Function main

_examples/interceptor/cmd/context_auth/main.go:37–87

()

)

func main() {
	// Start a fake Elasticsearch server that logs incoming auth credentials
	srv := fake.NewServer(
		fake.WithLogFn(func(r *http.Request) {
			username, password, _ := redact.BasicAuth(r)
			slog.Info("server received request",
				slog.String("method", r.Method),
				slog.String("path", r.URL.Path),
				slog.String("username", username),
				slog.String("password", password),
			)
		}),
		fake.WithStatusCode(http.StatusOK),
		fake.WithResponseBody([]byte(`{"cluster_name":"example"}`)),
		fake.WithHeaders(func(h http.Header) {
			h.Set("X-Elastic-Product", "Elasticsearch")
			h.Set("Content-Type", "application/json")
		}),
	)
	defer srv.Close()

	// Create an Elasticsearch client with default credentials and context auth interceptor
	es, err := elasticsearch.New(
		elasticsearch.WithAddresses(srv.URL()),
		elasticsearch.WithBasicAuth("default_user", "default_password"),
		elasticsearch.WithTransportOptions(elastictransport.WithInterceptors(
			ContextAuthInterceptor(),
		)),
	)
	if err != nil {
		panic(err)
	}

	// Request without context override uses default credentials
	fmt.Println(">>> Sending request with default credentials")
	_, _ = es.Info()

	// Request with context override uses the specified credentials
	fmt.Println("\n>>> Sending request with context override (tenant_a)")
	ctx := WithBasicAuth(context.Background(), "tenant_a", "tenant_a_secret")
	_, _ = es.Info(es.Info.WithContext(ctx))

	// Another request with different context credentials
	fmt.Println("\n>>> Sending request with context override (tenant_b)")
	ctx = WithBasicAuth(context.Background(), "tenant_b", "tenant_b_secret")
	_, _ = es.Info(es.Info.WithContext(ctx))

	// Request without context override still uses default credentials
	fmt.Println("\n>>> Sending request with default credentials again")
	_, _ = es.Info()
}

// basicAuthKey is the context key for storing basic auth credentials.
type basicAuthKey struct{}