jwt

type ClaimsAuthoriser ¶

type ClaimsAuthoriser struct {
	Predicate jwt.ClaimPredicate
}

ClaimsAuthoriser checks if the request satisfies a claim predicate.

func (a *ClaimsAuthoriser) Wrap(next http.Handler) http.Handler

type Handler ¶

type Handler struct {
	// contains filtered or unexported fields
}

Handler handles JWT authentication and sets the authenticated principal in the context.

func NewHandler(validator jwt.TokenValidator, cookieName string, logger zerolog.Logger, opts ...jwtmiddleware.Option) *Handler

func (h *Handler) Wrap(next http.Handler) http.Handler

type ResourceAuthoriser ¶

type ResourceAuthoriser struct {
	Service       string
	DefaultAction string
}

ResourceAuthoriser handles resource-level permissions (scopes).

func (a *ResourceAuthoriser) RequireScope(resource, action string) func(http.Handler) http.Handler

type Scope ¶

type Scope struct {
	Service  string
	Resource string
	Action   string
}

func ScopesFromContext(ctx context.Context) ([]*Scope, bool)

func (s *Scope) String() string