Package com.cloudforge.core.manager.auth

package com.cloudforge.core.manager.auth
  • Class
    Description
    AuthAccount
    A CloudForge Manager user-directory account, as seen through AuthBackend, with one shape for both local rows and Cognito pool users.
    AuthAccountRequest
    Request to create a new account via AuthBackend.createAccount(AuthAccountRequest).
    AuthAccountUpdate
    Partial update for AuthBackend.updateAccount(String, AuthAccountUpdate) — every field is null/unset unless the caller means to change it (no "clear this field" sentinel is needed; every field here is meaningful when present and skipped when absent, matching the semantics of the Map<String,Object> body-based updates this replaced).
    AuthBackend
    CloudForge Manager's Users-page CRUD, abstracted over whichever directory of accounts is currently authoritative — the local H2/Postgres DB, or an AWS Cognito User Pool.
    RequiresAccess
    Marks a CloudForge Manager REST controller method as requiring only that the caller pass Manager's baseline access check — no specific policy and no resolved caller identity beyond that.
    RequiresAdmin
    Marks a CloudForge Manager REST controller method as requiring the caller hold a privileged role (admin/manager) or the operations:run policy — the same bar destructive/high-blast-radius operations have always used, distinct from a single named policy.
    RequiresAnyPolicy
    Marks a CloudForge Manager REST controller method as requiring a resolved caller who is permitted at least one of the named policies.
    RequiresCaller
    Marks a CloudForge Manager REST controller method as requiring a resolved caller identity, but no specific policy check beyond being authenticated — self-service endpoints where the caller acts on their own account/resources use this (e.g.
    RequiresPolicy
    Marks a CloudForge Manager REST controller method as requiring a resolved caller who is permitted the named policy.
    SessionStore
    Strategy interface for where Manager's own session cookies live — sibling to AuthBackend (local-DB-vs-Cognito for the *user directory*; this is in-memory-vs-Redis for *which session cookies this process currently recognizes*, an orthogonal concern).