Documentation
¶
Index ¶
- type DynamicGlobalSecretConfig
- func (d *DynamicGlobalSecretConfig) GetAccessTokenLifespan(ctx context.Context) time.Duration
- func (d *DynamicGlobalSecretConfig) GetAuthorizeCodeLifespan(ctx context.Context) time.Duration
- func (d *DynamicGlobalSecretConfig) GetGlobalSecret(_ctx context.Context) ([]byte, error)
- func (d *DynamicGlobalSecretConfig) GetHMACHasher(ctx context.Context) func() hash.Hash
- func (d *DynamicGlobalSecretConfig) GetRefreshTokenLifespan(ctx context.Context) time.Duration
- func (d *DynamicGlobalSecretConfig) GetRotatedGlobalSecrets(_ctx context.Context) ([][]byte, error)
- func (d *DynamicGlobalSecretConfig) GetTokenEntropy(ctx context.Context) int
- type KubeStorage
- func (k KubeStorage) ClientAssertionJWTValid(ctx context.Context, jti string) error
- func (k KubeStorage) CreateAccessTokenSession(ctx context.Context, signatureOfAccessToken string, requester fosite.Requester) (err error)
- func (k KubeStorage) CreateAuthorizeCodeSession(ctx context.Context, signatureOfAuthcode string, r fosite.Requester) (err error)
- func (k KubeStorage) CreateOpenIDConnectSession(ctx context.Context, fullAuthcode string, requester fosite.Requester) error
- func (k KubeStorage) CreatePKCERequestSession(ctx context.Context, signatureOfAuthcode string, requester fosite.Requester) error
- func (k KubeStorage) CreateRefreshTokenSession(ctx context.Context, signatureOfRefreshToken string, ...) (err error)
- func (k KubeStorage) DeleteAccessTokenSession(ctx context.Context, signatureOfAccessToken string) (err error)
- func (k KubeStorage) DeleteOpenIDConnectSession(ctx context.Context, fullAuthcode string) error
- func (k KubeStorage) DeletePKCERequestSession(ctx context.Context, signatureOfAuthcode string) error
- func (k KubeStorage) DeleteRefreshTokenSession(ctx context.Context, signatureOfRefreshToken string) (err error)
- func (k KubeStorage) GetAccessTokenSession(ctx context.Context, signatureOfAccessToken string, session fosite.Session) (request fosite.Requester, err error)
- func (k KubeStorage) GetAuthorizeCodeSession(ctx context.Context, signatureOfAuthcode string, s fosite.Session) (request fosite.Requester, err error)
- func (k KubeStorage) GetClient(ctx context.Context, id string) (fosite.Client, error)
- func (k KubeStorage) GetOpenIDConnectSession(ctx context.Context, fullAuthcode string, requester fosite.Requester) (fosite.Requester, error)
- func (k KubeStorage) GetPKCERequestSession(ctx context.Context, signatureOfAuthcode string, session fosite.Session) (fosite.Requester, error)
- func (k KubeStorage) GetRefreshTokenSession(ctx context.Context, signatureOfRefreshToken string, session fosite.Session) (request fosite.Requester, err error)
- func (k KubeStorage) InvalidateAuthorizeCodeSession(ctx context.Context, signatureOfAuthcode string) (err error)
- func (k KubeStorage) RevokeAccessToken(ctx context.Context, requestID string) error
- func (k KubeStorage) RevokeRefreshToken(ctx context.Context, requestID string) error
- func (k KubeStorage) RotateRefreshToken(ctx context.Context, requestID string, _refreshTokenSignature string) error
- func (k KubeStorage) SetClientAssertionJWT(ctx context.Context, jti string, exp time.Time) error
- type NullStorage
- func (NullStorage) CreateAccessTokenSession(_ context.Context, _ string, _ fosite.Requester) (err error)
- func (NullStorage) CreateAuthorizeCodeSession(_ context.Context, _ string, _ fosite.Requester) (err error)
- func (NullStorage) CreateOpenIDConnectSession(_ context.Context, _ string, _ fosite.Requester) error
- func (NullStorage) CreatePKCERequestSession(_ context.Context, _ string, _ fosite.Requester) error
- func (NullStorage) CreateRefreshTokenSession(_ context.Context, _ string, _ string, _ fosite.Requester) (err error)
- func (NullStorage) DeleteAccessTokenSession(_ context.Context, _ string) (err error)
- func (NullStorage) DeleteOpenIDConnectSession(_ context.Context, _ string) error
- func (NullStorage) DeletePKCERequestSession(_ context.Context, _ string) error
- func (NullStorage) DeleteRefreshTokenSession(_ context.Context, _ string) (err error)
- func (NullStorage) GetAccessTokenSession(_ context.Context, _ string, _ fosite.Session) (request fosite.Requester, err error)
- func (NullStorage) GetAuthorizeCodeSession(_ context.Context, _ string, _ fosite.Session) (request fosite.Requester, err error)
- func (NullStorage) GetOpenIDConnectSession(_ context.Context, _ string, _ fosite.Requester) (fosite.Requester, error)
- func (NullStorage) GetPKCERequestSession(_ context.Context, _ string, _ fosite.Session) (fosite.Requester, error)
- func (NullStorage) GetRefreshTokenSession(_ context.Context, _ string, _ fosite.Session) (request fosite.Requester, err error)
- func (NullStorage) InvalidateAuthorizeCodeSession(_ context.Context, _ string) (err error)
- func (NullStorage) RevokeAccessToken(_ context.Context, _ string) error
- func (NullStorage) RevokeRefreshToken(_ context.Context, _ string) error
- func (NullStorage) RotateRefreshToken(_ context.Context, _ string, _ string) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type DynamicGlobalSecretConfig ¶
type DynamicGlobalSecretConfig struct {
// contains filtered or unexported fields
}
DynamicGlobalSecretConfig is a wrapper around fosite.Config which allows us to always return dynamic secrets, since those secrets can change at any time when they are loaded or reloaded by our controllers.
func NewDynamicGlobalSecretConfig ¶
func NewDynamicGlobalSecretConfig( fositeConfig *fosite.Config, keyFunc func() []byte, ) *DynamicGlobalSecretConfig
func (*DynamicGlobalSecretConfig) GetAccessTokenLifespan ¶
func (d *DynamicGlobalSecretConfig) GetAccessTokenLifespan(ctx context.Context) time.Duration
func (*DynamicGlobalSecretConfig) GetAuthorizeCodeLifespan ¶
func (d *DynamicGlobalSecretConfig) GetAuthorizeCodeLifespan(ctx context.Context) time.Duration
func (*DynamicGlobalSecretConfig) GetGlobalSecret ¶
func (d *DynamicGlobalSecretConfig) GetGlobalSecret(_ctx context.Context) ([]byte, error)
func (*DynamicGlobalSecretConfig) GetHMACHasher ¶
func (d *DynamicGlobalSecretConfig) GetHMACHasher(ctx context.Context) func() hash.Hash
func (*DynamicGlobalSecretConfig) GetRefreshTokenLifespan ¶
func (d *DynamicGlobalSecretConfig) GetRefreshTokenLifespan(ctx context.Context) time.Duration
func (*DynamicGlobalSecretConfig) GetRotatedGlobalSecrets ¶
func (d *DynamicGlobalSecretConfig) GetRotatedGlobalSecrets(_ctx context.Context) ([][]byte, error)
func (*DynamicGlobalSecretConfig) GetTokenEntropy ¶
func (d *DynamicGlobalSecretConfig) GetTokenEntropy(ctx context.Context) int
type KubeStorage ¶
type KubeStorage struct {
// contains filtered or unexported fields
}
func NewKubeStorage ¶
func NewKubeStorage( secrets corev1client.SecretInterface, oidcClientsClient v1alpha1.OIDCClientInterface, timeoutsConfiguration timeouts.Configuration, minBcryptCost int, ) *KubeStorage
func (KubeStorage) ClientAssertionJWTValid ¶
func (k KubeStorage) ClientAssertionJWTValid(ctx context.Context, jti string) error
func (KubeStorage) CreateAccessTokenSession ¶
func (KubeStorage) CreateAuthorizeCodeSession ¶
func (KubeStorage) CreateOpenIDConnectSession ¶
func (KubeStorage) CreatePKCERequestSession ¶
func (KubeStorage) CreateRefreshTokenSession ¶
func (KubeStorage) DeleteAccessTokenSession ¶
func (k KubeStorage) DeleteAccessTokenSession(ctx context.Context, signatureOfAccessToken string) (err error)
func (KubeStorage) DeleteOpenIDConnectSession ¶
func (k KubeStorage) DeleteOpenIDConnectSession(ctx context.Context, fullAuthcode string) error
func (KubeStorage) DeletePKCERequestSession ¶
func (k KubeStorage) DeletePKCERequestSession(ctx context.Context, signatureOfAuthcode string) error
func (KubeStorage) DeleteRefreshTokenSession ¶
func (k KubeStorage) DeleteRefreshTokenSession(ctx context.Context, signatureOfRefreshToken string) (err error)
func (KubeStorage) GetAccessTokenSession ¶
func (KubeStorage) GetAuthorizeCodeSession ¶
func (KubeStorage) GetOpenIDConnectSession ¶
func (KubeStorage) GetPKCERequestSession ¶
func (KubeStorage) GetRefreshTokenSession ¶
func (KubeStorage) InvalidateAuthorizeCodeSession ¶
func (k KubeStorage) InvalidateAuthorizeCodeSession(ctx context.Context, signatureOfAuthcode string) (err error)
func (KubeStorage) RevokeAccessToken ¶
func (k KubeStorage) RevokeAccessToken(ctx context.Context, requestID string) error
func (KubeStorage) RevokeRefreshToken ¶
func (k KubeStorage) RevokeRefreshToken(ctx context.Context, requestID string) error
func (KubeStorage) RotateRefreshToken ¶ added in v0.37.0
func (KubeStorage) SetClientAssertionJWT ¶
type NullStorage ¶
type NullStorage struct { // The authorization endpoint uses NullStorage to avoid saving any data, but it still needs to perform client lookups. *clientregistry.ClientManager }
func NewNullStorage ¶
func NewNullStorage( secrets corev1client.SecretInterface, oidcClientsClient v1alpha1.OIDCClientInterface, minBcryptCost int, ) *NullStorage
func (NullStorage) CreateAccessTokenSession ¶
func (NullStorage) CreateAuthorizeCodeSession ¶
func (NullStorage) CreateOpenIDConnectSession ¶
func (NullStorage) CreatePKCERequestSession ¶
func (NullStorage) CreateRefreshTokenSession ¶
func (NullStorage) DeleteAccessTokenSession ¶
func (NullStorage) DeleteAccessTokenSession(_ context.Context, _ string) (err error)
func (NullStorage) DeleteOpenIDConnectSession ¶
func (NullStorage) DeleteOpenIDConnectSession(_ context.Context, _ string) error
func (NullStorage) DeletePKCERequestSession ¶
func (NullStorage) DeletePKCERequestSession(_ context.Context, _ string) error
func (NullStorage) DeleteRefreshTokenSession ¶
func (NullStorage) DeleteRefreshTokenSession(_ context.Context, _ string) (err error)
func (NullStorage) GetAccessTokenSession ¶
func (NullStorage) GetAuthorizeCodeSession ¶
func (NullStorage) GetOpenIDConnectSession ¶
func (NullStorage) GetPKCERequestSession ¶
func (NullStorage) GetRefreshTokenSession ¶
func (NullStorage) InvalidateAuthorizeCodeSession ¶
func (NullStorage) InvalidateAuthorizeCodeSession(_ context.Context, _ string) (err error)
func (NullStorage) RevokeAccessToken ¶
func (NullStorage) RevokeAccessToken(_ context.Context, _ string) error
func (NullStorage) RevokeRefreshToken ¶
func (NullStorage) RevokeRefreshToken(_ context.Context, _ string) error
func (NullStorage) RotateRefreshToken ¶ added in v0.37.0
Click to show internal directories.
Click to hide internal directories.