token_review

Documentation

Index

• Constants
• func StatusToValue(key string, trs authv1.TokenReviewStatus) map[string]*structpb.Value
• type Config

Constants

const (
	// ServerName is the name of the server.
	ServerName = "envoy.filters.http.ext_authz"
	// ServerDefaultPort is the default port to listen on.
	ServerDefaultPort = 5001
	// DefaultMetadataNamespace is the default namespace to use for the metadata.
	DefaultMetadataNamespace = "token_review"
	// DefaultSubKey is the default sub-key to use for the metadata.
	DefaultSubKey = "token"
	// DefaultAuthHeader is the default header to extract the token from.
	DefaultAuthHeader = "authorization"
)

const (
	AuthenticatedKey = "authenticated"
	UserKey          = "user"
	AudiencesKey     = "audiences"
)

const (
	Username = "username"
	UID      = "uid"
	Groups   = "groups"
	Extra    = "extra"
)

keys for userinfo

Functions

func StatusToValue

func StatusToValue(key string, trs authv1.TokenReviewStatus) map[string]*structpb.Value

StatusToValue converts a TokenReview.Status to a structpb.Value referenced by the key.

Types

type Config

type Config struct {
	// ExtractTokenFromHeader determines what header to extract the token from.
	// If true, the token will be extracted from the Authorization header.
	ExtractTokenFromHeader string `json:"extract_token_from_header"`
	// MetadataNamespace is the namespace to use for the metadata.
	MetaDataNamespace string `json:"metadata_namespace"`
	// TokenKey is the key to use for the token in the metadata.
	TokenKey string `json:"token_key"`
}

Config is the configuration for the server.