sso

Documentation

Index

• Constants
• type Config
  • func (c Config) GetSessionExpiry() time.Duration
• type Interface
  • func New(c Config, secretsIf corev1.SecretInterface, baseHRef string, secure bool) (Interface, error)

Constants

const (
	Prefix = "Bearer v2:"
)

Types

type Config

type Config struct {
	Issuer       string                  `json:"issuer"`
	ClientID     apiv1.SecretKeySelector `json:"clientId"`
	ClientSecret apiv1.SecretKeySelector `json:"clientSecret"`
	RedirectURL  string                  `json:"redirectUrl"`
	RBAC         *rbac.Config            `json:"rbac,omitempty"`
	// additional scopes (on top of "openid")
	Scopes        []string        `json:"scopes,omitempty"`
	SessionExpiry metav1.Duration `json:"sessionExpiry,omitempty"`
}

func (Config) GetSessionExpiry

func (c Config) GetSessionExpiry() time.Duration

type Interface

type Interface interface {
	Authorize(authorization string) (*types.Claims, error)
	HandleRedirect(writer http.ResponseWriter, request *http.Request)
	HandleCallback(writer http.ResponseWriter, request *http.Request)
	IsRBACEnabled() bool
}

var NullSSO Interface = nullService{}

func New

func New(c Config, secretsIf corev1.SecretInterface, baseHRef string, secure bool) (Interface, error)