Derive provides a convenience function for producing a username and password for a site given the site config.

EnsurePolicy parses the provided policy (in csv format) and adds the named line to the enforcer.

Middleware returns an HTTP middleware that manages authenticated users.

NewAPI constructs a new API definition used to mount the various endpoints for the engine.

NewCasbinAdapter returns an Adapter that can be used by the casbin system to assess policy.

AdminPermission grants the user admin access to the system.

DeletePermission grants the user delete access to the system.

ReadPermission grants a user read access to the system.

SystemPermission is used to grant the user access to the GET /api/v1/credentials/{kind}/{name} endpoints, thus allowing them to administer user accounts within the system.

UpdatePermission grants the user permission to update the system.

WritePermission grants the user write access to a system.

DefaultPolicy defines the default policy used by the system.go:embed casbin_default_policy.csv.

Model defines the policy model definition used by the engine.go:embed casbin_model.conf.

PermissionValues defines an array of permissions within the system.

Adapter provides an implementation of a persist.Adapter that's backed by a badger's v3 implementation.

API encapsulates the requirements of operating the API.

Credentials defines derived credentials.

Service defines the various metadata of a service that is managed within varys.

Store provides common CRUD operations on top of badgerdb.

Templates define a set of templates used for generating usernames and passwords.

User represents a user within varys.

Permission defines a base permission applied to the system.