auth

Documentation

Index

• Constants
• func JWTAuthHeaderForGRPC(jwtToken string) metadata.MD
• type AwsIamConfig
  • func (c *AwsIamConfig) ClientAuth() (ClientAuthMethod, bool)
  • func (c *AwsIamConfig) ServerAuth() (ServerAuthMethod, bool)
• type ClientAuthMethod
• type ClientManager
  • func NewClientManagerForAwsIAM(accessKey, accessSecret string) (ClientManager, error)
  • func NewClientManagerForGoogleOpenID(clientId, clientSecret string) (ClientManager, error)
  • func NewClientManagerForTest() (ClientManager, error)
• type GoogleOpenIDConfig
  • func (c *GoogleOpenIDConfig) ClientAuth() (ClientAuthMethod, bool)
  • func (c *GoogleOpenIDConfig) ServerAuth() (ServerAuthMethod, bool)
• type ServerAuthMethod
• type ServerManager
  • func NewServerManagerForAwsIAM(accountId string, allowUsers []string) (ServerManager, error)
  • func NewServerManagerForGoogleOpenID(clientId, clientSecret, hd string, allowEmails []string) (ServerManager, error)
  • func NewServerManagerForTest() (ServerManager, error)

Constants

const (
	// rfc2617 (e.g. Authorization: basic token, Authorization: bearer token)
	AuthorizationHeader = "authorization"
	Basic               = "basic"
	Bearer              = "bearer"
)

const (
	UserCtxName = "user"
)

Functions

func JWTAuthHeaderForGRPC

func JWTAuthHeaderForGRPC(jwtToken string) metadata.MD

JWTAuthHeaderForGRPC returns JWT Auth Header for GRPC.

Types

type AwsIamConfig

type AwsIamConfig struct {
	ClientAccessKey       string
	ClientSecretAccessKey string

	ServerAllowUsers []string // allow users
	ServerAccountId  string   // server allow users
}

func (*AwsIamConfig) ClientAuth

func (c *AwsIamConfig) ClientAuth() (ClientAuthMethod, bool)

ClientAuth is returns ClientAuthMethod for AWS IAM.

func (*AwsIamConfig) ServerAuth

func (c *AwsIamConfig) ServerAuth() (ServerAuthMethod, bool)

ServerAuth returns ServerAuthMethod and bool value(whether exist or not).

type ClientAuthMethod

type ClientAuthMethod func(conn protocol.VPNClient) (jwt string, err error)

type ClientManager

type ClientManager interface {
	ClientAuth() (ClientAuthMethod, bool)
}

func NewClientManagerForAwsIAM

func NewClientManagerForAwsIAM(accessKey, accessSecret string) (ClientManager, error)

NewClientManagerForAwsIAM returns ClientManager implementing awsIam.

func NewClientManagerForGoogleOpenID

func NewClientManagerForGoogleOpenID(clientId, clientSecret string) (ClientManager, error)

NewClientManagerForGoogleOpenID returns ClientManager implementing googleOpenId.

func NewClientManagerForTest

func NewClientManagerForTest() (ClientManager, error)

NewClientManagerForTest returns ClientManager implementing googleOpenId.

type GoogleOpenIDConfig

type GoogleOpenIDConfig struct {
	ClientId     string // google client id
	ClientSecret string // google secret

	HD          string   // gsuite domain (only vpn-server)
	AllowEmails []string // allow emails (only vpn-server)
}

https://developers.google.com/identity/protocols/oauth2/native-app https://developers.google.com/identity/protocols/oauth2/openid-connect

func (*GoogleOpenIDConfig) ClientAuth

func (c *GoogleOpenIDConfig) ClientAuth() (ClientAuthMethod, bool)

ClientAuth is returns ClientAuthMethod for Google Open ID.

func (*GoogleOpenIDConfig) ServerAuth

func (c *GoogleOpenIDConfig) ServerAuth() (ServerAuthMethod, bool)

ServerAuth returns ServerAuthMethod and bool value(whether exist or not).

type ServerAuthMethod

type ServerAuthMethod grpc.UnaryServerInterceptor

type ServerManager

type ServerManager interface {
	ServerAuth() (ServerAuthMethod, bool)
}

func NewServerManagerForAwsIAM

func NewServerManagerForAwsIAM(accountId string, allowUsers []string) (ServerManager, error)

NewServerManagerForAwsIAM returns ServerManager implementing awsIam.

func NewServerManagerForGoogleOpenID

func NewServerManagerForGoogleOpenID(clientId, clientSecret, hd string, allowEmails []string) (ServerManager, error)

NewServerManagerForGoogleOpenID returns ServerManager implementing googleOpenI

func NewServerManagerForTest

func NewServerManagerForTest() (ServerManager, error)

NewServerManagerForTest returns ServerManager implementing googleOpenI