser

JSON with fields for patching

-> MToken' '["auth-update"]

Authorisation header with token

-> m Unit

Implementation of patch "user" method

authUserPut

Arguments

:: AuthHandler m

=> UserId

User id

-> ReqRegister

New user

-> MToken' '["auth-update"]

Authorisation header with token

-> m Unit

Implementation of put "user" method

authUserDelete

Arguments

:: AuthHandler m

=> UserId

User id

-> MToken' '["auth-delete"]

Authorisation header with token

-> m Unit

Implementation of patch "user" method

authRestore

Arguments

:: AuthHandler m

=> UserId

User id

-> Maybe RestoreCode

-> Maybe Password

-> m Unit

authGetSingleUseCodes

Arguments

:: AuthHandler m

=> UserId

Id of user

-> Maybe Word

Number of codes. Nothing means that server generates some default count of codes. And server can define maximum count of codes that user can have at once.

-> MToken' '["auth-single-codes"]

-> m (OnlyField "codes" [SingleUseCode])

Implementation of AuthGetSingleUseCodes endpoint.

authGroupGet

Arguments

:: AuthHandler m

=> UserGroupId

-> MToken' '["auth-info"]

Authorisation header with token

-> m UserGroup

Getting info about user group, requires authInfoPerm for token

authGroupPost

Arguments

:: AuthHandler m

=> UserGroup

-> MToken' '["auth-update"]

Authorisation header with token

-> m (OnlyId UserGroupId)

Inserting new user group, requires authUpdatePerm for token

authGroupPut

Arguments

:: AuthHandler m

=> UserGroupId

-> UserGroup

-> MToken' '["auth-update"]

Authorisation header with token

-> m Unit

Replace info about given user group, requires authUpdatePerm for token

authGroupPatch

Arguments

:: AuthHandler m

=> UserGroupId

-> PatchUserGroup

-> MToken' '["auth-update"]

Authorisation header with token

-> m Unit

Patch info about given user group, requires authUpdatePerm for token

authGroupDelete

Arguments

:: AuthHandler m

=> UserGroupId

-> MToken' '["auth-delete"]

Authorisation header with token

-> m Unit

Delete all info about given user group, requires authDeletePerm for token

authGroupList

Arguments

:: AuthHandler m

=> Maybe Page

-> Maybe PageSize

-> MToken' '["auth-info"]

Authorisation header with token

-> m (PagedList UserGroupId UserGroup)

Get list of user groups, requires authInfoPerm for token

authCheckPermissionsMethod

Arguments

:: AuthHandler m

=> MToken' '["auth-check"]

Authorisation header with token

-> OnlyField "permissions" [Permission]

Body with permissions to check

-> m Bool

True if all permissions are OK, False if some permissions are not set for token and 401 error if the token doesn't have 'auth-check' permission.

Check that the token has required permissions and return False if it doesn't.

authGetUserIdMethod

Arguments

:: AuthHandler m

=> MToken' '["auth-userid"]

Authorisation header with token

-> m (OnlyId UserId)

Get user ID for the owner of the speified token.

authFindUserByLogin

Arguments

:: AuthHandler m

=> Maybe Login

Login, Nothing will cause 400 error.

-> MToken' '["auth-info"]

-> m RespUserInfo

Implementation of AuthFindUserByLogin. Find user by login, throw 404 error if cannot find user by such login.

Low-level API

getAuthToken

Arguments

:: AuthHandler m

=> UserImplId

User for whom we want token

-> Maybe Seconds

Expiration duration, Nothing means default

-> m SimpleToken

Old token (if it doesn't expire) or new one

Helper to get or generate new token for user

hashPassword :: AuthHandler m => Password -> m Text

Generate hash from given password and return it as text. May be useful if you don't like storing unencrypt passwords in config files.

setUserPasswordHash :: AuthHandler m => Text -> UserId -> m ()

Update password hash of user. Can be used to set direct hash for user password when it is taken from config file.

ensureAdminHash :: AuthHandler m => Int -> Login -> Text -> Email -> m ()

Ensures that DB has at least one admin, if not, creates a new one with specified info and direct password hash. May be useful if you don't like storing unencrypt passwords in config files.

signinByHashUnsafe

Arguments

:: AuthHandler m

=> Login

User login

-> Text

Hash of admin password

-> Maybe Seconds

Expire

-> m SimpleToken

If you use password hash in configs, you cannot use them in signin method. This helper allows to get token by password hash and the function is not available for remote call (no endpoint).

Throws 401 if cannot find user or authorisation is failed.

WARNING: Do not expose the function to end user, never!