internaloauth

Documentation

Index

• func NewTokenAuthenticator(tokens oauthclient.OAuthAccessTokenInterface, users userclient.UserInterface, ...) kauthenticator.Token
• type NoopGroupMapper
  • func (n NoopGroupMapper) GroupsFor(username string) ([]*userapi.Group, error)
• type OAuthTokenValidator
  • func NewExpirationValidator() OAuthTokenValidator
  • func NewUIDValidator() OAuthTokenValidator
• type OAuthTokenValidatorFunc
  • func (f OAuthTokenValidatorFunc) Validate(token *oauth.OAuthAccessToken, user *userapi.User) error
• type OAuthTokenValidators
  • func (v OAuthTokenValidators) Validate(token *oauth.OAuthAccessToken, user *userapi.User) error
• type TimeoutValidator
  • func NewTimeoutValidator(tokens oauthclient.OAuthAccessTokenInterface, ...) *TimeoutValidator
  • func (a *TimeoutValidator) Run(stopCh <-chan struct{})
  • func (a *TimeoutValidator) Validate(token *oauth.OAuthAccessToken, _ *userv1.User) error
• type UserToGroupMapper

Functions

func NewTokenAuthenticator

func NewTokenAuthenticator(tokens oauthclient.OAuthAccessTokenInterface, users userclient.UserInterface, groupMapper UserToGroupMapper, validators ...OAuthTokenValidator) kauthenticator.Token

Types

type NoopGroupMapper

type NoopGroupMapper struct{}

func (NoopGroupMapper) GroupsFor

func (n NoopGroupMapper) GroupsFor(username string) ([]*userapi.Group, error)

type OAuthTokenValidator

type OAuthTokenValidator interface {
	Validate(token *oauth.OAuthAccessToken, user *userapi.User) error
}

func NewExpirationValidator

func NewExpirationValidator() OAuthTokenValidator

func NewUIDValidator

func NewUIDValidator() OAuthTokenValidator

type OAuthTokenValidatorFunc

type OAuthTokenValidatorFunc func(token *oauth.OAuthAccessToken, user *userapi.User) error

func (OAuthTokenValidatorFunc) Validate

func (f OAuthTokenValidatorFunc) Validate(token *oauth.OAuthAccessToken, user *userapi.User) error

type OAuthTokenValidators

type OAuthTokenValidators []OAuthTokenValidator

func (OAuthTokenValidators) Validate

func (v OAuthTokenValidators) Validate(token *oauth.OAuthAccessToken, user *userapi.User) error

type TimeoutValidator

type TimeoutValidator struct {
	// contains filtered or unexported fields
}

func NewTimeoutValidator

func NewTimeoutValidator(tokens oauthclient.OAuthAccessTokenInterface, oauthClients oauthclientlister.OAuthClientLister, defaultTimeout int32, minValidTimeout int32) *TimeoutValidator

func (*TimeoutValidator) Run

func (a *TimeoutValidator) Run(stopCh <-chan struct{})

func (*TimeoutValidator) Validate

func (a *TimeoutValidator) Validate(token *oauth.OAuthAccessToken, _ *userv1.User) error

Validate is called with a token when it is seen by an authenticator it touches only the tokenChannel so it is safe to call from other threads

type UserToGroupMapper

type UserToGroupMapper interface {
	GroupsFor(username string) ([]*userapi.Group, error)
}