zoneingress

Documentation

Index

• Constants
• Variables
• type Identity
• type Token
• type TokenIssuer
  • func NewTokenIssuer(issuer tokens.Issuer) TokenIssuer
• type Validator
  • func NewValidator(validator core_tokens.Validator) Validator

Constants

const ZoneIngressSigningKeyPrefix = "zone-ingress-token-signing-key"

Variables

var ZoneIngressTokenRevocationsGlobalSecretKey = core_model.ResourceKey{
	Name: "zone-ingress-token-revocations",
	Mesh: core_model.NoMesh,
}

Types

type Identity

type Identity struct {
	Zone string
}

type Token

type Token = string

type TokenIssuer

type TokenIssuer interface {
	Generate(ctx context.Context, identity Identity, validFor time.Duration) (tokens.Token, error)
}

TokenIssuer issues Zone Ingress Tokens used then for proving identity of the zone ingresses. Issued token can be bound by zone name. See pkg/sds/auth/universal/authenticator.go to check algorithm for authentication

func NewTokenIssuer

func NewTokenIssuer(issuer tokens.Issuer) TokenIssuer

type Validator

type Validator interface {
	Validate(ctx context.Context, token Token) (Identity, error)
}

func NewValidator

func NewValidator(validator core_tokens.Validator) Validator