gcloudjuice

Documentation

Overview

Package gcloudjuice provides utility functions for interacting with Google Cloud services.

Index

• func AuthenticateOIDCToken(w http.ResponseWriter, r *http.Request, authTokenKey string, ...) (*structcup.AuthResponse, error)
• func CreateOIDCToken(FS embed.FS, credentialsPath string, audience string) (*oauth2.Token, error)
• func GetSecretValue(FS embed.FS, credentialsPath string, projectID string, secretID string, ...) ([]byte, error)

Functions

func AuthenticateOIDCToken

func AuthenticateOIDCToken(w http.ResponseWriter, r *http.Request, authTokenKey string, expectedAudience, expectedIssuer string) (*structcup.AuthResponse, error)

AuthenticateOIDCToken verifies a JWT token's authenticity based on the provided audience and issuer. It requires an HTTP response writer (w), an HTTP request (r), an authorization token key (authTokenKey), an expected audience (expectedAudience), and an expected issuer (expectedIssuer). It returns a success response if the token is valid or an error if the token is invalid or does not match the expected audience and issuer.

func CreateOIDCToken

func CreateOIDCToken(FS embed.FS, credentialsPath string, audience string) (*oauth2.Token, error)

CreateOIDCToken creates an OIDC token with the given audience. It requires an embedded filesystem (FS), a path to the credentials file (credentialsPath), and an audience (audience). It returns the OIDC token or an error if the operation fails.

func GetSecretValue

func GetSecretValue(FS embed.FS, credentialsPath string, projectID string, secretID string, versionID string) ([]byte, error)

GetSecretValue retrieves a secret value from Google Cloud Secret Manager. It requires an embedded filesystem (FS), a path to the credentials file (credentialsPath), a Google Cloud project ID (projectID), a secret ID (secretID), and a secret version ID (versionID). It returns the secret value as a byte slice or an error if the operation fails.