middleware/

directory
v1.31.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 12, 2026 License: CC0-1.0

Directories

Path Synopsis
Package authctx holds the canonical context keys for the verified caller, shared by the sigv4 and sigv4a middleware families (and their iamsts sub-packages) so identity stored by either family is readable through either — and directly through this package, which new code should prefer.
Package authctx holds the canonical context keys for the verified caller, shared by the sigv4 and sigv4a middleware families (and their iamsts sub-packages) so identity stored by either family is readable through either — and directly through this package, which new code should prefer.
internal
awssig
Package awssig holds the algorithm-independent internals shared by the SigV4 (web/middleware/sigv4) and SigV4A (web/middleware/sigv4a) middlewares: canonical-request construction, payload-hash resolution, and the constants both schemes define identically.
Package awssig holds the algorithm-independent internals shared by the SigV4 (web/middleware/sigv4) and SigV4A (web/middleware/sigv4a) middlewares: canonical-request construction, payload-hash resolution, and the constants both schemes define identically.
Package sigv4 verifies incoming HTTP requests that were signed with AWS Signature Version 4 (the AWS4-HMAC-SHA256 scheme).
Package sigv4 verifies incoming HTTP requests that were signed with AWS Signature Version 4 (the AWS4-HMAC-SHA256 scheme).
iamsts
Package iamsts authenticates HTTP requests signed with AWS Signature Version 4 by verifying them locally against a cached derived signing key fetched from IAM's SigningKeyService.
Package iamsts authenticates HTTP requests signed with AWS Signature Version 4 by verifying them locally against a cached derived signing key fetched from IAM's SigningKeyService.
Package sigv4a signs and verifies HTTP requests with AWS Signature Version 4A (the AWS4-ECDSA-P256-SHA256 scheme): the same canonical-request construction as classic SigV4 (shared via web/middleware/internal/awssig), but signed with an ECDSA P-256 key derived deterministically from the credential instead of an HMAC key.
Package sigv4a signs and verifies HTTP requests with AWS Signature Version 4A (the AWS4-ECDSA-P256-SHA256 scheme): the same canonical-request construction as classic SigV4 (shared via web/middleware/internal/awssig), but signed with an ECDSA P-256 key derived deterministically from the credential instead of an HMAC key.
iamsts
Package iamsts authenticates HTTP requests signed with AWS Signature Version 4A by verifying them locally against a cached ECDSA public key fetched from IAM's key service.
Package iamsts authenticates HTTP requests signed with AWS Signature Version 4A by verifying them locally against a cached ECDSA public key fetched from IAM's key service.
sigv4aclient
Package sigv4aclient provides an http.RoundTripper that signs outgoing requests with AWS Signature Version 4A. It is the SigV4A counterpart to web/middleware/sigv4/sigv4client (which signs classic SigV4 for real AWS services): use this package for within.website services verified by web/middleware/sigv4a.
Package sigv4aclient provides an http.RoundTripper that signs outgoing requests with AWS Signature Version 4A. It is the SigV4A counterpart to web/middleware/sigv4/sigv4client (which signs classic SigV4 for real AWS services): use this package for within.website services verified by web/middleware/sigv4a.
Package sigv4any authenticates HTTP requests signed with either classic AWS Signature Version 4 (web/middleware/sigv4) or Signature Version 4A (web/middleware/sigv4a), dispatching per request on the Authorization header's algorithm token.
Package sigv4any authenticates HTTP requests signed with either classic AWS Signature Version 4 (web/middleware/sigv4) or Signature Version 4A (web/middleware/sigv4a), dispatching per request on the Authorization header's algorithm token.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL