interceptor.go ×5

Frontier kind: Code frontier

unlabeled · c_50789a1668e1

6 tests · 1982 LOC · 83 files · introduces 0 tests · 17 LOC · 1 file

Introduces — evidence that enters the hierarchy at this concept

Code: 5 ranges17 lines · 1 files
Tests: 0 tests

Contains — complete concept membership

All code (extent): 297 ranges1982 lines · 83 files · Browse complete extent
All tests (intent): 6 testsBrowse complete intent

Neighbourhood graph

The orange circle is the focus. Violet and green circles are every ancestor and descendant, broader and narrower, at any distance; blue squares and pink diamonds are the introduced files and exact introduced tests of every visible concept, not only the focus's. Arrows point from broader to narrower concepts and bridge only concepts omitted from this view. Undirected links show source or test introduction. Concept and file size follows LOC; exact test nodes use test-count units.

Focus concept
Ancestors (broader)
Descendants (narrower)
Introduced files
Introduced tests

Introduced files, introduced tests, and structurally relevant concept specialization

In the embedded map, ordinary wheel input scrolls the page; use the visible controls to zoom and drag to pan. Open the full-screen map for canvas navigation: wheel pans, Ctrl/Command plus wheel zooms, and arrow keys pan when this region is focused. On touch screens, open the full-screen map to pan or pinch. If JavaScript or WebGL is unavailable, use the native relationship evidence on this page.

Native relationship evidence

Every exact file and test below is linked only from the concept that introduces it.

interceptor.go ×5 — Focused concept Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×2 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
Introduced tests:
- go.temporal.io/server/common/authorization/TestAuthorizerInterceptorSuite/TestCrossNamespaceCommand_Unauthorized
interceptor.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
Introduced tests:
- go.temporal.io/server/common/authorization/TestAuthorizerInterceptorSuite/TestMultipleCommands_AuthDeduplication
TestMultipleTargetNamespaces — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestAuthorizerInterceptorSuite/TestMultipleTargetNamespaces
SignalExternalWorkflow — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestAuthorizerInterceptorSuite/TestCrossNamespaceCommands_Authorized/SignalExternalWorkflow
interceptor.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
Introduced tests:
- go.temporal.io/server/common/authorization/TestAuthorizerInterceptorSuite/TestCrossNamespaceCommands_Authorized/StartChildWorkflow
interceptor.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
Introduced tests:
- go.temporal.io/server/common/authorization/TestAuthorizerInterceptorSuite/TestCrossNamespaceCommands_Authorized/CancelExternalWorkflow
interceptor.go ×2 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
authorizer_mock.go ×3 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/authorizer_mock.go
interceptor.go ×3 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×3 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
headers.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/headers/headers.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
authorizer_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/authorizer_mock.go
- go.temporal.io/server/common/authorization/claim_mapper_mock.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×4 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×4 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
headers.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/headers/headers.go
tags.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/tags.go
interceptor.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
interceptor.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/interceptor.go
metrics_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics_mock.go
metrics_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics_mock.go
metrics_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics_mock.go
metrics_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics_mock.go
tags.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/tags.go
metrics_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics_mock.go
setting_gen.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
metrics_mock.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics_mock.go
setting_gen.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
setting_gen.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
noop_moving_window_average.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/aggregate/noop_moving_window_average.go
- go.temporal.io/server/common/persistence/noop_health_signal_aggregator.go
search_attribute.go ×12 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/chasm/v1/message.pb.go
- go.temporal.io/server/api/visibilityservice/v1/request_response.pb.go
- go.temporal.io/server/chasm/library.go
- go.temporal.io/server/chasm/registrable_component.go
- go.temporal.io/server/chasm/search_attribute.go
key.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/service/history/tasks/key.go
headers.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/headers/headers.go
headers.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/headers/headers.go
headers.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/headers/headers.go
noop_impl.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/noop_impl.go
setting_gen.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
priority.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/tasks/priority.go
setting_gen.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
setting_gen.go ×51 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/collection.go
- go.temporal.io/server/common/dynamicconfig/deepcopy.go
- go.temporal.io/server/common/dynamicconfig/gradual_change.go
- go.temporal.io/server/common/dynamicconfig/key.go
- go.temporal.io/server/common/dynamicconfig/registry.go
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
- go.temporal.io/server/common/dynamicconfig/shared_structure.go
- go.temporal.io/server/common/util/wildcard.go
Introduced tests:
- go.temporal.io/server/common/circuitbreaker/TestTSCBWithDynamicSettings
- go.temporal.io/server/common/dynamicconfig/TestDeepCopy_OtherReferenceTypes_Nil
- go.temporal.io/server/service/matching/configs/TestQuotasSuite/TestAPIPrioritiesOrdered
- go.temporal.io/server/service/matching/configs/TestQuotasSuite/TestAPIToPriorityMapping
grpc_resolver.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/membership/grpc_resolver.go
predicates.pb.go ×21 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/enums/v1/predicate.pb.go
- go.temporal.io/server/api/persistence/v1/predicates.go-helpers.pb.go
- go.temporal.io/server/api/persistence/v1/predicates.pb.go
service.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/adminservice/v1/request_response.pb.go
- go.temporal.io/server/api/adminservice/v1/service.pb.go
- go.temporal.io/server/api/cluster/v1/message.pb.go
- go.temporal.io/server/api/common/v1/api_category.pb.go
- go.temporal.io/server/api/common/v1/dlq.pb.go
- go.temporal.io/server/api/health/v1/message.pb.go
- go.temporal.io/server/api/historyservice/v1/request_response.pb.go
- go.temporal.io/server/api/historyservice/v1/service.pb.go
- go.temporal.io/server/api/matchingservice/v1/request_response.pb.go
- go.temporal.io/server/api/matchingservice/v1/service.pb.go
- go.temporal.io/server/api/namespace/v1/message.pb.go
- go.temporal.io/server/api/replication/v1/message.pb.go
- go.temporal.io/server/api/token/v1/message.pb.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/errordetails/v1/message.pb.go
constants.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/searchattribute/sadefs/constants.go
task.pb.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/enums/v1/task.pb.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/history/v1/message.pb.go
- go.temporal.io/server/api/persistence/v1/chasm.pb.go
- go.temporal.io/server/api/persistence/v1/chasm_visibility.pb.go
- go.temporal.io/server/api/persistence/v1/cluster_metadata.pb.go
- go.temporal.io/server/api/persistence/v1/executions.pb.go
- go.temporal.io/server/api/persistence/v1/history_tree.pb.go
- go.temporal.io/server/api/persistence/v1/hsm.pb.go
- go.temporal.io/server/api/persistence/v1/namespaces.pb.go
- go.temporal.io/server/api/persistence/v1/nexus.pb.go
- go.temporal.io/server/api/persistence/v1/predicates.pb.go
- go.temporal.io/server/api/persistence/v1/queue_metadata.pb.go
- go.temporal.io/server/api/persistence/v1/queues.pb.go
- go.temporal.io/server/api/persistence/v1/task_queues.pb.go
- go.temporal.io/server/api/persistence/v1/tasks.pb.go
- go.temporal.io/server/api/persistence/v1/update.pb.go
- go.temporal.io/server/api/persistence/v1/workflow_mutable_state.pb.go
- go.temporal.io/server/api/workflow/v1/message.pb.go
tags.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/tags.go
defs.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/defs.go
defs_base.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/defs_base.go
metrics.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/metrics.go
tags.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/metrics/tags.go
defs.go ×5 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/metrics/v1/message.pb.go
- go.temporal.io/server/common/build/build.go
- go.temporal.io/server/common/metrics/defs.go
- go.temporal.io/server/common/metrics/defs_base.go
- go.temporal.io/server/common/metrics/noop_impl.go
- go.temporal.io/server/common/metrics/option.go
- go.temporal.io/server/common/metrics/registry.go
Introduced tests:
- go.temporal.io/server/common/metrics/TestBaggageBenchSuite/TestMutexMapBaggage
- go.temporal.io/server/common/metrics/TestBaggageBenchSuite/TestSyncMapBaggage
noop_logger.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/log/noop_logger.go
tags.go ×9 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/log/tag/tags.go
- go.temporal.io/server/common/log/tag/zap_tag.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/deployment/v1/message.pb.go
- go.temporal.io/server/api/taskqueue/v1/message.pb.go
cluster.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/enums/v1/cluster.pb.go
- go.temporal.io/server/api/enums/v1/common.pb.go
- go.temporal.io/server/api/enums/v1/dlq.pb.go
- go.temporal.io/server/api/enums/v1/fairness_state.pb.go
- go.temporal.io/server/api/enums/v1/nexus.pb.go
- go.temporal.io/server/api/enums/v1/predicate.pb.go
- go.temporal.io/server/api/enums/v1/replication.pb.go
- go.temporal.io/server/api/enums/v1/task.pb.go
- go.temporal.io/server/api/enums/v1/workflow.pb.go
- go.temporal.io/server/api/enums/v1/workflow_task_type.pb.go
wildcard.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/util/wildcard.go
wildcard.go ×4 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/util/wildcard.go
retrypolicy.go ×3 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/backoff/retrypolicy.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/clock/v1/message.pb.go
payload.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/payload/payload.go
TestOperatorServiceMetadata, TestWorkflowServiceMetadata — Descendant (narrower) Introduced tests:
- go.temporal.io/server/common/api/TestOperatorServiceMetadata
- go.temporal.io/server/common/api/TestWorkflowServiceMetadata

Introduced tests

Every collected test enters the hierarchy at exactly one concept.

No tests are introduced at this concept. Its intent tests are introduced by other concepts.

Introduced code

Every collected source range enters the hierarchy at exactly one concept.

1 file ranked by introduced lines: 17 introduced LOC across 5 ranges. Expand a file to inspect source; the > gutter marks introduced lines.

go.temporal.io/server/common/authorization/interceptor.go 17 introduced LOC · 5 ranges

Open complete file

  363
  
  	// Here we handle authorization for all such commands: SignalExternalWorkflow,
  
  364
  
  	// StartChildWorkflow, and RequestCancelExternalWorkflow targeting a different namespace.
  
  365
  >
  	wftRequest, ok := req.(*workflowservice.RespondWorkflowTaskCompletedRequest)
  
interceptor.go

  366
  >
  	if !ok {
  
  367
  
  		return nil
  
  368
  
  	}
  
  369
  
  370
  
  	// Track namespace+API combinations we've already authorized to avoid duplicate checks
  
  371
  >
  	authorizedNamespaceAPIs := make(map[string]struct{})
  
interceptor.go

  372
  >
  
  373
  >
  	for _, cmd := range wftRequest.GetCommands() {
  
  374
  >
  		var targetNamespace string
  
  375
  >
  		var apiName string
  
  376
  >
  
  377
  >
  		switch cmd.GetCommandType() {
  
  378
  
  		case enumspb.COMMAND_TYPE_SIGNAL_EXTERNAL_WORKFLOW_EXECUTION:
  
  379
  
  			if attr := cmd.GetSignalExternalWorkflowExecutionCommandAttributes(); attr != nil {

  396
  
  397
  
  		// Skip if empty, same as source, or already authorized
  
  398
  >
  		if targetNamespace == "" || targetNamespace == sourceNamespace {
  
interceptor.go

  399
  
  			continue
  
  400
  
  		}
  
  401
  >
  		key := targetNamespace + ":" + apiName
  
interceptor.go

  402
  >
  		if _, ok := authorizedNamespaceAPIs[key]; ok {
  
  403
  
  			continue
  
  404
  
  		}
  
  405
  
  406
  
  		// Authorize access to target namespace for this specific API
  
  407
  >
  		if _, err := a.Authorize(ctx, claims, &CallTarget{
  
interceptor.go

  408
  >
  			APIName:   api.WorkflowServicePrefix + apiName,
  
  409
  >
  			Namespace: targetNamespace,
  
  410
  >
  			Request:   req,
  
  411
  >
  		}); err != nil {
  
  412
  
  			return err
  
  413
  
  		}

interceptor.go ×5

Introduces — evidence that enters the hierarchy at this concept

Contains — complete concept membership

Neighbourhood graph

Introduced tests

Introduced code

Direct hierarchy

Parents

Children