Documentation
¶
Index ¶
Constants ¶
const (
RequestContextHeaderName = "x-amzn-request-context"
)
Variables ¶
This section is empty.
Functions ¶
func CertAuthorizer ¶
CertAuthorizer returns a Lambda Authorizer function that authorizes requests based on the client certificate in the request context. If the certificate is valid, the Authorizer returns an Allow policy. The the certificate namespace does not match the configured namespace, the Authorizer returns a Deny policy.
func TLSIdentifier ¶
TLSIdentifier returns a HTTP Handler middleware function that identifies clients using TLS client certificates. It parses the client certficiate into a RequestContext which is JSON-serialised into the request context header.
Types ¶
type AuthenticatedRequestContext ¶
type AuthenticatedRequestContext struct {
events.APIGatewayCustomAuthorizerRequest
Authentication Authentication `json:"authentication"`
}
type Authentication ¶
type Authentication struct {
ClientCert ClientCert `json:"clientCert"`
}
type AuthorizedRequestContext ¶
type AuthorizedRequestContext struct {
Identity Identity `json:"identity"`
Authorizer Authorizer `json:"authorizer"`
}
type Authorizer ¶
type ClientCert ¶
type ClientCert struct {
ClientCertPem string `json:"clientCertPem"`
SubjectDN string `json:"subjectDN"`
IssuerDN string `json:"issuerDN"`
SerialNumber string `json:"serialNumber"`
Validity Validity `json:"validity"`
}
ClientCert contains fields related to TLS Client Certificates.
type JWK ¶
type JWK struct {
KeyType string `json:"kty"`
Curve string `json:"crv"`
X string `json:"x"`
Y string `json:"y"`
}
JWK is a JSON Web Key. It is a subset of the JWK spec, containing only the fields we need. See https://tools.ietf.org/html/rfc7517#section-4.1 for the full spec. JWK marshals to and unmarshals from a JSON string.
Source Files