Package com.cloudforge.core.manager.auth

package com.cloudforge.core.manager.auth
  • Class
    Description
    AuthAccount
    A CloudForge Manager user-directory account, as seen through AuthBackend — a typed stand-in for what used to be an ad-hoc Map<String,Object> built by hand in two different shapes (one for local rows, one for Cognito pool users).
    AuthAccountRequest
    Request to create a new account via AuthBackend.createAccount(AuthAccountRequest).
    AuthAccountUpdate
    Partial update for AuthBackend.updateAccount(String, AuthAccountUpdate) — every field is null/unset unless the caller means to change it (no "clear this field" sentinel is needed; every field here is meaningful when present and skipped when absent, matching the semantics of the Map<String,Object> body-based updates this replaced).
    AuthBackend
    CloudForge Manager's Users-page CRUD, abstracted over whichever directory of accounts is currently authoritative — the local H2/Postgres DB, or an AWS Cognito User Pool.
    RequiresAccess
    Marks a CloudForge Manager REST controller method as requiring only that the caller pass Manager's baseline access check — no specific policy and no resolved caller identity beyond that.
    RequiresAdmin
    Marks a CloudForge Manager REST controller method as requiring the caller hold a privileged role (admin/manager) or the operations:run policy — the same bar destructive/high-blast-radius operations have always used, distinct from a single named policy.
    RequiresCaller
    Marks a CloudForge Manager REST controller method as requiring a resolved caller identity, but no specific policy check beyond being authenticated — self-service endpoints where the caller acts on their own account/resources use this (e.g.
    RequiresPolicy
    Marks a CloudForge Manager REST controller method as requiring a resolved caller who is permitted the named policy.
    SessionStore
    Strategy interface for where Manager's own session cookies live — sibling to AuthBackend (local-DB-vs-Cognito for the *user directory*; this is in-memory-vs-Redis for *which session cookies this process currently recognizes*, an orthogonal concern).