oioidwsrest

Jun 28, 2022

Changes in this version

type OioIdwsRestHttpProtocolClientConfig

+ ServiceTokenEndpoint string

Jun 27, 2022

Changes in this version

type OioIdwsRestHttpProtocolClientConfig

+ UseKombitVersion bool

Nov 1, 2021

Changes in this version

+ func GetExpiryDate(expiresInSeconds int64) time.Time

type OioIdwsRestHttpProtocolClient

+ Logger *zap.SugaredLogger

+ func (client OioIdwsRestHttpProtocolClient) HandleServiceWithCallback(w http.ResponseWriter, r *http.Request, service securityprotocol.HttpHandler) (int, error, *func())

type OioIdwsRestHttpProtocolServerConfig

+ ClientCertHandler func(req *http.Request) *x509.Certificate

+ HoK bool

+ SessiondataHeaderName string

type OioIdwsRestWsp

+ Logger *zap.SugaredLogger

+ SessiondataHeaderName string

Dec 5, 2019

Changes in this version

+ const HEADER_AUTHORIZATION

+ const HEADER_WWW_AUTHENTICATE

+ const HTTP_HEADER_X_CLAIMS

+ const OIO_IDWS_REST_TOKEN_TYPE_BEARER

+ const OIO_IDWS_REST_TOKEN_TYPE_HOLDER_OF_KEY

+ func AddExtraClaimsToSessionData(sessionId string, sessionData *securityprotocol.SessionData, r *http.Request) (*securityprotocol.SessionData, error)

+ func CreateCaCertPool(trustCertFiles []string) *x509.CertPool

+ func ResponseWithSuccessfulAuth(w http.ResponseWriter, sessionData *securityprotocol.SessionData) (int, error)

+ type AuthenticatedAssertion struct

+ func (a AuthenticatedAssertion) GetAssertion() *types.Assertion

+ type Claim struct

+ Key string

+ Value string

+ type OioIdwsRestAuthResponse struct

+ AccessToken string

+ ExpiresIn int64

+ TokenType string

+ func CreateOioIdwsRestAuthResponseFromHttpReponse(authResponse *http.Response) (*OioIdwsRestAuthResponse, error)

+ type OioIdwsRestAuthenticationInfo struct

+ ExpiresIn int64

+ Token string

+ func CreateAuthenticatonRequestInfoFromReponse(authResponse *http.Response) (*OioIdwsRestAuthenticationInfo, error)

+ type OioIdwsRestClientAuthentification func(http.ResponseWriter, *http.Request, *securityprotocol.SessionData) (*OioIdwsRestAuthenticationInfo, int, error)

+ type OioIdwsRestDecorateRequestWithAuthenticationToken func(tokenData *securityprotocol.TokenData, r *http.Request) error

+ type OioIdwsRestHttpProtocolClient struct

+ func NewOioIdwsRestHttpProtocolClient(config OioIdwsRestHttpProtocolClientConfig, ...) *OioIdwsRestHttpProtocolClient

+ func (client OioIdwsRestHttpProtocolClient) GetEncodedTokenFromSts(decodedToken []byte, claims map[string]string) (string, error)

+ func (client OioIdwsRestHttpProtocolClient) Handle(w http.ResponseWriter, r *http.Request) (int, error)

+ func (client OioIdwsRestHttpProtocolClient) HandleService(w http.ResponseWriter, r *http.Request, service securityprotocol.HttpHandler) (int, error)

+ type OioIdwsRestHttpProtocolClientConfig struct

+ ClientCertFile string

+ ClientKeyFile string

+ Service securityprotocol.HttpHandler

+ ServiceAudience string

+ ServiceEndpoint string

+ SessionDataFetcher securityprotocol.SessionDataFetcher

+ SessionHeaderName string

+ StsUrl string

+ TrustCertFiles []string

+ type OioIdwsRestHttpProtocolServerConfig struct

+ AudienceRestriction string

+ Service securityprotocol.HttpHandler

+ TrustCertFiles []string

+ type OioIdwsRestWsp struct

+ ClientCertHandler func(req *http.Request) *x509.Certificate

+ HoK bool

+ Service securityprotocol.HttpHandler

+ func NewOioIdwsRestWsp(sessionCache securityprotocol.SessionCache, ...) *OioIdwsRestWsp

+ func NewOioIdwsRestWspFromConfig(config *OioIdwsRestHttpProtocolServerConfig, ...) *OioIdwsRestWsp

+ func (a OioIdwsRestWsp) Handle(w http.ResponseWriter, r *http.Request) (int, error)

+ func (a OioIdwsRestWsp) HandleService(w http.ResponseWriter, r *http.Request, service securityprotocol.HttpHandler) (int, error)

+ type TokenAuthenticator struct

+ func NewTokenAuthenticator(audienceRestriction string, certPaths []string, validateSamlConstraints bool) *TokenAuthenticator

+ func (t TokenAuthenticator) Authenticate(clientCert *x509.Certificate, r *http.Request) (string, *AuthenticatedAssertion, error)

+ func (t TokenAuthenticator) ParseAndValidateAuthenticationRequestPayload(body string, clientCert *x509.Certificate) (*AuthenticatedAssertion, error)