Documentation
¶
Overview ¶
Package auth 提供 grpc-kit 微服务脚手架的认证授权模块
Index ¶
- type Client
- type Config
- type IDTokenClaims
- func (i *IDTokenClaims) GetAccessToken(signeKey string) (string, error)
- func (i *IDTokenClaims) GetAccessTokenRSA(signeKey *rsa.PrivateKey) (string, error)
- func (i *IDTokenClaims) GetMustUserID() int64
- func (i *IDTokenClaims) SetEmail(email string) *IDTokenClaims
- func (i *IDTokenClaims) SetExpiresAt(expiresIn int64) *IDTokenClaims
- func (i *IDTokenClaims) SetGroups(groups []string) *IDTokenClaims
- func (i *IDTokenClaims) SetSubject(subject string) *IDTokenClaims
- type OPAEnvoyPluginConfig
- type OPARegoConfig
- type OPASDKConfig
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
Client 认证鉴权客户端
func (*Client) AuthMetadata ¶
AuthMetadata 把 http 请求信息转换为 grpc 的 metadata 用于鉴权
func (*Client) GetRBACData ¶ added in v0.3.8
type Config ¶
type Config struct {
PackageName string
OPASDK *OPASDKConfig
OPARego *OPARegoConfig
OPAEnvoy *OPAEnvoyPluginConfig
}
Config xx
type IDTokenClaims ¶
type IDTokenClaims struct {
jwt.RegisteredClaims
Email string `json:"email,omitempty"`
EmailVerified bool `json:"email_verified,omitempty"`
// 注意:在这里 "Groups" 对应平台 "lion_roles" 表中的 "name" 而非 "lion_groups" 内容。
Groups []string `json:"groups,omitempty"`
FederatedClaims map[string]string `json:"federated_claims,omitempty"`
Appid string `json:"appid,omitempty"`
Tenant string `json:"tenant,omitempty"`
Username string `json:"username,omitempty"`
Nickname string `json:"nickname,omitempty"`
}
IDTokenClaims 用于框架jwt的数据结构 部分参考:https://openid.net/specs/openid-connect-core-1_0.html#IDToken
func ParseIDTokenClaims ¶
func ParseIDTokenClaims(token string) (*IDTokenClaims, error)
ParseIDTokenClaims 解析 token
func (*IDTokenClaims) GetAccessToken ¶
func (i *IDTokenClaims) GetAccessToken(signeKey string) (string, error)
GetAccessToken 获取或生成 jwt token
func (*IDTokenClaims) GetAccessTokenRSA ¶
func (i *IDTokenClaims) GetAccessTokenRSA(signeKey *rsa.PrivateKey) (string, error)
func (*IDTokenClaims) GetMustUserID ¶
func (i *IDTokenClaims) GetMustUserID() int64
func (*IDTokenClaims) SetEmail ¶
func (i *IDTokenClaims) SetEmail(email string) *IDTokenClaims
func (*IDTokenClaims) SetExpiresAt ¶
func (i *IDTokenClaims) SetExpiresAt(expiresIn int64) *IDTokenClaims
func (*IDTokenClaims) SetGroups ¶
func (i *IDTokenClaims) SetGroups(groups []string) *IDTokenClaims
func (*IDTokenClaims) SetSubject ¶
func (i *IDTokenClaims) SetSubject(subject string) *IDTokenClaims
type OPAEnvoyPluginConfig ¶
type OPAEnvoyPluginConfig struct {
GRPCAddress string
}
type OPARegoConfig ¶
type OPASDKConfig ¶
type OPASDKConfig struct {
Config string
}
Click to show internal directories.
Click to hide internal directories.