idputil

Documentation

Overview

Package idputil provides utilities for working with identity providers. It's used in the internal code and not exposed to the public API.

Index

• Constants
• Variables
• func GetLoggerFromProvider(ctx context.Context, provider func(ctx context.Context) log.FieldLogger) log.FieldLogger
• func MakeDefaultHTTPClient(reqTimeout time.Duration, ...) *http.Client
• func PrepareLogger(logger log.FieldLogger) log.FieldLogger
• type JWKSResponse
• type OpenIDConfiguration
  • func GetOpenIDConfiguration(ctx context.Context, httpClient *http.Client, targetURL string, ...) (OpenIDConfiguration, error)
• type TokenResponse
• type TrustedIssuerStore
  • func NewTrustedIssuerStore() *TrustedIssuerStore
  • func (s *TrustedIssuerStore) AddTrustedIssuer(issName, issURL string)
  • func (s *TrustedIssuerStore) AddTrustedIssuerURL(issURL string) error
  • func (s *TrustedIssuerStore) GetURLForIssuer(issuer string) (string, bool)
• type TrustedIssuerURLMatcher

Constants

const (
	DefaultHTTPRequestTimeout          = 30 * time.Second
	DefaultHTTPRequestMaxRetryAttempts = 3
)

const GrantTypeJWTBearer = "urn:ietf:params:oauth:grant-type:jwt-bearer" //nolint: gosec // false positive

const JWTTypeAccessToken = "at+jwt"

const JWTTypeAppAccessToken = "application/at+jwt"

const OpenIDConfigurationPath = "/.well-known/openid-configuration"

const TokenTypeBearer = "Bearer"

Variables

var DefaultLogger = log.NewDisabledLogger()

Functions

func GetLoggerFromProvider

func GetLoggerFromProvider(ctx context.Context, provider func(ctx context.Context) log.FieldLogger) log.FieldLogger

func MakeDefaultHTTPClient

func MakeDefaultHTTPClient(
	reqTimeout time.Duration,
	loggerProvider func(ctx context.Context) log.FieldLogger,
	requestIDProvider func(ctx context.Context) string,
	userAgent string,
) *http.Client

func PrepareLogger

func PrepareLogger(logger log.FieldLogger) log.FieldLogger

Types

type JWKSResponse

type JWKSResponse struct {
}

type OpenIDConfiguration

type OpenIDConfiguration struct {
	TokenURL              string `json:"token_endpoint"`
	IntrospectionEndpoint string `json:"introspection_endpoint"`
	JWKSURI               string `json:"jwks_uri"`
}

func GetOpenIDConfiguration

func GetOpenIDConfiguration(
	ctx context.Context,
	httpClient *http.Client,
	targetURL string,
	additionalHeaders map[string]string,
	logger log.FieldLogger,
	promMetrics *metrics.PrometheusMetrics,
) (OpenIDConfiguration, error)

type TokenResponse

type TokenResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
	ExpiresIn   int64  `json:"expires_in"`
}

type TrustedIssuerStore

type TrustedIssuerStore struct {
	// contains filtered or unexported fields
}

func NewTrustedIssuerStore

func NewTrustedIssuerStore() *TrustedIssuerStore

func (*TrustedIssuerStore) AddTrustedIssuer

func (s *TrustedIssuerStore) AddTrustedIssuer(issName, issURL string)

func (*TrustedIssuerStore) AddTrustedIssuerURL

func (s *TrustedIssuerStore) AddTrustedIssuerURL(issURL string) error

func (*TrustedIssuerStore) GetURLForIssuer

func (s *TrustedIssuerStore) GetURLForIssuer(issuer string) (string, bool)

type TrustedIssuerURLMatcher

type TrustedIssuerURLMatcher func(issURL *url.URL) bool