authorization

Documentation

Index

• func ClientCertFromContext(ctx context.Context) (string, error)
• func ExtractClientCert(ctx context.Context, header http.Header) (context.Context, error)
• func InjectClientCert(ctx context.Context, header http.Header)
• func NewContextWithClientCert(ctx context.Context, clientCert string) context.Context
• func NewContextWithUserinfo(ctx context.Context, userinfo *identityapi.Userinfo) context.Context
• func UserinfoFromContext(ctx context.Context) (*identityapi.Userinfo, error)

Functions

func ClientCertFromContext

func ClientCertFromContext(ctx context.Context) (string, error)

func ExtractClientCert

func ExtractClientCert(ctx context.Context, header http.Header) (context.Context, error)

ExtractClientCert is called from the API to either propagate an existing certificate to the context, or to extract one from headers injected by TLS termination.

func InjectClientCert

func InjectClientCert(ctx context.Context, header http.Header)

InjectClientCert is called by clients to propagate the client certificate that started the call chain, and thus owns the access token, to the next server.

func NewContextWithClientCert

func NewContextWithClientCert(ctx context.Context, clientCert string) context.Context

NewContextWithClientCert is used to propagate the client certificate to other clients. The client certificate parameter is passed verbatim from the TLS termination header, so should be a url encoded string.

func NewContextWithUserinfo

func NewContextWithUserinfo(ctx context.Context, userinfo *identityapi.Userinfo) context.Context

func UserinfoFromContext

func UserinfoFromContext(ctx context.Context) (*identityapi.Userinfo, error)