security

Documentation

Index

• func AppRBACName(defaultNS string, project string, namespace string, name string) string
• func EnforceToCurrentRoot(currentRoot, requestedPath string) (string, error)
• func IsNamespaceEnabled(namespace string, serverNamespace string, enabledNamespaces []string) bool
• func NamespaceNotPermittedError(namespace string) error
• func UnverifiedHasAudClaim(rawIDToken string) (bool, error)

Functions

func AppRBACName

func AppRBACName(defaultNS string, project string, namespace string, name string) string

AppRBACName constructs name of the app for use in RBAC checks.

func EnforceToCurrentRoot

func EnforceToCurrentRoot(currentRoot, requestedPath string) (string, error)

Ensure that `requestedPath` is on the same directory or any subdirectory of `currentRoot`. Both `currentRoot` and `requestedPath` must be absolute paths. They may contain any number of `./` or `/../` dir changes.

func IsNamespaceEnabled

func IsNamespaceEnabled(namespace string, serverNamespace string, enabledNamespaces []string) bool

func NamespaceNotPermittedError

func NamespaceNotPermittedError(namespace string) error

func UnverifiedHasAudClaim

func UnverifiedHasAudClaim(rawIDToken string) (bool, error)

UnverifiedHasAudClaim returns whether the "aud" claim is present in the given JWT.

This function DOES NOT VERIFY THE TOKEN. You still have to verify the token to confirm that the token holder has not altered the "aud" claim.