authorization

Documentation

Index

• Variables
• type Authenticator
  • func NewAuthenticator(issuer *jose.JWTIssuer, oauth2 *oauth2.Authenticator) *Authenticator
  • func (a *Authenticator) JWKS(ctx context.Context) (interface{}, error)
• type IdentityACLGetter
  • func NewIdentityACLGetter(client identityapi.ClientWithResponsesInterface, organizationID string) *IdentityACLGetter
  • func (a *IdentityACLGetter) Get(ctx context.Context) (*rbac.ACL, error)

Variables

var (
	ErrResponse = errors.New("unexpected response")
)

Types

type Authenticator

type Authenticator struct {

	// OAuth2 is the oauth2 deletgating authenticator.
	OAuth2 *oauth2.Authenticator
	// contains filtered or unexported fields
}

Authenticator provides Keystone authentication functionality.

func NewAuthenticator

func NewAuthenticator(issuer *jose.JWTIssuer, oauth2 *oauth2.Authenticator) *Authenticator

NewAuthenticator returns a new authenticator with required fields populated. You must call AddFlags after this.

func (*Authenticator) JWKS

func (a *Authenticator) JWKS(ctx context.Context) (interface{}, error)

type IdentityACLGetter

type IdentityACLGetter struct {
	// contains filtered or unexported fields
}

IdentityACLGetter grabs an ACL for the user from the identity API. Used for any non-identity API.

func NewIdentityACLGetter

func NewIdentityACLGetter(client identityapi.ClientWithResponsesInterface, organizationID string) *IdentityACLGetter

func (*IdentityACLGetter) Get

func (a *IdentityACLGetter) Get(ctx context.Context) (*rbac.ACL, error)