token

Documentation

Index

• func GetEmail(ctx context.Context) string
• func MockMiddleware() func(next http.Handler) http.Handler
• func WithEmail(ctx context.Context, email string) context.Context
• type Config
  • func (c Config) Validate() error
• type KeySetProvider
  • func NewKSP(ctx context.Context, jwksURL string) (*KeySetProvider, error)
  • func (ksp *KeySetProvider) KeySetFrom(tok jwt.Token) (jwk.Set, error)
• type Parser
• type User
• type Validator
  • func Middleware(h Parser) Validator

Functions

func GetEmail

func GetEmail(ctx context.Context) string

func MockMiddleware

func MockMiddleware() func(next http.Handler) http.Handler

func WithEmail

func WithEmail(ctx context.Context, email string) context.Context

Types

type Config

type Config struct {
	ClientID       string
	Issuer         string
	Endpoint       string
	AllowedDomains []string
}

func (Config) Validate

func (c Config) Validate() error

type KeySetProvider

type KeySetProvider struct {
	// contains filtered or unexported fields
}

func NewKSP

func NewKSP(ctx context.Context, jwksURL string) (*KeySetProvider, error)

func (*KeySetProvider) KeySetFrom

func (ksp *KeySetProvider) KeySetFrom(tok jwt.Token) (jwk.Set, error)

KeySetFrom ignores the provided token and fetches the JWKS from the configured endpoint. This makes sense as we have one handler per issuer.

type Parser

type Parser interface {
	ParseString(string) (*User, error)
	ParseHeader(http.Header, string) (*User, error)
}

type User

type User struct {
	ID     string
	Email  string
	Groups []string
}

type Validator

type Validator func(http.Handler) http.Handler

func Middleware

func Middleware(h Parser) Validator