endpointsmanager

Documentation

Index

• type Manager
  • func NewManager(nextHandler http.Handler, dynamicJWKSProvider jwks.DynamicJWKSProvider, ...) *Manager
  • func (m *Manager) HandlerChain() http.Handler
  • func (m *Manager) SetFederationDomains(federationDomains ...*federationdomainproviders.FederationDomainIssuer)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager can manage multiple active OIDC providers. It acts as a request router for them.

It is thread-safe.

func NewManager

func NewManager(
	nextHandler http.Handler,
	dynamicJWKSProvider jwks.DynamicJWKSProvider,
	upstreamIDPs idplister.UpstreamIdentityProvidersLister,
	secretCache *secret.Cache,
	secretsClient corev1client.SecretInterface,
	oidcClientsClient v1alpha1.OIDCClientInterface,
	auditLogger plog.AuditLogger,
	auditInternalPathsCfg supervisor.AuditInternalPaths,
) *Manager

NewManager returns an empty Manager. nextHandler will be invoked for any requests that could not be handled by this manager's providers. dynamicJWKSProvider will be used as an in-memory cache for per-issuer JWKS data. upstreamIDPs will be used as an in-memory cache of currently configured upstream IDPs.

func (*Manager) HandlerChain

func (m *Manager) HandlerChain() http.Handler

func (*Manager) SetFederationDomains

func (m *Manager) SetFederationDomains(federationDomains ...*federationdomainproviders.FederationDomainIssuer)

SetFederationDomains adds or updates all the given providerHandlers using each provider's issuer string as the name of the provider to decide if it is an add or update operation.

It also removes any providerHandlers that were previously added but were not passed in to the current invocation.

This method assumes that all the FederationDomainIssuer arguments have already been validated by someone else before they are passed to this method.