oidc

type Config ¶

type Config struct {
	Issuer     string
	Audience   string
	JWKSURL    string
	AdminClaim string
	AdminValue string
}

type Principal ¶

type Principal struct {
	Subject string
	Claims  map[string]any
	IsAdmin bool
}

type StaticTokenValidator ¶

type StaticTokenValidator struct {
	// contains filtered or unexported fields
}

StaticTokenValidator authenticates requests using a single shared secret token. Every valid request is assigned a fixed subject ("static") with admin privileges.

This is intentionally simple — suitable for single-operator evaluation and trusted internal networks. Use OIDC (Validator) for multi-user environments.

func NewStaticToken(token string) *StaticTokenValidator

func (v *StaticTokenValidator) Authenticate(_ context.Context, authHeader string) (*Principal, error)

type Validator ¶

type Validator struct {
	// contains filtered or unexported fields
}

func New(cfg Config) *Validator

func (v *Validator) Authenticate(ctx context.Context, authHeader string) (*Principal, error)