cert

Documentation

Index

• func New(cfg Config) *certificateAuthenticator
• func NewRangerPlugin(cfg ClientConfig) (ranger.ClientPlugin, error)
• type CertJWTVerifier
  • func (v *CertJWTVerifier) Validate(rawToken string, dest *user.Claims) error
• type ClientConfig
• type Config
• type KeyStore

Functions

func New

func New(cfg Config) *certificateAuthenticator

func NewRangerPlugin

func NewRangerPlugin(cfg ClientConfig) (ranger.ClientPlugin, error)

Types

type CertJWTVerifier

type CertJWTVerifier struct {
	Ks       KeyStore
	Expected jwt.Expected
}

func (*CertJWTVerifier) Validate

func (v *CertJWTVerifier) Validate(rawToken string, dest *user.Claims) error

type ClientConfig

type ClientConfig struct {
	Subject               string
	Issuer                string
	Kid                   string
	PrivateKey            *ecdsa.PrivateKey
	DisableContentHashing bool
	NoExpiration          bool
}

type Config

type Config struct {
	KeyStore KeyStore
	Expected jwt.Expected
}

type KeyStore

type KeyStore interface {
	Get(keyid string) (*x509.Certificate, error)
}