psk

README

Pre-Shared Key Authentication

The Pre-Shared Key Authenticator loads Identity objects keyed by pre-shared key. Should the look up be done instead against CRs that represent the reporters?

TODO: fsnotify to automatically reload the keys at runtime.

Documentation

Overview

Package psk provides an authenticator based on pre-shared keys

Index

• type CompletedConfig
• type Config
  • func NewConfig(o *Options) *Config
  • func (c *Config) Complete() (CompletedConfig, error)
• type IdentityMap
• type Options
  • func NewOptions() *Options
  • func (o *Options) AddFlags(fs *pflag.FlagSet, prefix string)
  • func (o *Options) Complete() []error
  • func (o *Options) Validate() []error
• type PreSharedKeyAuthenticator
  • func New(config CompletedConfig) *PreSharedKeyAuthenticator
  • func (a *PreSharedKeyAuthenticator) Authenticate(ctx context.Context, t transport.Transporter) (*api.Identity, api.Decision)
  • func (a *PreSharedKeyAuthenticator) Lookup(key string) *api.Identity

Types

type CompletedConfig

type CompletedConfig struct {
	// contains filtered or unexported fields
}

type Config

type Config struct {
	PreSharedKeyFile string
	Keys             IdentityMap
}

func NewConfig

func NewConfig(o *Options) *Config

func (*Config) Complete

func (c *Config) Complete() (CompletedConfig, error)

type IdentityMap

type IdentityMap map[string]api.Identity

type Options

type Options struct {
	PreSharedKeyFile string `mapstructure:"pre-shared-key-file"`
}

func NewOptions

func NewOptions() *Options

func (*Options) AddFlags

func (o *Options) AddFlags(fs *pflag.FlagSet, prefix string)

func (*Options) Complete

func (o *Options) Complete() []error

func (*Options) Validate

func (o *Options) Validate() []error

type PreSharedKeyAuthenticator

type PreSharedKeyAuthenticator struct {
	Store IdentityMap
}

func New

func New(config CompletedConfig) *PreSharedKeyAuthenticator

func (*PreSharedKeyAuthenticator) Authenticate

func (a *PreSharedKeyAuthenticator) Authenticate(ctx context.Context, t transport.Transporter) (*api.Identity, api.Decision)

func (*PreSharedKeyAuthenticator) Lookup

func (a *PreSharedKeyAuthenticator) Lookup(key string) *api.Identity