security

Feb 10, 2025

Changes in this version

type GenericOIDCClaims

+ Groups []string

+ func (g *GenericOIDCClaims) Memberships() []string

Feb 4, 2025

Changes in this version

type User

+ Project string

Nov 6, 2024

Changes in this version

type Option

+ func JWTParserOptions(opt jwt.ParserOption) Option

Aug 14, 2024

Changes in this version

type MultiIssuerUserGetterOption

+ func IssuerRetryInterval(duration time.Duration) MultiIssuerUserGetterOption

Mar 23, 2021

Changes in this version

type GenericOIDCClaims

+ func (g *GenericOIDCClaims) Username() string

Mar 19, 2021

Changes in this version

type GenericOIDCClaims

+ PreferredUsername string

type TokenCfg

+ PreferredName string

type User

+ Issuer string

+ Subject string

Mar 4, 2021

Changes in this version

+ func CreateToken(signer jose.Signer, cl interface{}, privateClaims ...interface{}) (string, error)

+ func CreateTokenAndKeys(cfg *TokenCfg) (token string, pubKey jose.JSONWebKey, privKey jose.JSONWebKey, err error)

+ func CreateWebkeyPair(alg jose.SignatureAlgorithm, use string, keylenBits int) (jose.JSONWebKey, jose.JSONWebKey, error)

+ func ExtractBearer(rq *http.Request) (string, error)

+ func GenerateSigningKey(alg jose.SignatureAlgorithm, bits int) (crypto.PublicKey, crypto.PrivateKey, error)

+ func GenerateTokenAndKeyServer(tc *TokenCfg, tokenProvider TokenProvider, opts ...KeyServerOption) (srv *httptest.Server, token string, err error)

+ func MustCreateTokenAndKeys(cfg *TokenCfg) (token string, pubKey jose.JSONWebKey, privKey jose.JSONWebKey)

+ func MustMakeSigner(alg jose.SignatureAlgorithm, k interface{}) jose.Signer

+ func ParseTokenClaimsUnvalidated(req *http.Request) (*jwt.Claims, error)

+ type Annotations map[string]string

type Claims

+ Roles []string

+ type GenericOIDC struct

+ func NewGenericOIDC(ic *IssuerConfig, opts ...GenericOIDCOption) (*GenericOIDC, error)

+ func (o *GenericOIDC) User(rq *http.Request) (*User, error)

+ type GenericOIDCCfg struct

+ SupportedSigningAlgs []string

+ Timeout time.Duration

+ UserExtractorFn GenericUserExtractorFn

+ type GenericOIDCClaims struct

+ EMail string

+ Name string

+ Roles []string

+ type GenericOIDCOption func(oidc *GenericOIDCCfg)

+ func AllowedSignAlgs(algs []string) GenericOIDCOption

+ func GenericUserExtractor(fn GenericUserExtractorFn) GenericOIDCOption

+ func Timeout(timeout time.Duration) GenericOIDCOption

+ type GenericUserExtractorFn func(ic *IssuerConfig, claims *GenericOIDCClaims) (*User, error)

+ type Issuer struct

+ func (i *Issuer) String() string

+ type IssuerConfig struct

+ Annotations Annotations

+ ClientID string

+ Issuer string

+ Tenant string

+ func (i *IssuerConfig) String() string

+ type IssuerListProvider func() ([]*IssuerConfig, error)

+ type IssuerNotFound struct

+ func NewIssuerNotFound() IssuerNotFound

+ func (i IssuerNotFound) Error() string

+ type KeyServerConfig struct

+ type KeyServerOption func(cfg *KeyServerConfig)

+ func KeyResponseTimeDelay(delay time.Duration) KeyServerOption

+ type MultiIssuerCache struct

+ func NewMultiIssuerCache(ilp IssuerListProvider, ugp UserGetterProvider, ...) (*MultiIssuerCache, error)

+ func (i *MultiIssuerCache) User(rq *http.Request) (*User, error)

+ type MultiIssuerUserGetterOption func(mic *MultiIssuerCache) *MultiIssuerCache

+ func IssuerReloadInterval(duration time.Duration) MultiIssuerUserGetterOption

+ func Logger(log logr.Logger) MultiIssuerUserGetterOption

+ type TokenCfg struct

+ Alg jose.SignatureAlgorithm

+ Audience []string

+ Email string

+ ExpiresAt time.Time

+ Id string

+ IssuedAt time.Time

+ IssuerUrl string

+ KeyBitlength int

+ Name string

+ Roles []string

+ Subject string

+ func DefaultTokenCfg() *TokenCfg

+ type TokenProvider func(cfg *TokenCfg) (string, jose.JSONWebKey, jose.JSONWebKey)

type User

+ func DefaultGenericUserExtractor(ic *IssuerConfig, claims *GenericOIDCClaims) (*User, error)

+ type UserGetterProvider func(ic *IssuerConfig) (UserGetter, error)

+ type UserGetterProxy struct

+ func NewUserGetterProxy(defaultUG UserGetter, opts ...UserGetterProxyOption) *UserGetterProxy

+ func (u *UserGetterProxy) User(rq *http.Request) (*User, error)

+ type UserGetterProxyOption func(ug *UserGetterProxy)

+ func UserGetterProxyMapping(issuer, clientid string, userGetter UserGetter) UserGetterProxyOption

Sep 8, 2020

Changes in this version

type Option

+ func AlgorithmsWhitelist(algNames []string) Option

Feb 13, 2020

Changes in this version

+ const AuthzHeaderKey

+ const SaltHeaderKey

+ const TsHeaderKey

+ func AddUserToken(rq *http.Request, token string)

+ func AddUserTokenToClientRequest(rq runtime.ClientRequest, token string)

+ func PutUserInContext(ctx context.Context, u *User) context.Context

+ type Claims struct

+ Audience interface{}

+ EMail string

+ FederatedClaims map[string]string

+ Groups []string

+ Name string

+ type CredsOpt func(*UserCreds)

+ func WithDex(d *Dex) CredsOpt

+ func WithHMAC(hma HMACAuth) CredsOpt

+ type Dex struct

+ func NewDex(baseurl string) (*Dex, error)

+ func (dx *Dex) User(rq *http.Request) (*User, error)

+ func (dx *Dex) With(opts ...Option) *Dex

+ type HMACAuth struct

+ AuthUser User

+ Lifetime time.Duration

+ Type string

+ func NewHMACAuth(authtype string, key []byte, opts ...HMACAuthOption) HMACAuth

+ func (hma *HMACAuth) AddAuth(rq *http.Request, t time.Time, body []byte)

+ func (hma *HMACAuth) AddAuthToClientRequest(rq runtime.ClientRequest, t time.Time)

+ func (hma *HMACAuth) AuthHeaders(method string, t time.Time) map[string]string

+ func (hma *HMACAuth) User(rq *http.Request) (*User, error)

+ func (hma *HMACAuth) UserFromRequestData(requestData RequestData) (*User, error)

+ type HMACAuthOption func(*HMACAuth)

+ func WithLifetime(max time.Duration) HMACAuthOption

+ func WithUser(u User) HMACAuthOption

+ type Option func(dex *Dex) *Dex

+ func UserExtractor(fn UserExtractorFn) Option

+ type RequestData struct

+ AuthzHeader string

+ Method string

+ SaltHeader string

+ TimestampHeader string

+ type RequestDataGetter func() RequestData

+ type ResourceAccess string

+ type User struct

+ EMail string

+ Groups []ResourceAccess

+ Name string

+ Tenant string

+ func GetUser(rq *http.Request) *User

+ func GetUserFromContext(ctx context.Context) *User

+ func (u *User) HasGroup(grps ...ResourceAccess) bool

+ type UserCreds struct

+ func NewCreds(opts ...CredsOpt) *UserCreds

+ func (uc *UserCreds) User(rq *http.Request) (*User, error)

+ type UserExtractorFn func(claims *Claims) (*User, error)

+ type UserGetter interface

+ User func(rq *http.Request) (*User, error)

+ type WrongHMAC struct

+ Got string

+ Want string

+ func (w *WrongHMAC) Error() string