skymarshal

README

skymarshal

Concourse Skymarshal is responsible for issuing tokens that will be consumed by the atc. They should be statically verifiable and contain all required openid connect claims, as well as a groups claim for verifying concourse team membership.

This library is a thin wrapper around coreos/dex.

Future considerations

We want to investigate the ability to grant personal access tokens. This should just be a matter of exchanging the personal access token for a concourse token which contains all necessary claims.

Documentation

Index

• type Config
• type Server
  • func NewServer(config *Config) (*Server, error)
  • func (self *Server) PublicKey() *rsa.PublicKey

Types

type Config

type Config struct {
	Logger      lager.Logger
	TeamFactory db.TeamFactory
	Flags       skycmd.AuthFlags
	ExternalURL string
	HttpClient  *http.Client
	Postgres    flag.PostgresConfig
}

type Server

type Server struct {
	http.Handler
	*rsa.PrivateKey
}

func NewServer

func NewServer(config *Config) (*Server, error)

func (*Server) PublicKey

func (self *Server) PublicKey() *rsa.PublicKey