src

Documentation

Index

• func CreateConfig() *config.Config
• func GetOidcDiscovery(logger *logging.Logger, httpClient *http.Client, providerUrl *url.URL) (*oidc.OidcDiscovery, error)
• func New(uctx context.Context, next http.Handler, cfg *config.Config, name string) (http.Handler, error)
• type TraefikOidcAuth
  • func (toa *TraefikOidcAuth) EnsureOidcDiscovery() error
  • func (toa *TraefikOidcAuth) GetAbsoluteCallbackURL(req *http.Request) *url.URL
  • func (toa *TraefikOidcAuth) ServeHTTP(rw http.ResponseWriter, req *http.Request)

Functions

func CreateConfig

func CreateConfig() *config.Config

Will be called by traefik

func GetOidcDiscovery

func GetOidcDiscovery(logger *logging.Logger, httpClient *http.Client, providerUrl *url.URL) (*oidc.OidcDiscovery, error)

func New

func New(uctx context.Context, next http.Handler, cfg *config.Config, name string) (http.Handler, error)

Will be called by traefik

Types

type TraefikOidcAuth

type TraefikOidcAuth struct {
	ProviderURL                 *url.URL
	ClientJwtPrivateKey         *rsa.PrivateKey
	CallbackURL                 *url.URL
	Config                      *config.Config
	SessionStorage              session.SessionStorage
	DiscoveryDocument           *oidc.OidcDiscovery
	Jwks                        *oidc.JwksHandler
	Lock                        sync.RWMutex
	BypassAuthenticationRule    *rules.RequestCondition
	RedirectUriWildcardsEnabled bool
	// contains filtered or unexported fields
}

func (*TraefikOidcAuth) EnsureOidcDiscovery

func (toa *TraefikOidcAuth) EnsureOidcDiscovery() error

Make sure we fetch oidc discovery document during first request - avoid race condition Perform lock when changing document - we are in concurrent environment

func (*TraefikOidcAuth) GetAbsoluteCallbackURL

func (toa *TraefikOidcAuth) GetAbsoluteCallbackURL(req *http.Request) *url.URL

func (*TraefikOidcAuth) ServeHTTP

func (toa *TraefikOidcAuth) ServeHTTP(rw http.ResponseWriter, req *http.Request)