middleware

Documentation

Index

• Constants
• Variables
• func RequireAuthN(next http.Handler, tokenVerifier AccessTokenValidator, ...) http.Handler
• func RequireJWT(next http.Handler, tokenVerifier AccessTokenValidator, audiences ...string) http.Handler
• func RequireSelfOrRole(next http.Handler, peopleStore people.Store, roleMappings oauth2.RoleMappings, ...) http.Handler
• type AccessTokenValidator
  • func NewAccessTokenValidator(keySetProvider keyset.Provider) AccessTokenValidator

Constants

const ErrorAccessDenied = "access_denied"

Variables

var (
	ErrMissingKid          = errors.New("missing key id")
	ErrMatchingKeyNotFound = errors.New("matching key not found")
)

Functions

func RequireAuthN

func RequireAuthN(next http.Handler, tokenVerifier AccessTokenValidator, peopleStore people.Store, audiences ...string) http.Handler

func RequireJWT

func RequireJWT(next http.Handler, tokenVerifier AccessTokenValidator, audiences ...string) http.Handler

func RequireSelfOrRole

func RequireSelfOrRole(next http.Handler, peopleStore people.Store, roleMappings oauth2.RoleMappings, allowedRole string) http.Handler

Types

type AccessTokenValidator

type AccessTokenValidator interface {
	Validate(rawToken string, audiences ...string) (string, error)
}

func NewAccessTokenValidator

func NewAccessTokenValidator(keySetProvider keyset.Provider) AccessTokenValidator