oidc

type AdminRule ¶ added in v0.3.3

type AdminRule struct {
	Key   string
	Value string
}

AdminRule describes the JWT claim that grants admin access. A principal is admin when the claim named Key equals Value.

type AuthHeader ¶ added in v0.3.3

type AuthHeader string

AuthHeader is the value of the HTTP Authorization header passed to Authenticate.

type Config ¶

type Config struct {
	Issuer    string
	Audience  string
	JWKSURL   string
	AdminRule AdminRule
}

type Principal ¶

type Principal struct {
	Subject string
	Claims  map[string]any
	IsAdmin bool
}

type StaticTokenValidator ¶

type StaticTokenValidator struct {
	// contains filtered or unexported fields
}

StaticTokenValidator authenticates requests using a single shared secret token. Every valid request is assigned a fixed subject ("static") with admin privileges.

This is intentionally simple — suitable for single-operator evaluation and trusted internal networks. Use OIDC (Validator) for multi-user environments.

func NewStaticToken(token string) *StaticTokenValidator

func (v *StaticTokenValidator) Authenticate(_ context.Context, h AuthHeader) (*Principal, error)

type Validator ¶

type Validator struct {
	// contains filtered or unexported fields
}

func New(cfg Config) *Validator

func (v *Validator) Authenticate(ctx context.Context, h AuthHeader) (*Principal, error)