authz

Documentation

Index

• Variables
• func IsSSHDeviceVerified(cert *ssh.Certificate) bool
• func IsTLSDeviceVerified(ext *tlsca.DeviceExtensions) bool
• func VerifySSHUser(dt *types.DeviceTrust, cert *ssh.Certificate) error
• func VerifyTLSUser(dt *types.DeviceTrust, identity tlsca.Identity) error

Variables

var ErrTrustedDeviceRequired = &trace.AccessDeniedError{
	Message: "access to resource requires a trusted device",
}

ErrTrustedDeviceRequired is returned when access to a resource requires a trusted device.

Functions

func IsSSHDeviceVerified

func IsSSHDeviceVerified(cert *ssh.Certificate) bool

IsSSHDeviceVerified returns true if cert contains all required device extensions.

func IsTLSDeviceVerified

func IsTLSDeviceVerified(ext *tlsca.DeviceExtensions) bool

IsTLSDeviceVerified returns true if ext contains all required device extensions.

func VerifySSHUser

func VerifySSHUser(dt *types.DeviceTrust, cert *ssh.Certificate) error

VerifySSHUser verifies if the SSH certificate has the required extensions to fulfill the device trust configuration.

func VerifyTLSUser

func VerifyTLSUser(dt *types.DeviceTrust, identity tlsca.Identity) error

VerifyTLSUser verifies if the TLS identity has the required extensions to fulfill the device trust configuration.