grpcjwt

Documentation

Index

• Variables
• type FixedJWT
  • func Load(path string) (*FixedJWT, error)
  • func (c *FixedJWT) GetRequestMetadata(ctx context.Context, uri ...string) (map[string]string, error)
  • func (c *FixedJWT) RequireTransportSecurity() bool
• type HMACAuthn
  • func NewHMACAuthn(secret string) *HMACAuthn
  • func (a *HMACAuthn) Authenticate(ctx context.Context) (auth.Identity, error)
• type RSAAuthn
  • func NewRSAAuthn(ca *x509.CertPool, ou string) *RSAAuthn
  • func (a *RSAAuthn) Authenticate(ctx context.Context) (auth.Identity, error)

Variables

var (
	ErrMissingMetadata = status.Error(
		codes.Unauthenticated, "missing GRPC metadata",
	)
	ErrMissingAuthMeta = status.Error(
		codes.Unauthenticated, "missing GRPC authorization metadata",
	)
	ErrWrongSigningMethod = status.Error(
		codes.Unauthenticated, "wrong JWT signing method",
	)
	ErrMissingX5c = status.Error(
		codes.Unauthenticated, "missing JWT x5c header",
	)
	ErrMalformedX5c = status.Error(
		codes.Unauthenticated, "malformed JWT x5c header",
	)
	ErrInvalidX5cKeyUsage = status.Error(
		codes.Unauthenticated,
		"JWT x5c key usage does not include signing",
	)
	ErrWrongX5cOU = status.Error(
		codes.Unauthenticated, "JWT x5c header has wrong X.509 OU",
	)
	ErrInvalidIssuer = status.Error(
		codes.Unauthenticated, "invalid token issuer",
	)
	ErrInvalidAudience = status.Error(
		codes.Unauthenticated, "invalid token audience",
	)
	ErrMissingSubject = status.Error(
		codes.Unauthenticated, "missing token subject",
	)
	ErrMalformedXcrd = status.Error(
		codes.Unauthenticated, "malformed token claim `xcrd`",
	)
	ErrMalformedSan = status.Error(
		codes.Unauthenticated, "malformed token claim `san`",
	)
	ErrInvalidSan = status.Error(
		codes.Unauthenticated, "invalid token claim `san` entry",
	)
	ErrMalformedSc = status.Error(
		codes.Unauthenticated, "malformed token claim `sc`",
	)
	ErrUnknownScAction = status.Error(
		codes.Unauthenticated, "unknown `sc.aa` in token claim",
	)
)

var ErrMalformedJWT = errors.New("malformed JWT")

Types

type FixedJWT

type FixedJWT struct {
	Token                  string
	AllowInsecureTransport bool
}

func Load

func Load(path string) (*FixedJWT, error)

func (*FixedJWT) GetRequestMetadata

func (c *FixedJWT) GetRequestMetadata(
	ctx context.Context, uri ...string,
) (map[string]string, error)

func (*FixedJWT) RequireTransportSecurity

func (c *FixedJWT) RequireTransportSecurity() bool

type HMACAuthn

type HMACAuthn struct {
	// contains filtered or unexported fields
}

func NewHMACAuthn

func NewHMACAuthn(secret string) *HMACAuthn

func (*HMACAuthn) Authenticate

func (a *HMACAuthn) Authenticate(ctx context.Context) (auth.Identity, error)

type RSAAuthn

type RSAAuthn struct {
	// contains filtered or unexported fields
}

func NewRSAAuthn

func NewRSAAuthn(ca *x509.CertPool, ou string) *RSAAuthn

func (*RSAAuthn) Authenticate

func (a *RSAAuthn) Authenticate(ctx context.Context) (auth.Identity, error)