authn

Documentation

Index

• Constants
• Variables
• func AuthMiddleware(a authenticator.Request) func(http.Handler) http.Handler
• func DecodePayloadAsRawJSON(s string) ([]byte, error)
• func ExtractUserID(dat map[string]interface{}) string
• func ParseToken(jwtToken string) (map[string]interface{}, string, int)
• func StringWithCharset(length int, charset string) string
• type CancelableAuthRequest
  • func NewOIDCAuthenticator(config *OIDCConfig) (CancelableAuthRequest, error)
• type OIDCConfig
• type UserInfo
  • func ValidateToken(r *http.Request) (UserInfo, string, int)

Constants

const DECODE_TOKEN_FAILD = "decode token failed"

const MALFORMED_TOKEN = "malformed Token"

const NO_EXP_IN_TOKEN = "no [exp] in oidc token"

const NO_GROUPS_IN_TOKEN = "no [groups] in oidc token"

const PARSING_OIDC_TOKEN = "while parsing oidc token: "

const UNMARSHAL_TOKEN_FAILED = "unmarshal token failed"

Variables

var L2L3OperatiorRoles = []string{"runtimeAdmin", "runtimeOperator"}

Functions

func AuthMiddleware

func AuthMiddleware(a authenticator.Request) func(http.Handler) http.Handler

func DecodePayloadAsRawJSON

func DecodePayloadAsRawJSON(s string) ([]byte, error)

DecodePayloadAsRawJSON extracts the payload and returns the raw JSON.

func ExtractUserID

func ExtractUserID(dat map[string]interface{}) string

func ParseToken

func ParseToken(jwtToken string) (map[string]interface{}, string, int)

func StringWithCharset

func StringWithCharset(length int, charset string) string

Types

type CancelableAuthRequest

type CancelableAuthRequest interface {
	authenticator.Request
	Cancel() //Cancels (stops) the underlying instance
}

Extends authenticator.Request interface with Cancel() function used to stop underlying authenticator instance once it's not needed anymore

func NewOIDCAuthenticator

func NewOIDCAuthenticator(config *OIDCConfig) (CancelableAuthRequest, error)

NewOIDCAuthenticator returns OIDC authenticator wrapped as a CancelableAuthRequest instance. CancelableAuthRequest alows users to cancel the authenticator once it's not used anymore.

type OIDCConfig

type OIDCConfig struct {
	IssuerURL            string
	ClientID             string
	CAFilePath           string
	UsernameClaim        string
	UsernamePrefix       string
	GroupsClaim          string
	GroupsPrefix         string
	SupportedSigningAlgs []string
}

OIDCConfig represents configuration used for JWT request authentication

type UserInfo

type UserInfo struct {
	ID   string
	Role string
	Exp  time.Time
}

func ValidateToken

func ValidateToken(r *http.Request) (UserInfo, string, int)