oathkeeper

Documentation

Index

• Constants
• func GetCommonName(subject string) string
• func GetCountry(subject string) string
• func GetLocality(subject string) string
• func GetOrganization(subject string) string
• func GetOrganizationalUnit(subject string) string
• func GetProvince(subject string) string
• type AuthenticationSession
• type CertificateHeaderParser
  • func NewHeaderParser(certHeaderName string, csrSubjectConsts certificates.CSRSubjectConsts) CertificateHeaderParser
• type ValidationHydrator
  • func NewValidationHydrator(tokenService tokens.Service, certHeaderParser CertificateHeaderParser, ...) ValidationHydrator

Constants

const (
	ConnectorTokenHeader string = "Connector-Token"

	ConnectorTokenQueryParam string = "token"

	ClientIdFromTokenHeader       = "Client-Id-From-Token"
	ClientIdFromCertificateHeader = "Client-Id-From-Certificate"
	ClientCertificateHashHeader   = "Client-Certificate-Hash"
)

Functions

func GetCommonName

func GetCommonName(subject string) string

func GetCountry

func GetCountry(subject string) string

func GetLocality

func GetLocality(subject string) string

func GetOrganization

func GetOrganization(subject string) string

func GetOrganizationalUnit

func GetOrganizationalUnit(subject string) string

func GetProvince

func GetProvince(subject string) string

Types

type AuthenticationSession

type AuthenticationSession struct {
	Subject string                 `json:"subject"`
	Extra   map[string]interface{} `json:"extra"`
	Header  http.Header            `json:"header"`
}

type CertificateHeaderParser

type CertificateHeaderParser interface {
	GetCertificateData(r *http.Request) (string, string, bool)
}

func NewHeaderParser

func NewHeaderParser(certHeaderName string, csrSubjectConsts certificates.CSRSubjectConsts) CertificateHeaderParser

type ValidationHydrator

type ValidationHydrator interface {
	ResolveConnectorTokenHeader(w http.ResponseWriter, r *http.Request)
	ResolveIstioCertHeader(w http.ResponseWriter, r *http.Request)
}

func NewValidationHydrator

func NewValidationHydrator(tokenService tokens.Service, certHeaderParser CertificateHeaderParser, revocationList revocation.RevocationListRepository) ValidationHydrator