validator

type AuthorizedUsersCache interface {
	Match(string, string) bool
	WatchChanges()
	Close()
}

type BasicAuthValidator struct {
	// contains filtered or unexported fields
}

type BasicAuthValidatorSpec struct {
	Mode string `json:"mode,omitempty" jsonschema:"enum=FILE,enum=ETCD,enum=LDAP"`
	// Required for 'FILE' mode.
	// UserFile is path to file containing encrypted user credentials in apache2-utils/htpasswd format.
	// To add user `userY`, use `sudo htpasswd /etc/apache2/.htpasswd userY`
	// Reference: https://manpages.debian.org/testing/apache2-utils/htpasswd.1.en.html#EXAMPLES
	UserFile string `json:"userFile,omitempty"`
	// Required for 'ETCD' mode.
	// When EtcdPrefix is specified, verify user credentials from etcd. Etcd should store them:
	// key: /custom-data/{etcdPrefix}/{$key}
	// value:
	//   key: "$key"
	//   username: "$username" # optional
	//   password: "$password"
	// Username and password are used for Basic Authentication. If "username" is empty, the value of "key"
	// entry is used as username for Basic Auth.
	EtcdPrefix string `json:"etcdPrefix,omitempty"`
	// Required for 'LDAP' mode.
	LDAP *ldapSpec `json:"ldap,omitempty" jsonshema:"omitempty"`
}

type JWTValidator struct {
	// contains filtered or unexported fields
}

type JWTValidatorSpec struct {
	Algorithm string `` /* 139-byte string literal not displayed */
	// PublicKey is in hex encoding
	PublicKey string `json:"publicKey" jsonschema:"pattern=^$|^[A-Fa-f0-9]+$"`
	// Secret is in hex encoding
	Secret string `json:"secret" jsonschema:"pattern=^$|^[A-Fa-f0-9]+$"`
	// CookieName specifies the name of a cookie, if not empty, and the cookie with
	// this name both exists and has a non-empty value, its value is used as token
	// string, the Authorization header is used to get the token string otherwise.
	CookieName string `json:"cookieName,omitempty"`
}

type OAuth2JWT struct {
	Algorithm string `json:"algorithm" jsonschema:"enum=HS256,enum=HS384,enum=HS512"`
	// Secret is in hex encoding
	Secret string `json:"secret" jsonschema:"required,pattern=^[A-Fa-f0-9]+$"`
	// contains filtered or unexported fields
}

type OAuth2TokenIntrospect struct {
	EndPoint     string `json:"endPoint" jsonschema:"required"`
	BasicAuth    string `json:"basicAuth,omitempty"`
	ClientID     string `json:"clientId,omitempty"`
	ClientSecret string `json:"clientSecret,omitempty"`
	InsecureTLS  bool   `json:"insecureTls,omitempty"`
}

type OAuth2Validator struct {
	// contains filtered or unexported fields
}

type OAuth2ValidatorSpec struct {
	TokenIntrospect *OAuth2TokenIntrospect `json:"tokenIntrospect,omitempty"`
	JWT             *OAuth2JWT             `json:"jwt,omitempty"`
}

type Spec struct {
	filters.BaseSpec `json:",inline"`

	Headers   *httpheader.ValidatorSpec `json:"headers,omitempty"`
	JWT       *JWTValidatorSpec         `json:"jwt,omitempty"`
	Signature *signer.Spec              `json:"signature,omitempty"`
	OAuth2    *OAuth2ValidatorSpec      `json:"oauth2,omitempty"`
	BasicAuth *BasicAuthValidatorSpec   `json:"basicAuth,omitempty"`
}

type Validator struct {
	// contains filtered or unexported fields
}