auth

Documentation

Index

• Constants
• func SetUser(c echo.Context, user *User) error
• func ValidateAuthHeaderExists(c echo.Context, cfgProvider *config.ConfigProviderWithRefresh) error
• type Claims
• type IDToken
• type User
  • func ExchangeCode(ctx context.Context, r *http.Request, config *oauth2.Config, ...) (*User, error)
• type UserResponse

Constants

const (
	AuthorizationExtrasHeader = "authorization-extras"
)

Functions

func SetUser

func SetUser(c echo.Context, user *User) error

func ValidateAuthHeaderExists

func ValidateAuthHeaderExists(c echo.Context, cfgProvider *config.ConfigProviderWithRefresh) error

ValidateAuthHeaderExists validates that the autorization header exists if auth is enabled. User autorization should be done in the frontend by claim-mapper and authorizer plugins. See https://docs.temporal.io/security#authentication

Types

type Claims

type Claims struct {
	Email         string `json:"email"`
	EmailVerified bool   `json:"email_verified"`
	Name          string `json:"name"`
	Picture       string `json:"picture"`
}

type IDToken

type IDToken struct {
	RawToken string
	Claims   *Claims
}

type User

type User struct {
	OAuth2Token *oauth2.Token
	IDToken     *IDToken
}

func ExchangeCode

func ExchangeCode(ctx context.Context, r *http.Request, config *oauth2.Config, provider *oidc.Provider) (*User, error)

type UserResponse

type UserResponse struct {
	AccessToken string
	IDToken     string
	Name        string
	Email       string
	Picture     string
}