authz

Documentation

Index

• Constants
• type Config
  • func ConfigFromYamlFile(filename string) (*Config, error)
  • func (c *Config) Match(headerName, headerValue string) *OIDCProvider
• type HeaderMatch
• type LogoutConfig
• type OIDCProvider
• type Service
  • func NewService(cfg *Config, secretKey string, redisAddrs []string) *Service
  • func (s *Service) Check(ctx context.Context, req *connect.Request[auth.CheckRequest]) (*connect.Response[auth.CheckResponse], error)
  • func (s *Service) Name() string
  • func (s *Service) NewHandler() (string, http.Handler)

Constants

const ServiceName = "envoy-authz"

Types

type Config

type Config struct {
	SessionExpiration string         `yaml:"sessionExpiration"`
	Providers         []OIDCProvider `yaml:"providers"`
}

func ConfigFromYamlFile

func ConfigFromYamlFile(filename string) (*Config, error)

func (*Config) Match

func (c *Config) Match(headerName, headerValue string) *OIDCProvider

type HeaderMatch

type HeaderMatch struct {
	Name   string `yaml:"name"`
	Exact  string `yaml:"exact"`
	Regex  string `yaml:"regex"`
	Prefix string `yaml:"prefix"`
}

type LogoutConfig

type LogoutConfig struct {
	RedirectURI string `yaml:"redirectURI"`
	Path        string `yaml:"path"`
}

type OIDCProvider

type OIDCProvider struct {
	HeaderMatch      HeaderMatch  `yaml:"headerMatch"`
	Logout           LogoutConfig `yaml:"logout"`
	ClientID         string       `yaml:"clientID"`
	CallbackURI      string       `yaml:"callbackURI"`
	ClientSecret     string       `yaml:"clientSecret"`
	CookieNamePrefix string       `yaml:"cookieNamePrefix"`
	PreAuthPolicy    string       `yaml:"preAuthPolicy"`
	PostAuthPolicy   string       `yaml:"postAuthPolicy"`
	IssuerURL        string       `yaml:"issuerURL"`
	Scopes           []string     `yaml:"scopes"`
	SecureCookie     bool         `yaml:"secureCookie"`
	// contains filtered or unexported fields
}

type Service

type Service struct {
	authv3connect.UnimplementedAuthorizationHandler
	// contains filtered or unexported fields
}

func NewService

func NewService(cfg *Config, secretKey string, redisAddrs []string) *Service

func (*Service) Check

func (s *Service) Check(ctx context.Context, req *connect.Request[auth.CheckRequest]) (*connect.Response[auth.CheckResponse], error)

func (*Service) Name

func (s *Service) Name() string

func (*Service) NewHandler

func (s *Service) NewHandler() (string, http.Handler)