filter

Documentation

Index

• Constants
• Variables
• func SafeHeader(s string) string
• type Chain
  • func NewChain(opts *Opts, key *passport.KeyProvider, filters ...ChainFilter) *Chain
  • func (c *Chain) NewHandler(h http.Handler) http.Handler
• type ChainFilter
• type Claims
• type OIDCCreateOpts
• type OIDCFilter
  • func NewOIDCFilter(ctx context.Context, baseURL string, issuerURL string, opt *OIDCCreateOpts) (*OIDCFilter, error)
  • func (f *OIDCFilter) AddRoutes(ctx context.Context, r *mux.Router)
  • func (f *OIDCFilter) DoFilter(w http.ResponseWriter, r *http.Request) (*ingress.UserInfo, error)
• type Opts
• type PKIFilter
  • func NewPKIFilter(mode ingress.FilterMode, escapedHeader string, enforcing bool) *PKIFilter
  • func (f *PKIFilter) DoFilter(w http.ResponseWriter, r *http.Request) (*ingress.UserInfo, error)

Constants

const (
	OIDCAccessTokenName = "oidc-access-token"
	OIDCTokenName       = "oidc-token"
	OIDCIDName          = "oidc-id_token"
)

Variables

var HeaderKeyRegex = regexp.MustCompile(`[^\w!#$%&'*+\-.^\x60|~]`)

Functions

func SafeHeader

func SafeHeader(s string) string

Types

type Chain

type Chain struct {
	// contains filtered or unexported fields
}

func NewChain

func NewChain(opts *Opts, key *passport.KeyProvider, filters ...ChainFilter) *Chain

func (*Chain) NewHandler

func (c *Chain) NewHandler(h http.Handler) http.Handler

type ChainFilter

type ChainFilter interface {
	DoFilter(http.ResponseWriter, *http.Request) (*ingress.UserInfo, error)
}

type Claims

type Claims map[string]interface{}

type OIDCCreateOpts

type OIDCCreateOpts struct {
	ClientID       string
	ClientSecret   string
	RedirectURL    string
	UserRedirect   string
	FetchUserInfo  bool
	CookieSameSite string
}

type OIDCFilter

type OIDCFilter struct {
	// contains filtered or unexported fields
}

func NewOIDCFilter

func NewOIDCFilter(ctx context.Context, baseURL string, issuerURL string, opt *OIDCCreateOpts) (*OIDCFilter, error)

func (*OIDCFilter) AddRoutes

func (f *OIDCFilter) AddRoutes(ctx context.Context, r *mux.Router)

func (*OIDCFilter) DoFilter

func (f *OIDCFilter) DoFilter(w http.ResponseWriter, r *http.Request) (*ingress.UserInfo, error)

type Opts

type Opts struct {
	SubjectHeader    string // http header to put the user subject
	SourceHeader     string // http header to indicate what the subject means (e.g. to distinguish oauth2 vs pki)
	VerifyHeader     string // http header to put authenticity signature
	VerifyHashHeader string // http header to put authenticity hash
	// ClaimPrefixHeader is the prefix for http headers
	// containing user claims
	ClaimPrefixHeader string
	Append            bool
}

type PKIFilter

type PKIFilter struct {
	// contains filtered or unexported fields
}

func NewPKIFilter

func NewPKIFilter(mode ingress.FilterMode, escapedHeader string, enforcing bool) *PKIFilter

func (*PKIFilter) DoFilter

func (f *PKIFilter) DoFilter(w http.ResponseWriter, r *http.Request) (*ingress.UserInfo, error)