verify

Documentation

Overview

Package verify contains various implementations of the CAP10 verifier. A verifier allows a CAP10 client to verify that the provided auth information is valid and not being spoofed.

Index

• Constants
• type FileVerifier
  • func NewFileVerifier(ctx context.Context, path string) (*FileVerifier, error)
  • func (v *FileVerifier) IsValid(ctx context.Context, msg, sig, _ string) bool
• type NoOpVerifier
  • func NewNoOpVerifier() *NoOpVerifier
  • func (*NoOpVerifier) IsValid(_ context.Context, _, _, _ string) bool

Constants

const (
	ProviderHTTP  = "http"
	ProviderLocal = "local"
	ProviderNone  = "none"
)

Types

type FileVerifier

type FileVerifier struct {
	client.BaseVerifier
	// contains filtered or unexported fields
}

FileVerifier uses a local file (e.g. mounted k8s secret) as the CAP10 public key

func NewFileVerifier

func NewFileVerifier(ctx context.Context, path string) (*FileVerifier, error)

NewFileVerifier creates a new FileVerifier and attempts to read and parse the file at the given path

func (*FileVerifier) IsValid

func (v *FileVerifier) IsValid(ctx context.Context, msg, sig, _ string) bool

type NoOpVerifier

type NoOpVerifier struct {
	client.BaseVerifier
}

NoOpVerifier skips the verification mechanism and assumes all requests are valid

func NewNoOpVerifier

func NewNoOpVerifier() *NoOpVerifier

NewNoOpVerifier creates a new instance of NoOpVerifier.

func (*NoOpVerifier) IsValid

func (*NoOpVerifier) IsValid(_ context.Context, _, _, _ string) bool