extauthz

package

v0.4.1 Latest Latest Go to latest Published: Oct 1, 2025 License: Apache-2.0 Imports: 26 Imported by: 0

Details

View Source

const (
	HeaderForwardedClientCert = "x-forwarded-client-cert"
	HeaderAuthorization       = "authorization"
)

View Source

const (
	UNKNOWN checkResultCode = iota
	ALLOWED
	DENIED
	UNAUTHENTICATED

	ALWAYS_ALLOW = 100
)

View Source

var (
	ReExSubject        = regexp.MustCompile(`Subject="([^"]+)"`)
	ErrSubjectNotFound = errors.New("subject not found")
)

This section is empty.

type Server struct {
	// contains filtered or unexported fields
}

func NewServer(opts ...ServerOption) (*Server, error)

NewServer creates a new server and applies the given options.

func (srv *Server) Check(ctx context.Context, req *envoy_auth.CheckRequest) (*envoy_auth.CheckResponse, error)

Check processes the JWT token and/or client certificate to authorize the request.

type ServerOption func(*Server) error

ServerOption is used to configure a server.

func WithClientDataFactory(cdp *clientdata.Factory) ServerOption

func WithFeatureGates(fg *commoncfg.FeatureGates) ServerOption

func WithJWTHandler(hdl *jwthandler.Handler) ServerOption

func WithPolicyEngine(pe policies.Engine) ServerOption

func WithTrustedSubjects(m map[string]string) ServerOption