mirror of
https://github.com/grafana/grafana.git
synced 2025-02-11 16:15:42 -06:00
72d0c6b428
* add: IsServiceAccount to SignedInUser and IsRealUser * fix: linting error * refactor: add function IsServiceAccountUser() By adding the function IsServiceAccountUser() we use it to identify for ServiceAccounts in the HasUniqueID() since caching is built up on having a uniqueID, see comment: https://github.com/grafana/grafana/pull/58015#discussion_r1011361880
53 lines
2.5 KiB
Go
53 lines
2.5 KiB
Go
package serviceaccounts
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/grafana/grafana/pkg/services/apikey"
|
|
"github.com/grafana/grafana/pkg/services/user"
|
|
)
|
|
|
|
/*
|
|
ServiceAccountService is the service that manages service accounts.
|
|
|
|
Service accounts are used to authenticate API requests. They are not users and
|
|
do not have a password.
|
|
*/
|
|
type Service interface {
|
|
CreateServiceAccount(ctx context.Context, orgID int64, saForm *CreateServiceAccountForm) (*ServiceAccountDTO, error)
|
|
DeleteServiceAccount(ctx context.Context, orgID, serviceAccountID int64) error
|
|
RetrieveServiceAccountIdByName(ctx context.Context, orgID int64, name string) (int64, error)
|
|
}
|
|
|
|
/*
|
|
Store is the database store for service accounts.
|
|
|
|
migration from apikeys to service accounts:
|
|
HideApiKeyTab is used to hide the api key tab in the UI.
|
|
MigrateApiKeysToServiceAccounts migrates all API keys to service accounts.
|
|
MigrateApiKey migrates a single API key to a service account.
|
|
|
|
// only used for interal api calls
|
|
RevertApiKey reverts a single service account to an API key.
|
|
*/
|
|
type Store interface {
|
|
CreateServiceAccount(ctx context.Context, orgID int64, saForm *CreateServiceAccountForm) (*ServiceAccountDTO, error)
|
|
SearchOrgServiceAccounts(ctx context.Context, orgID int64, query string, filter ServiceAccountFilter, page int, limit int,
|
|
signedInUser *user.SignedInUser) (*SearchServiceAccountsResult, error)
|
|
UpdateServiceAccount(ctx context.Context, orgID, serviceAccountID int64,
|
|
saForm *UpdateServiceAccountForm) (*ServiceAccountProfileDTO, error)
|
|
RetrieveServiceAccount(ctx context.Context, orgID, serviceAccountID int64) (*ServiceAccountProfileDTO, error)
|
|
RetrieveServiceAccountIdByName(ctx context.Context, orgID int64, name string) (int64, error)
|
|
DeleteServiceAccount(ctx context.Context, orgID, serviceAccountID int64) error
|
|
GetAPIKeysMigrationStatus(ctx context.Context, orgID int64) (*APIKeysMigrationStatus, error)
|
|
HideApiKeysTab(ctx context.Context, orgID int64) error
|
|
MigrateApiKeysToServiceAccounts(ctx context.Context, orgID int64) error
|
|
MigrateApiKey(ctx context.Context, orgID int64, keyId int64) error
|
|
RevertApiKey(ctx context.Context, saId int64, keyId int64) error
|
|
ListTokens(ctx context.Context, query *GetSATokensQuery) ([]apikey.APIKey, error)
|
|
DeleteServiceAccountToken(ctx context.Context, orgID, serviceAccountID, tokenID int64) error
|
|
RevokeServiceAccountToken(ctx context.Context, orgId, serviceAccountId, tokenId int64) error
|
|
AddServiceAccountToken(ctx context.Context, serviceAccountID int64, cmd *AddServiceAccountTokenCommand) error
|
|
GetUsageMetrics(ctx context.Context) (*Stats, error)
|
|
}
|