authorize

Documentation

Overview

Package authorize is a pomerium service that is responsible for determining if a given request should be authorized (AuthZ).

Index

• type Authorize
  • func New(cfg *config.Config) (*Authorize, error)
  • func (a *Authorize) Check(ctx context.Context, in *envoy_service_auth_v3.CheckRequest) (out *envoy_service_auth_v3.CheckResponse, err error)
  • func (a *Authorize) OnConfigChange(ctx context.Context, cfg *config.Config)
  • func (a *Authorize) Run(ctx context.Context) error
  • func (a *Authorize) WaitForInitialSync(ctx context.Context) error

Types

type Authorize

type Authorize struct {
	// contains filtered or unexported fields
}

Authorize struct holds

func New

func New(cfg *config.Config) (*Authorize, error)

New validates and creates a new Authorize service from a set of config options.

func (*Authorize) Check

func (a *Authorize) Check(ctx context.Context, in *envoy_service_auth_v3.CheckRequest) (out *envoy_service_auth_v3.CheckResponse, err error)

Check implements the envoy auth server gRPC endpoint.

func (*Authorize) OnConfigChange

func (a *Authorize) OnConfigChange(ctx context.Context, cfg *config.Config)

OnConfigChange updates internal structures based on config.Options

func (*Authorize) Run

func (a *Authorize) Run(ctx context.Context) error

Run runs the authorize service.

func (*Authorize) WaitForInitialSync

func (a *Authorize) WaitForInitialSync(ctx context.Context) error

WaitForInitialSync blocks until the initial sync is complete.