auth

Documentation

Index

• func ExtractEmail(token string) (email string, verified bool, err error)
• func ExtractExpiry(token string) (time.Time, error)
• func ExtractIssuer(token string) (string, error)
• func ExtractIssuerAndSubject(token string) (string, string, error)
• func GetToken(ctx context.Context) string
• func NewFromContext(_ context.Context, requireTransportSecurity bool) credentials.PerRPCCredentials
• func NewFromFile(ctx context.Context, path string, requireTransportSecurity bool) credentials.PerRPCCredentials
• func NewFromToken(_ context.Context, token string, requireTransportSecurity bool) credentials.PerRPCCredentials
• func NormalizeIssuer(issuer string) string
• func WithToken(ctx context.Context, authz string) context.Context
• type Actor
  • func ExtractActor(token string) (*Actor, error)

Functions

func ExtractEmail

func ExtractEmail(token string) (email string, verified bool, err error)

func ExtractExpiry

func ExtractExpiry(token string) (time.Time, error)

func ExtractIssuer

func ExtractIssuer(token string) (string, error)

func ExtractIssuerAndSubject

func ExtractIssuerAndSubject(token string) (string, string, error)

func GetToken

func GetToken(ctx context.Context) string

GetToken fetches the token from the context.

func NewFromContext

func NewFromContext(_ context.Context, requireTransportSecurity bool) credentials.PerRPCCredentials

NewFromContext creates a new credentials.PerRPCCredentials based on a token stored in context. This allows callers to provide a token for each RPC.

func NewFromFile

func NewFromFile(ctx context.Context, path string, requireTransportSecurity bool) credentials.PerRPCCredentials

NewFromFile attempts to create a new credentials.PerRPCCredentials based on the provided file. Returns nil if not found.

func NewFromToken

func NewFromToken(_ context.Context, token string, requireTransportSecurity bool) credentials.PerRPCCredentials

NewFromToken attempts to create a new credentials.PerRPCCredentials based on provided OIDC token.

func NormalizeIssuer

func NormalizeIssuer(issuer string) string

NormalizeIssuer massages an issuer string into a canonical form, such as attaching a scheme when certain "special" vendors omit them.

func WithToken

func WithToken(ctx context.Context, authz string) context.Context

WithToken associates the token with the returned context.

Types

type Actor

type Actor struct {
	Audience string `json:"aud"`
	Issuer   string `json:"iss"`
	Subject  string `json:"sub"`
}

func ExtractActor

func ExtractActor(token string) (*Actor, error)