auth

package

v0.17.0 Latest Latest Go to latest Published: Jun 11, 2026 License: BSD-3-Clause-Clear Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/opentdf/platform

Documentation ¶

Index ¶

Constants
Variables
func ContextWithAuthNInfo(ctx context.Context, key jwk.Key, accessToken jwt.Token, raw string) context.Context
func ContextWithPublicRoute(ctx context.Context, publicRoute bool) context.Context
func EnrichIncomingContextMetadataWithAuthn(ctx context.Context, l *logger.Logger, clientID string) context.Context
func GetAccessTokenFromContext(ctx context.Context, l *logger.Logger) jwt.Token
func GetClientIDFromContext(ctx context.Context, incoming bool) (string, error)
func GetJWKFromContext(ctx context.Context, l *logger.Logger) jwk.Key
func GetRawAccessTokenFromContext(ctx context.Context, l *logger.Logger) string
func PublicRouteFromContext(ctx context.Context) (bool, bool)

Constants ¶

View Source

const (
	AccessTokenKey = "access_token"
	ClientIDKey    = "client_id"
)

Variables ¶

View Source

var (
	ErrNoMetadataFound  = errors.New("no metadata found within context")
	ErrMissingClientID  = errors.New("missing authn idP clientID")
	ErrConflictClientID = errors.New("context metadata mistakenly has more than one authn idP clientID")
)

Functions ¶

func ContextWithAuthNInfo ¶

func ContextWithAuthNInfo(ctx context.Context, key jwk.Key, accessToken jwt.Token, raw string) context.Context

func ContextWithPublicRoute ¶ added in v0.17.0

func ContextWithPublicRoute(ctx context.Context, publicRoute bool) context.Context

ContextWithPublicRoute returns a child context carrying whether the request matched a configured public route.

func EnrichIncomingContextMetadataWithAuthn ¶ added in v0.11.0

func EnrichIncomingContextMetadataWithAuthn(ctx context.Context, l *logger.Logger, clientID string) context.Context

EnrichIncomingContextMetadataWithAuthn adds the access token and client ID to incoming context metadata

Adding the authn info to gRPC metadata propagates it across services rather than strictly in-process within Go alone

func GetAccessTokenFromContext ¶

func GetAccessTokenFromContext(ctx context.Context, l *logger.Logger) jwt.Token

func GetClientIDFromContext ¶ added in v0.11.0

func GetClientIDFromContext(ctx context.Context, incoming bool) (string, error)

GetClientIDFromContext retrieves the client ID from the metadata in the context

func GetJWKFromContext ¶

func GetJWKFromContext(ctx context.Context, l *logger.Logger) jwk.Key

func GetRawAccessTokenFromContext ¶

func GetRawAccessTokenFromContext(ctx context.Context, l *logger.Logger) string

func PublicRouteFromContext ¶ added in v0.17.0

func PublicRouteFromContext(ctx context.Context) (bool, bool)

PublicRouteFromContext returns whether the request matched a configured public route, if that state has been set by auth middleware.

Types ¶

This section is empty.

Source Files ¶

View all Source files

context_auth.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL