authorization

Documentation

Index

• func GetHTTPAuthenticationScheme(r *http.Request) (string, string, error)
• type Authenticator
  • func NewAuthenticator(issuer *jose.JWTIssuer, oauth2 *oauth2.Authenticator, ...) *Authenticator
  • func (a *Authenticator) JWKS() (interface{}, error)
  • func (a *Authenticator) Token(r *http.Request, scope *generated.TokenScope) (*generated.Token, error)

Functions

func GetHTTPAuthenticationScheme

func GetHTTPAuthenticationScheme(r *http.Request) (string, string, error)

GetHTTPAuthenticationScheme grabs the scheme and token from the HTTP Authorization header.

Types

type Authenticator

type Authenticator struct {

	// OAuth2 is the oauth2 deletgating authenticator.
	OAuth2 *oauth2.Authenticator

	// Keystone provides OpenStack authentication.
	Keystone *keystone.Authenticator
	// contains filtered or unexported fields
}

Authenticator provides Keystone authentication functionality.

func NewAuthenticator

func NewAuthenticator(issuer *jose.JWTIssuer, oauth2 *oauth2.Authenticator, keystone *keystone.Authenticator) *Authenticator

NewAuthenticator returns a new authenticator with required fields populated. You must call AddFlags after this.

func (*Authenticator) JWKS

func (a *Authenticator) JWKS() (interface{}, error)

func (*Authenticator) Token

func (a *Authenticator) Token(r *http.Request, scope *generated.TokenScope) (*generated.Token, error)

Token performs token based authentication against Keystone with a scope, and returns a new token. Used to upgrade from unscoped, or to refresh a token.