extauthz

package

v0.2.1 Latest Latest Go to latest Published: Jul 11, 2025 License: Apache-2.0 Imports: 21 Imported by: 0

Details

View Source

const (
	HeaderForwardedClientCert = "x-forwarded-client-cert"
	HeaderAuthorization       = "authorization"
)

View Source

const (
	User          userType = "user"
	TechnicalUser userType = "technical-user"
	System        userType = "system"
)

View Source

const (
	UNKNOWN checkResultCode = iota
	ALLOWED
	DENIED
	UNAUTHENTICATED
)

This section is empty.

This section is empty.

type Server struct {
	// contains filtered or unexported fields
}

func NewServer(signingKeyFunc SigningKeyFunc, opts ...ServerOption) (*Server, error)

NewServer creates a new server and applies the given options.

func (srv *Server) Check(ctx context.Context, req *envoy_auth.CheckRequest) (*envoy_auth.CheckResponse, error)

Check processes the JWT token and/or client certificate to authorize the request.

type ServerOption func(*Server) error

ServerOption is used to configure a server.

func WithEnrichHeaderWithRegion(b bool) ServerOption

func WithEnrichHeaderWithType(b bool) ServerOption

func WithJWTHandler(hdl *jwthandler.Handler) ServerOption

func WithPolicyEngine(pe policyEngine) ServerOption

func WithTrustedSubjects(m map[string]string) ServerOption

type SigningKeyFunc func() (string, *rsa.PrivateKey, error)

SigningKeyFunc is a function that returns a private key and its ID.