zone

Documentation

Index

• Constants
• Variables
• func InScope(scope []string, s string) bool
• type Identity
• type Token
• type TokenIssuer
  • func NewTokenIssuer(issuer tokens.Issuer) TokenIssuer
• type Validator
  • func NewValidator(validator core_tokens.Validator) Validator

Constants

const (
	// TODO (bartsmykla): uncomment when Zone Token will be available for dataplanes
	// 	and ingresses
	// DataplaneScope string = "dataplane
	// IngressScope string = "ingress"
	EgressScope string = "egress"
)

const SigningKeyPrefix = "zone-token-signing-key"

const SigningPublicKeyPrefix = "zone-token-signing-public-key"

Variables

var FullScope = []string{

	EgressScope,
}

var TokenRevocationsGlobalSecretKey = core_model.ResourceKey{
	Name: "zone-token-revocations",
	Mesh: core_model.NoMesh,
}

Functions

func InScope

func InScope(scope []string, s string) bool

Types

type Identity

type Identity struct {
	Zone  string
	Scope []string
}

type Token

type Token = string

type TokenIssuer

type TokenIssuer interface {
	Generate(ctx context.Context, identity Identity, validFor time.Duration) (tokens.Token, error)
}

TokenIssuer issues Zone Tokens used then for proving identity of the zone egresses. Issued token can be bound by the zone name and the scope.

func NewTokenIssuer

func NewTokenIssuer(issuer tokens.Issuer) TokenIssuer

type Validator

type Validator interface {
	Validate(ctx context.Context, token Token) (Identity, error)
}

func NewValidator

func NewValidator(validator core_tokens.Validator) Validator