auth

Aug 20, 2024

Changes in this version

type AuthNConfig

+ PublicClientID string

type OIDCConfiguration

+ PublicClientID string

Aug 12, 2024

Changes in this version

+ const ActionDelete

+ const ActionOther

+ const ActionRead

+ const ActionUnsafe

+ const ActionWrite

Jul 22, 2024

Changes in this version

type AuthNConfig

+ DPoPSkew time.Duration

+ TokenSkew time.Duration

Jul 10, 2024

Changes in this version

+ var ErrPolicyMalformed = errors.New("malformed authz policy")

type Authentication

+ func (a *Authentication) ExtendAuthzDefaultPolicy(policies [][]string) error

type Enforcer

+ func (e *Enforcer) ExtendDefaultPolicy(policies [][]string) error

May 15, 2024

Changes in this version

+ func ContextWithAuthNInfo(ctx context.Context, key jwk.Key, accessToken jwt.Token, raw string) context.Context

May 7, 2024

Changes in this version

+ func GetAccessTokenFromContext(ctx context.Context) jwt.Token

+ func GetRawAccessTokenFromContext(ctx context.Context) string

Apr 26, 2024

Changes in this version

type AuthNConfig

+ EnforceDPoP bool

Apr 23, 2024

Changes in this version

+ const DiscoveryPath

+ func ContextWithJWK(ctx context.Context, key jwk.Key) context.Context

+ func GetJWKFromContext(ctx context.Context) jwk.Key

+ type AuthNConfig struct

+ Audience string

+ CacheRefresh string

+ Issuer string

+ Policy PolicyConfig

+ type Authentication struct

+ func NewAuthenticator(ctx context.Context, cfg Config, d *db.Client) (*Authentication, error)

+ func (a Authentication) MuxHandler(handler http.Handler) http.Handler

+ func (a Authentication) UnaryServerInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, ...) (any, error)

+ type CasbinConfig struct

+ DB *sql.DB

+ type Config struct

+ Enabled bool

+ PublicRoutes []string

+ type Enforcer struct

+ Config CasbinConfig

+ Policy string

+ func NewCasbinEnforcer(c CasbinConfig) (*Enforcer, error)

+ func (e Enforcer) Enforce(token jwt.Token, resource, action string) (bool, error)

+ type OIDCConfiguration struct

+ AuthorizationEndpoint string

+ IDTokenSigningAlgValuesSupported []string

+ Issuer string

+ JwksURI string

+ RequireRequestURIRegistration bool

+ ResponseTypesSupported []string

+ SubjectTypesSupported []string

+ TokenEndpoint string

+ func DiscoverOIDCConfiguration(ctx context.Context, issuer string) (*OIDCConfiguration, error)

+ type PolicyConfig struct

+ Csv string

+ Default string

+ Model string

+ RoleClaim string

+ RoleMap map[string]string