server

Documentation

Index

• type Config
• type DexRewriteURLRoundTripper
  • func NewDexRewriteURLRoundTripper(dexAddr string, t http.RoundTripper) DexRewriteURLRoundTripper
  • func (s DexRewriteURLRoundTripper) RoundTrip(r *http.Request) (*http.Response, error)
• type Server
  • func NewServer(config Config) (*Server, error)
  • func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request)
• type UserIDOpts

Types

type Config

type Config struct {
	// Dex server address, Optional.
	DexAddress string
	// URL of the OpenID Connect issuer
	IssuerURL string
	// callback url for OpenID Connect Provider response.
	RedirectURL string
	// OAuth2 client ID of this application
	ClientID string
	// OAuth2 client secret of this application
	ClientSecret string
	// Scope specifies optional requested permissions
	Scopes []string
	// UsernameClaim is the JWT field to use as the user's username.
	UsernameClaim string
	// GroupsClaim, if specified, causes the OIDCAuthenticator to try to populate the user's
	// groups with an ID Token field. If the GroupsClaim field is present in an ID Token the value
	// must be a string or list of strings.
	GroupsClaim string
	// backend session store
	Store sessions.Store
	// CORS allowed origins
	AllowedOrigins []string
	// Whether to use AccessTypeOffline or not
	OfflineAccess bool
}

type DexRewriteURLRoundTripper

type DexRewriteURLRoundTripper struct {
	DexURL *url.URL
	T      http.RoundTripper
}

DexRewriteURLRoundTripper is an HTTP RoundTripper to rewrite HTTP requests to the specified dex server address. This is used when requests Dex in same cluster to avoid from api gateway or external load balancer, which is not always permitted in firewalled/air-gapped networks.

func NewDexRewriteURLRoundTripper

func NewDexRewriteURLRoundTripper(dexAddr string, t http.RoundTripper) DexRewriteURLRoundTripper

NewDexRewriteURLRoundTripper creates a new DexRewriteURLRoundTripper

func (DexRewriteURLRoundTripper) RoundTrip

func (s DexRewriteURLRoundTripper) RoundTrip(r *http.Request) (*http.Response, error)

type Server

type Server struct {
	// contains filtered or unexported fields
}

func NewServer

func NewServer(config Config) (*Server, error)

func (*Server) ServeHTTP

func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request)

type UserIDOpts

type UserIDOpts struct {
	Header      string
	TokenHeader string
	Prefix      string
	Claim       string
}