check

Documentation

Index

• func GetPrincipal(ctx context.Context, opts Options, log logger.Logger, c client.Client) (*auth.UserPrincipal, error)
• type Claims
• type Options

Functions

func GetPrincipal

func GetPrincipal(ctx context.Context, opts Options, log logger.Logger, c client.Client) (*auth.UserPrincipal, error)

GetPrincipal retrieves OIDC claims by sending the user through an authorization code flow. It spins up a temporary web server, sets the server's address as redirect URI in the authentication request and subsequently exchanges the authorization code for an ID token. NOTE: Make sure to configure your OIDC provider so that it accepts "http://localhost:9876" as redirect URI.

Types

type Claims

type Claims struct {
	Username string
	Groups   []string
}

type Options

type Options struct {
	ClientID                   string
	ClientSecret               string
	IssuerURL                  string
	SecretName                 string
	SecretNamespace            string
	Scopes                     []string
	ClaimUsername              string
	ClaimGroups                string
	OpenURL                    func(string) error
	InsecureSkipSignatureCheck bool
}