authz

Documentation

Index

• Constants
• type Config
  • func ConfigFromYamlFile(filename string) (*Config, error)
  • func (c *Config) Match(headerName, headerValue string) *OIDCProvider
• type HeaderMatch
• type LogoutConfig
• type OIDCProvider
• type Service
  • func NewService(cfg *Config, secretKey string, redisURL *url.URL) *Service
  • func (s *Service) Check(ctx context.Context, req *connect.Request[auth.CheckRequest]) (*connect.Response[auth.CheckResponse], error)
  • func (s *Service) Name() string
  • func (s *Service) NewHandler() (string, http.Handler)

Constants

const ServiceName = "envoy-authz"

Types

type Config

type Config struct {
	SessionExpiration        string         `yaml:"sessionExpiration"`
	ErrorTemplate            string         `yaml:"errorTemplate"`
	ErrorTemplateContentType string         `yaml:"errorTemplateContentType"`
	Providers                []OIDCProvider `yaml:"providers"`
}

func ConfigFromYamlFile

func ConfigFromYamlFile(filename string) (*Config, error)

func (*Config) Match

func (c *Config) Match(headerName, headerValue string) *OIDCProvider

type HeaderMatch

type HeaderMatch struct {
	Name   string `yaml:"name"`
	Exact  string `yaml:"exact"`
	Regex  string `yaml:"regex"`
	Prefix string `yaml:"prefix"`
}

type LogoutConfig

type LogoutConfig struct {
	RedirectURI string `yaml:"redirectURI"`
	Path        string `yaml:"path"`
}

type OIDCProvider

type OIDCProvider struct {
	HeaderMatch                    HeaderMatch  `yaml:"headerMatch"`
	Logout                         LogoutConfig `yaml:"logout"`
	CookieNamePrefix               string       `yaml:"cookieNamePrefix"`
	CallbackURI                    string       `yaml:"callbackURI"`
	ClientSecret                   string       `yaml:"clientSecret"`
	ClientID                       string       `yaml:"clientID"`
	PreAuthPolicy                  string       `yaml:"preAuthPolicy"`
	PostAuthPolicy                 string       `yaml:"postAuthPolicy"`
	IssuerURL                      string       `yaml:"issuerURL"`
	Scopes                         []string     `yaml:"scopes"`
	DisableSecureCookie            bool         `yaml:"disableSecureCookie"`
	DisablePassAuthorizationHeader bool         `yaml:"disablePassAuthorizationHeader"`
	DisableSourceAddressCheck      bool         `yaml:"disableSourceAddressCheck"`
	// contains filtered or unexported fields
}

type Service

type Service struct {
	authv3connect.UnimplementedAuthorizationHandler
	// contains filtered or unexported fields
}

func NewService

func NewService(cfg *Config, secretKey string, redisURL *url.URL) *Service

func (*Service) Check

func (s *Service) Check(ctx context.Context, req *connect.Request[auth.CheckRequest]) (*connect.Response[auth.CheckResponse], error)

func (*Service) Name

func (s *Service) Name() string

func (*Service) NewHandler

func (s *Service) NewHandler() (string, http.Handler)