auth

May 12, 2022

Changes in this version

+ const AuthScheme

+ const HeaderAuthorization

Feb 15, 2022

Changes in this version

+ const HeaderAuthNotBefore

+ const HeaderAuthNotBeforeFormat

Dec 22, 2021

Changes in this version

+ const AudienceAPI

+ const AudienceK8sAuth

Dec 21, 2021

Changes in this version

+ const ClusterBootstrapTokenValidity

+ func NewApiToken(claims *jwt.StandardClaims, issuer, userId string, validity time.Duration, ...) *jwt.AuthToken

+ func NewAuthToken(claims *jwt.StandardClaims, issuer, userId string, validity time.Duration) *jwt.AuthToken

+ func NewClusterBootstrapToken(claims *jwt.StandardClaims, issuer, userId string) *jwt.AuthToken

+ func NewKubernetesAuthToken(claims *jwt.StandardClaims, clusterClaim *jwt.ClusterClaim, ...) *jwt.AuthToken

+ type Client struct

+ func NewClient(config *ClientConfig) *Client

+ func (n *Client) Exchange(ctx context.Context, code, state string) (*jwt.StandardClaims, error)

+ func (n *Client) GetAuthCodeURL(redirectUrl string) (string, string, error)

+ func (n *Client) SetupOIDC(ctx context.Context) error

+ type ClientConfig struct

+ ClientId string

+ ClientSecret string

+ IdentityProvider string

+ Nonce string

+ OfflineAsScope bool

+ RedirectURIs []string

+ Scopes []string

+ type Server struct

+ func NewServer(config *ServerConfig, signer jwt.JWTSigner, verifier jwt.JWTVerifier) *Server

+ func (n *Server) Authorize(ctx context.Context, token string, claims interface{}) error

+ func (n *Server) IssueToken(ctx context.Context, upstreamClaims *jwt.StandardClaims, userId string) (string, *jwt.AuthToken, error)

+ func (n *Server) Keys() *jose.JSONWebKeySet

+ type ServerConfig struct

+ TokenValidity time.Duration

+ URL string

Oct 8, 2021

Changes in this version

+ const HeaderAuthEmail

+ const HeaderAuthId

+ const HeaderAuthIssuer

+ const HeaderAuthName

+ const HeaderForwardedClientCert

+ type Config struct

+ ClientId string

+ ClientSecret string

+ IdentityProvider string

+ IdentityProviderName string

+ Nonce string

+ OfflineAsScope bool

+ RedirectURIs []string

+ Scopes []string

+ TokenValidity time.Duration

+ URL string

+ func (conf *Config) String() string

+ type Handler struct

+ func NewHandler(config *Config, signer jwt.JWTSigner, verifier jwt.JWTVerifier) *Handler

+ func (n *Handler) Authorize(ctx context.Context, token string, claims interface{}) error

+ func (n *Handler) Exchange(ctx context.Context, code, state, redirectURL string) (*jwt.StandardClaims, error)

+ func (n *Handler) GetAuthCodeURL(state *api.AuthState, scopes []string) (string, string, error)

+ func (n *Handler) IssueToken(ctx context.Context, upstreamClaims *jwt.StandardClaims, userId string) (string, *jwt.AuthToken, error)

+ func (n *Handler) KeyExpiration() time.Duration

+ func (n *Handler) Keys() *jose.JSONWebKeySet

+ func (n *Handler) SetupOIDC(ctx context.Context) error

+ type OpenIdConfiguration struct

+ Issuer string

+ JwksURL string

+ type State struct

+ Callback string

+ func DecodeState(encoded string) (*State, error)

+ func (state *State) Encode() (string, error)

+ func (state *State) IsValid() bool