identity

Documentation

Index

• type Validator
  • func NewValidator(cfg ValidatorConfig, opts ...ValidatorOption) (*Validator, error)
  • func (svc *Validator) Validate(r *http.Request) (jwt.MapClaims, error)
• type ValidatorConfig
• type ValidatorOption
  • func JWTClientValidatorOpt(signingKey string) ValidatorOption

Types

type Validator

type Validator struct {
	// contains filtered or unexported fields
}

func NewValidator

func NewValidator(cfg ValidatorConfig, opts ...ValidatorOption) (*Validator, error)

func (*Validator) Validate

func (svc *Validator) Validate(r *http.Request) (jwt.MapClaims, error)

TokenVerification verifies the incoming token request right now we are supporting the admin token, the k8s /login token from cloud-api and the new keycloak token TODO: remove support for k8s cloud-api /login and the admin token

type ValidatorConfig

type ValidatorConfig struct {
	ClientID      string `split_words:"true" required:"true"`
	ConnectionURL string `split_words:"true" required:"true"`
	Issuer        string `split_words:"true" required:"false"`

	// Optional Skip Checks
	SkipClientIDCheck bool `split_words:"true" default:"false"`
	SkipExpiryCheck   bool `split_words:"true" default:"false"`
	SkipIssuerCheck   bool `split_words:"true" default:"false"`
}

type ValidatorOption

type ValidatorOption func(validator *Validator)

func JWTClientValidatorOpt

func JWTClientValidatorOpt(signingKey string) ValidatorOption