authentication

Documentation

Index

• Variables
• type APIService
  • func NewAPIService(apiEndpoint string, validateIDTokenClaims map[string]string, ...) (*APIService, error)
  • func NewAPIServiceWithClients(apiClient apiclient.ClientWithResponsesInterface, logger logging.Logger, ...) (*APIService, error)
  • func (s *APIService) ExternalPrincipalLogin(ctx context.Context, identityRequest map[string]interface{}) (*apiclient.ExternalPrincipal, error)
  • func (s *APIService) IsExternalPrincipalsEnabled() bool
  • func (s *APIService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
• type DummyService
  • func NewDummyService() *DummyService
  • func (d DummyService) ExternalPrincipalLogin(_ context.Context, _ map[string]interface{}) (*apiclient.ExternalPrincipal, error)
  • func (d DummyService) IsExternalPrincipalsEnabled() bool
  • func (d DummyService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
• type Service

Variables

var (
	ErrNotImplemented          = errors.New("not implemented")
	ErrAlreadyExists           = errors.New("already exists")
	ErrInsufficientPermissions = errors.New("insufficient permissions")
	ErrUnexpectedStatusCode    = errors.New("unexpected status code")
	ErrInvalidRequest          = errors.New("invalid request")
	ErrSessionExpired          = errors.New("session expired")
	ErrInvalidTokenFormat      = errors.New("invalid token format")
)

Types

type APIService

type APIService struct {
	// contains filtered or unexported fields
}

func NewAPIService

func NewAPIService(apiEndpoint string, validateIDTokenClaims map[string]string, logger logging.Logger, externalPrincipalsEnabled bool) (*APIService, error)

func NewAPIServiceWithClients

func NewAPIServiceWithClients(apiClient apiclient.ClientWithResponsesInterface, logger logging.Logger, validateIDTokenClaims map[string]string, externalPrincipalsEnabled bool) (*APIService, error)

func (*APIService) ExternalPrincipalLogin

func (s *APIService) ExternalPrincipalLogin(ctx context.Context, identityRequest map[string]interface{}) (*apiclient.ExternalPrincipal, error)

func (*APIService) IsExternalPrincipalsEnabled

func (s *APIService) IsExternalPrincipalsEnabled() bool

func (*APIService) ValidateSTS

func (s *APIService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)

ValidateSTS calls the external authentication service to validate the STS parameters validates the required claims and returns the external user id and expiration time

type DummyService

type DummyService struct{}

func NewDummyService

func NewDummyService() *DummyService

func (DummyService) ExternalPrincipalLogin

func (d DummyService) ExternalPrincipalLogin(_ context.Context, _ map[string]interface{}) (*apiclient.ExternalPrincipal, error)

func (DummyService) IsExternalPrincipalsEnabled

func (d DummyService) IsExternalPrincipalsEnabled() bool

func (DummyService) ValidateSTS

func (d DummyService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)

type Service

type Service interface {
	IsExternalPrincipalsEnabled() bool
	ExternalPrincipalLogin(ctx context.Context, identityRequest map[string]interface{}) (*apiclient.ExternalPrincipal, error)
	// ValidateSTS validates the STS parameters and returns the external user ID
	ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
}