request

Documentation

Index

• func GetImpersonatingGroups(request *nethttp.Request, ignoreImpersonationGroups []string, ...) []string
• func GetImpersonatingUser(request *nethttp.Request) string
• func SanitizeImpersonationHeaders(request *nethttp.Request)
• type AuthType
  • func (i AuthType) String() string
• type ErrUnauthorized
  • func NewErrUnauthorized(message string) *ErrUnauthorized
  • func (e *ErrUnauthorized) Error() string
• type Request
  • func NewHTTP(request *h.Request, authTypes []AuthType, usernameClaimField string, ...) Request

Functions

func GetImpersonatingGroups

func GetImpersonatingGroups(request *nethttp.Request, ignoreImpersonationGroups []string, impersonationGroupsRegexp *regexp.Regexp) []string

func GetImpersonatingUser

func GetImpersonatingUser(request *nethttp.Request) string

func SanitizeImpersonationHeaders

func SanitizeImpersonationHeaders(request *nethttp.Request)

Types

type AuthType

type AuthType int

const (
	BearerToken AuthType = iota
	TLSCertificate
	Anonymous
)

func (AuthType) String

func (i AuthType) String() string

type ErrUnauthorized

type ErrUnauthorized struct {
	// contains filtered or unexported fields
}

func NewErrUnauthorized

func NewErrUnauthorized(message string) *ErrUnauthorized

func (*ErrUnauthorized) Error

func (e *ErrUnauthorized) Error() string

type Request

type Request interface {
	GetUserAndGroups() (string, []string, error)
	GetHTTPRequest() *h.Request
}

func NewHTTP

func NewHTTP(request *h.Request, authTypes []AuthType, usernameClaimField string, client client.Writer, ignoredImpersonationGroups []string, impersonationGroupsRegexp *regexp.Regexp, skipImpersonationReview bool) Request