robotaccount

Documentation

Index

• Constants
• Variables
• type Builder
  • func NewBuilder(opts ...NewOpt) (*Builder, error)
  • func (ra *Builder) GenerateJWT(backendType, secretID, audience string, role Role) (string, error)
• type Claims
  • func (c *Claims) CheckRole(r Role) error
  • func (c *Claims) Valid() error
• type NewOpt
  • func WithExpiration(d time.Duration) NewOpt
  • func WithIssuer(issuer string) NewOpt
  • func WithPrivateKey(path string) NewOpt
• type Role

Constants

const JWTAudience = "artifact-cas.chainloop"

Variables

var SigningMethod = jwt.SigningMethodES512

Types

type Builder

type Builder struct {
	// contains filtered or unexported fields
}

func NewBuilder

func NewBuilder(opts ...NewOpt) (*Builder, error)

func (*Builder) GenerateJWT

func (ra *Builder) GenerateJWT(backendType, secretID, audience string, role Role) (string, error)

type Claims

type Claims struct {
	jwt.RegisteredClaims
	Role           Role   `json:"role"`      // either downloader or uploader
	StoredSecretID string `json:"secret-id"` // path to the OCI secret in the vault
	BackendType    string `json:"backend"`   // backend to use, i.e OCI
}

func (*Claims) CheckRole

func (c *Claims) CheckRole(r Role) error

func (*Claims) Valid

func (c *Claims) Valid() error

Additional validation checks

type NewOpt

type NewOpt func(b *Builder) error

func WithExpiration

func WithExpiration(d time.Duration) NewOpt

func WithIssuer

func WithIssuer(issuer string) NewOpt

func WithPrivateKey

func WithPrivateKey(path string) NewOpt

type Role

type Role string

const (
	Downloader Role = "downloader"
	Uploader   Role = "uploader"
)