From 0517a879542f69582a219c49a7821bc9aae9678f Mon Sep 17 00:00:00 2001 From: Michael Desa Date: Wed, 18 Oct 2017 12:45:58 -0400 Subject: [PATCH] Add comment to AuthorizedUser --- server/auth.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/auth.go b/server/auth.go index 4fe66dfbdd..ce02fc6395 100644 --- a/server/auth.go +++ b/server/auth.go @@ -47,6 +47,9 @@ func AuthorizedToken(auth oauth2.Authenticator, logger chronograf.Logger, next h }) } +// AuthorizedUser extracts the user name and provider from context. If the user and provider can be found on the +// context, we look up the user by their name and provider. If the user is found, we verify that the user has at +// at least the role supplied. func AuthorizedUser(store chronograf.UsersStore, useAuth bool, role string, logger chronograf.Logger, next http.HandlerFunc) http.HandlerFunc { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if !useAuth {