authz

Documentation

Index

• Constants
• type Config
  • func ConfigFromXmlFile(filename string) (*Config, error)
  • func (c *Config) Match(headerName, headerValue string) *OIDCProvider
• type HeaderMatch
• type OIDCProvider
• type Service
  • func NewService(cfg *Config, opaURL, secretKey string) *Service
  • func (s *Service) Check(ctx context.Context, req *connect.Request[auth.CheckRequest]) (*connect.Response[auth.CheckResponse], error)
  • func (s *Service) Name() string
  • func (s *Service) NewHandler() (string, http.Handler)

Constants

const ServiceName = "envoy-authz"

Types

type Config

type Config struct {
	Providers []OIDCProvider `yaml:"providers"`
}

func ConfigFromXmlFile

func ConfigFromXmlFile(filename string) (*Config, error)

func (*Config) Match

func (c *Config) Match(headerName, headerValue string) *OIDCProvider

type HeaderMatch

type HeaderMatch struct {
	Name   string `yaml:"name"`
	Exact  string `yaml:"exact"`
	Regex  string `yaml:"regex"`
	Prefix string `yaml:"prefix"`
}

type OIDCProvider

type OIDCProvider struct {
	IssuerURL        string      `yaml:"issuerURL"`
	CallbackURI      string      `yaml:"callbackURI"`
	ClientID         string      `yaml:"clientID"`
	ClientSecret     string      `yaml:"clientSecret"`
	Scopes           []string    `yaml:"scopes"`
	CookieNamePrefix string      `yaml:"cookieNamePrefix"`
	SecureCookie     bool        `yaml:"secureCookie"`
	OPAEnabled       bool        `yaml:"opaEnabled"`
	AllowAuthHeader  bool        `yaml:"allowAuthHeaderPassThrough"`
	HeaderMatch      HeaderMatch `yaml:"headerMatch"`
	// contains filtered or unexported fields
}

type Service

type Service struct {
	authv3connect.UnimplementedAuthorizationHandler
	// contains filtered or unexported fields
}

func NewService

func NewService(cfg *Config, opaURL, secretKey string) *Service

func (*Service) Check

func (s *Service) Check(ctx context.Context, req *connect.Request[auth.CheckRequest]) (*connect.Response[auth.CheckResponse], error)

func (*Service) Name

func (s *Service) Name() string

func (*Service) NewHandler

func (s *Service) NewHandler() (string, http.Handler)