registry

Documentation

Index

• func NewExpirationValidator() authenticator.OAuthTokenValidator
• func NewTokenAuthenticator(tokens oauthclient.OAuthAccessTokenInterface, ...) kauthenticator.Token
• func NewUIDValidator() authenticator.OAuthTokenValidator
• type ClientAuthorizationGrantChecker
  • func NewClientAuthorizationGrantChecker(client oauthclient.OAuthClientAuthorizationInterface) *ClientAuthorizationGrantChecker
  • func (c *ClientAuthorizationGrantChecker) HasAuthorizedClient(user kuser.Info, grant *api.Grant) (approved bool, err error)
• type TimeoutValidator
  • func NewTimeoutValidator(tokens oauthclient.OAuthAccessTokenInterface, ...) *TimeoutValidator
  • func (a *TimeoutValidator) Run(stopCh <-chan struct{})
  • func (a *TimeoutValidator) Validate(token *oauth.OAuthAccessToken, _ *user.User) error
• type UserConversion
  • func NewUserConversion() *UserConversion
  • func (s *UserConversion) ConvertFromAccessToken(token *oapi.OAuthAccessToken) (interface{}, error)
  • func (s *UserConversion) ConvertFromAuthorizeToken(token *oapi.OAuthAuthorizeToken) (interface{}, error)
  • func (s *UserConversion) ConvertToAccessToken(user interface{}, token *oapi.OAuthAccessToken) error
  • func (s *UserConversion) ConvertToAuthorizeToken(user interface{}, token *oapi.OAuthAuthorizeToken) error

Functions

func NewExpirationValidator

func NewExpirationValidator() authenticator.OAuthTokenValidator

func NewTokenAuthenticator

func NewTokenAuthenticator(tokens oauthclient.OAuthAccessTokenInterface, users userclient.UserResourceInterface, groupMapper identitymapper.UserToGroupMapper, validators ...authenticator.OAuthTokenValidator) kauthenticator.Token

func NewUIDValidator

func NewUIDValidator() authenticator.OAuthTokenValidator

Types

type ClientAuthorizationGrantChecker

type ClientAuthorizationGrantChecker struct {
	// contains filtered or unexported fields
}

func NewClientAuthorizationGrantChecker

func NewClientAuthorizationGrantChecker(client oauthclient.OAuthClientAuthorizationInterface) *ClientAuthorizationGrantChecker

func (*ClientAuthorizationGrantChecker) HasAuthorizedClient

func (c *ClientAuthorizationGrantChecker) HasAuthorizedClient(user kuser.Info, grant *api.Grant) (approved bool, err error)

type TimeoutValidator

type TimeoutValidator struct {
	// contains filtered or unexported fields
}

func NewTimeoutValidator

func NewTimeoutValidator(tokens oauthclient.OAuthAccessTokenInterface, oauthClients oauthclientlister.OAuthClientLister, defaultTimeout int32, minValidTimeout int32) *TimeoutValidator

func (*TimeoutValidator) Run

func (a *TimeoutValidator) Run(stopCh <-chan struct{})

func (*TimeoutValidator) Validate

func (a *TimeoutValidator) Validate(token *oauth.OAuthAccessToken, _ *user.User) error

Validate is called with a token when it is seen by an authenticator it touches only the tokenChannel so it is safe to call from other threads

type UserConversion

type UserConversion struct{}

func NewUserConversion

func NewUserConversion() *UserConversion

NewUserConversion creates an object that can convert the user.Info object to and from an oauth access/authorize token object.

func (*UserConversion) ConvertFromAccessToken

func (s *UserConversion) ConvertFromAccessToken(token *oapi.OAuthAccessToken) (interface{}, error)

func (*UserConversion) ConvertFromAuthorizeToken

func (s *UserConversion) ConvertFromAuthorizeToken(token *oapi.OAuthAuthorizeToken) (interface{}, error)

func (*UserConversion) ConvertToAccessToken

func (s *UserConversion) ConvertToAccessToken(user interface{}, token *oapi.OAuthAccessToken) error

func (*UserConversion) ConvertToAuthorizeToken

func (s *UserConversion) ConvertToAuthorizeToken(user interface{}, token *oapi.OAuthAuthorizeToken) error