Add support for service accounts - RHCLOUD-30358

RedHatInsights · Jan 24, 2024 · b2b7eaa · b2b7eaa
1 parent 8d6b5f2
commit b2b7eaa
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/internal/api/middleware/identityType.go b/internal/api/middleware/identityType.go
@@ -9,6 +9,7 @@ import (
 )
 
 const userType = "user"
+const serviceAccountType = "serviceaccount"
 
 func EnforceIdentityType(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
@@ -20,7 +21,9 @@ func EnforceIdentityType(next http.Handler) http.Handler {
 			return
 		}
 
-		if principalType := strings.ToLower(identity.Identity.Type); principalType != userType {
+		principalType := strings.ToLower(identity.Identity.Type)
+
+		if principalType != userType && principalType != serviceAccountType {
 			http.Error(w, fmt.Sprintf("unauthorized principal type: %s", principalType), 403)
 			return
 		}

diff --git a/internal/api/middleware/identityType_test.go b/internal/api/middleware/identityType_test.go
@@ -35,6 +35,7 @@ var _ = Describe("Identity type middleware", func() {
 		},
 
 		Entry("User", "User", 200, ""),
+		Entry("ServiceAccount", "ServiceAccount", 200, ""),
 		Entry("System", "System", 403, "unauthorized principal type: system\n"),
 		Entry("Random", "salad", 403, "unauthorized principal type: salad\n"),
 	)