Method authInfo

pkg/identityserver/entity_access.go:67–350

(ctx context.Context)

}

func (is *IdentityServer) authInfo(ctx context.Context) (info *ttnpb.AuthInfoResponse, err error) {
	if access, ok := ctx.Value(requestAccessKey).(*requestAccess); ok {
		if access.authInfo != nil {
			return access.authInfo, nil
		}
		defer func() {
			if err == nil {
				access.authInfo = info
			}
		}()
	}

	md := rpcmetadata.FromIncomingContext(ctx)
	if md.AuthType == "" {
		return &ttnpb.AuthInfoResponse{}, nil
	}

	if md.AuthType == gatewaytokens.AuthType {
		token, err := gatewaytokens.DecodeFromString(md.AuthValue)
		if err != nil {
			return nil, err
		}
		rights, err := gatewaytokens.Verify(ctx, token, is.config.Gateways.TokenValidity, is.KeyService())
		if err != nil {
			if errors.IsNotFound(err) {
				log.FromContext(ctx).WithField("id", token.KeyId).Warn("Key not found in key vault")
			}
			return nil, err
		}
		return &ttnpb.AuthInfoResponse{
			AccessMethod: &ttnpb.AuthInfoResponse_GatewayToken_{
				GatewayToken: &ttnpb.AuthInfoResponse_GatewayToken{
					Rights:     ttnpb.RightsFrom(rights.Rights...).Implied().GetRights(),
					GatewayIds: token.Payload.GatewayIds,
				},
			},
		}, nil
	}

	if md.AuthType == clusterauth.AuthType {
		if err := clusterauth.Authorized(ctx); err != nil {
			return nil, err
		}
		return &ttnpb.AuthInfoResponse{
			UniversalRights: ttnpb.AllClusterRights.Implied(),
		}, nil
	}
	if strings.ToLower(md.AuthType) != "bearer" {
		return nil, errUnsupportedAuthorization.New()
	}

	token := md.AuthValue
	tokenType, tokenID, tokenKey, err := auth.SplitToken(token)
	if err != nil {
		return nil, err
	}

	var fetch func(ctx context.Context, st store.Store) error