protocol

type ClaimTrustLevel ¶ added in v2.0.13

type ClaimTrustLevel int

ClaimTrustLevel controls which claim-shaped metadata keys are accepted when reconstructing auth claims on consumers.

const (
	// TrustNone drops all claim-shaped keys (push default via SanitizeInbound false).
	TrustNone ClaimTrustLevel = iota
	// TrustTenancyOnly keeps tenant/partition/identity keys but strips roles/service_name
	// so metadata cannot force tenancy.Claims.Skip via roles=internal.
	TrustTenancyOnly
	// TrustAll accepts full ClaimsFromMap input (legacy pull default).
	TrustAll
)

type CloudEvents ¶

type CloudEvents struct{}

CloudEvents decodes CloudEvents 1.0 binary and structured content modes.

func (c CloudEvents) Decode(r *http.Request) (*Inbound, error)

func (CloudEvents) Match(r *http.Request) bool

func (CloudEvents) Name() string

type CloudTasks ¶

type CloudTasks struct{}

CloudTasks matches Cloud Tasks push requests and maps headers into metadata.

func (CloudTasks) Decode(r *http.Request) (*Inbound, error)

func (CloudTasks) Match(r *http.Request) bool

func (CloudTasks) Name() string

type Codec ¶

type Codec interface {
	Name() string
	Match(r *http.Request) bool
	Decode(r *http.Request) (*Inbound, error)
}

Codec decodes an HTTP push request into body + metadata.

func DefaultCodecs() []Codec

func SelectCodec(protocol string, r *http.Request, codecs []Codec) Codec

type GCPPubSub ¶ added in v2.0.10

type GCPPubSub struct{}

GCPPubSub decodes Google Cloud Pub/Sub push envelopes:

{
  "message": {
    "data": "<base64>",
    "attributes": { ... },
    "messageId": "...",
    "publishTime": "..."
  },
  "subscription": "projects/.../subscriptions/..."
}

See https://cloud.google.com/pubsub/docs/push#receive_push

func (GCPPubSub) Decode(r *http.Request) (*Inbound, error)

func (GCPPubSub) Match(r *http.Request) bool

func (GCPPubSub) Name() string

type Inbound ¶

type Inbound struct {
	Body     []byte
	Metadata map[string]string
}

Inbound is a decoded push message ready for processDelivery.

type Raw ¶

type Raw struct{}

Raw decodes a plain HTTP body with a minimal safe header allowlist.

func (Raw) Decode(r *http.Request) (*Inbound, error)

func (Raw) Match(_ *http.Request) bool

func (Raw) Name() string