grpcacl

Documentation

Overview

Package grpcacl provides a method of applying coarse service ACLs based on the identity of the connecting service.

The certificate format expected by this package *is not* stable. Please do not use it in production.

Index

• Variables
• func NewTLS(c *tls.Config, allowed ...string) credentials.TransportCredentials

Variables

var ErrClientNotApproved = errors.New("client not an allowed identity")

ErrClientNotApproved is the error returned when a client that is not allowed attempts to connect to the server.

var ErrNonTLSTransport = errors.New("transport is not tls")

ErrNonTLSTransport is returned if this credential is used on a transport without TLS.

Functions

func NewTLS

func NewTLS(c *tls.Config, allowed ...string) credentials.TransportCredentials

NewTLS creates a new transport credential that verifies that any connecting client has a common name from the allowed list.