File

teal-src/net/server.d.tl @ 12659:c0eea4f6c739

usermanager: Add back temporary is_admin to warn about deprecated API usage Goal: Introduce role-auth with minimal disruption is_admin() is unsafe in a system with per-session permissions, so it has been deprecated. Roll-out approach: 1) First, log a warning when is_admin() is used. It should continue to function normally, backed by the new role API. Nothing is really using per-session authz yet, so there is minimal security concern. The 'strict_deprecate_is_admin' global setting can be set to 'true' to force a hard failure of is_admin() attempts (it will log an error and always return false). 2) In some time (at least 1 week), but possibly longer depending on the number of affected deployments: switch 'strict_deprecate_is_admin' to 'true' by default. It can still be disabled for systems that need it. 3) Further in the future, before the next release, the option will be removed and is_admin() will be permanently disabled.
author Matthew Wild <mwild1@gmail.com>
date Mon, 15 Aug 2022 15:25:07 +0100
parent 12610:e2fdcd386ebb
line wrap: on
line source

local record server
	record LuaSocketTCP
	end
	record LuaSecCTX
	end

	record extra_settings
	end

	record interface
	end
	enum socket_type
		"tcp"
		"tcp6"
		"tcp4"
	end

	record listeners
		onconnect : function (interface)
		ondetach : function (interface)
		onattach : function (interface, string)
		onincoming : function (interface, string, string)
		ondrain : function (interface)
		onreadtimeout : function (interface)
		onstarttls : function (interface)
		onstatus : function (interface, string)
		ondisconnect : function (interface, string)
	end

	get_backend : function () : string

	type port = string | integer
	enum read_mode
		"*a"
		"*l"
	end
	type read_size = read_mode | integer
	addserver : function (string, port, listeners, read_size, LuaSecCTX) : interface
	addclient : function (string, port, listeners, read_size, LuaSecCTX, socket_type, extra_settings) : interface
	record listen_config
		read_size : read_size
		tls_ctx : LuaSecCTX
		tls_direct : boolean
		sni_hosts : { string : LuaSecCTX }
	end
	listen : function (string, port, listeners, listen_config) : interface
	enum quitting
		"quitting"
	end
	loop : function () : quitting
	closeall : function ()
	setquitting : function (boolean | quitting)

	wrapclient : function (LuaSocketTCP, string, port, listeners, read_size, LuaSecCTX, extra_settings) : interface
	wrapserver : function (LuaSocketTCP, string, port, listeners, listen_config) : interface
	watchfd : function (integer | LuaSocketTCP, function (interface), function (interface)) : interface
	link : function ()

	record config
	end
	set_config : function (config)

end

return server