oauth

Documentation

Index

• func AddToContainer(c *restful.Container, im im.IdentityManagementInterface, ...) error

Functions

func AddToContainer

func AddToContainer(c *restful.Container, im im.IdentityManagementInterface, tokenOperator im.TokenManagementInterface, authenticator im.PasswordAuthenticator, loginRecorder im.LoginRecorder, options *authoptions.AuthenticationOptions) error

ks-apiserver includes a built-in OAuth server. Users obtain OAuth access tokens to authenticate themselves to the API. The OAuth server supports standard authorization code grant and the implicit grant OAuth authorization flows. All requests for OAuth tokens involve a request to <ks-apiserver>/oauth/authorize. Most authentication integrations place an authenticating proxy in front of this endpoint, or configure ks-apiserver to validate credentials against a backing identity provider. Requests to <ks-apiserver>/oauth/authorize can come from user-agents that cannot display interactive login pages, such as the CLI.