jwt

Documentation

Index

• Constants
• type JwksFetchMode
  • func ConvertToJwksFetchMode(mode string) JwksFetchMode
  • func (mode JwksFetchMode) String() string
• type RoutingClaim
  • func ToRoutingClaim(headerName string) RoutingClaim
• type Separator

Constants

const (
	PolicyThirdParty = "third-party-jwt"
	PolicyFirstParty = "first-party-jwt"
)

const HeaderJWTClaim = "@request.auth.claims"

HeaderJWTClaim is the special header name used in virtual service for routing based on JWT claims.

Types

type JwksFetchMode

type JwksFetchMode int

const (
	// Istiod is used to indicate Istiod ALWAYS fetches the JWKs server
	Istiod JwksFetchMode = iota

	// Hybrid is used to indicate Envoy fetches the JWKs server when there is a cluster entry,
	// otherwise fallback to Istiod
	Hybrid

	// Envoy is used to indicate Envoy ALWAYS fetches the JWKs server
	Envoy
)

func ConvertToJwksFetchMode

func ConvertToJwksFetchMode(mode string) JwksFetchMode

ConvertToJwksFetchMode converts from string value mode to enum JwksFetchMode value. true and false are kept for backwards compatibility.

func (JwksFetchMode) String

func (mode JwksFetchMode) String() string

String converts JwksFetchMode to readable string.

type RoutingClaim

type RoutingClaim struct {
	Match     bool
	Separator Separator
	Claims    []string
}

func ToRoutingClaim

func ToRoutingClaim(headerName string) RoutingClaim

type Separator

type Separator int

const (
	Dot Separator = iota
	Square
)