downstreamsession

Documentation

Overview

Package downstreamsession provides some shared helpers for creating downstream OIDC sessions.

Index

• func DownstreamLDAPSubject(uid string, ldapURL url.URL) string
• func GetDownstreamIdentityFromUpstreamIDToken(upstreamIDPConfig provider.UpstreamOIDCIdentityProviderI, ...) (string, string, []string, error)
• func GrantScopesIfRequested(authorizeRequester fosite.AuthorizeRequester)
• func MakeDownstreamSession(subject string, username string, groups []string, ...) *psession.PinnipedSession

Functions

func DownstreamLDAPSubject

func DownstreamLDAPSubject(uid string, ldapURL url.URL) string

func GetDownstreamIdentityFromUpstreamIDToken

func GetDownstreamIdentityFromUpstreamIDToken(
	upstreamIDPConfig provider.UpstreamOIDCIdentityProviderI,
	idTokenClaims map[string]interface{},
) (string, string, []string, error)

GetDownstreamIdentityFromUpstreamIDToken returns the mapped subject, username, and group names, in that order.

func GrantScopesIfRequested

func GrantScopesIfRequested(authorizeRequester fosite.AuthorizeRequester)

GrantScopesIfRequested auto-grants the scopes for which we do not require end-user approval, if they were requested.

func MakeDownstreamSession

func MakeDownstreamSession(subject string, username string, groups []string, custom *psession.CustomSessionData) *psession.PinnipedSession

MakeDownstreamSession creates a downstream OIDC session.