auth

Documentation

Index

• Variables
• func BearerTokenFrom(ctx context.Context) (string, bool)
• func VerifyOpenShiftAccess(namespace, imageRepo, verb, bearerToken string) error
• func VerifyOpenShiftUser(user, bearerToken string) error
• func WithBearerToken(parent context.Context, bearerToken string) context.Context
• type AccessController
  • func (ac *AccessController) Authorized(ctx context.Context, accessRecords ...registryauth.Access) (context.Context, error)

Variables

var (
	ErrTokenRequired          = errors.New("authorization header with basic token required")
	ErrTokenInvalid           = errors.New("failed to decode basic token")
	ErrOpenShiftTokenRequired = errors.New("expected openshift bearer token as password for basic token to registry")
	ErrNamespaceRequired      = errors.New("repository namespace required")
	ErrOpenShiftAccessDenied  = errors.New("openshift access denied")
)

Errors used and exported by this package.

Functions

func BearerTokenFrom

func BearerTokenFrom(ctx context.Context) (string, bool)

func VerifyOpenShiftAccess

func VerifyOpenShiftAccess(namespace, imageRepo, verb, bearerToken string) error

func VerifyOpenShiftUser

func VerifyOpenShiftUser(user, bearerToken string) error

func WithBearerToken

func WithBearerToken(parent context.Context, bearerToken string) context.Context

Types

type AccessController

type AccessController struct {
	// contains filtered or unexported fields
}

func (*AccessController) Authorized

func (ac *AccessController) Authorized(ctx context.Context, accessRecords ...registryauth.Access) (context.Context, error)

Authorized handles checking whether the given request is authorized for actions on resources allowed by openshift.