Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AssertWIT ¶
AssertWIT takes a string representation of the workload identity token and asserts its contents based on the WIMSE S2S draft conditions for the JWS claims https://www.ietf.org/archive/id/draft-ietf-wimse-s2s-protocol-07.html#name-the-workload-identity-token
func GetWITHTTPSigner ¶
func GetWITHTTPSigner(witSVIDKey string, signedHeaders []string, opts ...SignerOption) (*httpsign.Signer, error)
GetWITHTTPSigner takes a witSVIDKey (i.e. the private key provided by the identity server issuing WIT-SVIDs) in string format and a slice of signed headers before returning an httpsign.Signer instance to make WIMSE HTTP signatures requests with
Types ¶
type SignerOption ¶
type SignerOption func(*httpsign.SignConfig)
func WithClaims ¶
func WithClaims(claims *jwt.Claims) SignerOption
WithClaims sets expiry based on JWT claims
func WithNonce ¶
func WithNonce(nonce string) SignerOption
WithNonce sets the nonce in the signer config Note that a unique nonce is the responsibility of the request sender per the WIMSE S2S draft https://www.ietf.org/archive/id/draft-ietf-wimse-s2s-protocol-07.html#section-3.3-14