auth

Feb 26, 2025

Changes in this version

type Middleware

+ func (m *Middleware) ParseAndValidateJWT(rawToken string) (Token, error)

Feb 19, 2024

Changes in this version

type Token

+ func (t Token) Groups() []string

+ func (t Token) ScimID() string

Oct 16, 2023 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type Token

+ func (t Token) AppTID() string

+ func (t Token) Azp() string

Jul 24, 2023 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Mar 9, 2022 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Mar 7, 2022 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

+ type StdToken struct

+ func (t StdToken) Audience() []string

+ func (t StdToken) CustomIssuer() string

+ func (t StdToken) Email() string

+ func (t StdToken) Expiration() time.Time

+ func (t StdToken) FamilyName() string

+ func (t StdToken) GetAllClaimsAsMap() map[string]interface{}

+ func (t StdToken) GetClaimAsMap(claim string) (map[string]interface{}, error)

+ func (t StdToken) GetClaimAsString(claim string) (string, error)

+ func (t StdToken) GetClaimAsStringSlice(claim string) ([]string, error)

+ func (t StdToken) GivenName() string

+ func (t StdToken) HasClaim(claim string) bool

+ func (t StdToken) IsExpired() bool

+ func (t StdToken) IssuedAt() time.Time

+ func (t StdToken) Issuer() string

+ func (t StdToken) NotBefore() time.Time

+ func (t StdToken) Subject() string

+ func (t StdToken) TokenValue() string

+ func (t StdToken) UserUUID() string

+ func (t StdToken) ZoneID() string

Dec 10, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

+ var ErrClaimNotExists = errors.New("claim does not exist in the token")

+ var ErrNoClientCert = errors.New("there is no x509 client certificate provided")

+ var ErrNoToken = errors.New("there is no token provided")

+ type Certificate struct

+ func ClientCertificateFromCtx(r *http.Request) *Certificate

+ func (c *Certificate) GetThumbprint() string

type ContextKey

+ const ClientCertificateCtxKey

type Middleware

+ func (m *Middleware) AuthenticateWithProofOfPossession(r *http.Request) (Token, *Certificate, error)

+ func (m *Middleware) GetTokenFlows() (*tokenclient.TokenFlows, error)

type Token

+ CustomIssuer func() string

+ GetClaimAsMap func(claim string) (map[string]interface{}, error)

+ HasClaim func(claim string) bool

Sep 7, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Jul 27, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Jul 27, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type Token

+ IasIssuer func() string

Jun 29, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type OAuthConfig

+ GetDomains func() []string

May 4, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type Token

+ func NewToken(encodedToken string) (Token, error)

May 3, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type ContextKey

+ const TokenCtxKey

+ type Token interface

+ Audience func() []string

+ Email func() string

+ Expiration func() time.Time

+ FamilyName func() string

+ GetAllClaimsAsMap func() map[string]interface{}

+ GetClaimAsString func(claim string) (string, error)

+ GetClaimAsStringSlice func(claim string) ([]string, error)

+ GivenName func() string

+ IsExpired func() bool

+ IssuedAt func() time.Time

+ Issuer func() string

+ NotBefore func() time.Time

+ Subject func() string

+ TokenValue func() string

+ UserUUID func() string

+ ZoneID func() string

+ func TokenFromCtx(r *http.Request) Token

Mar 19, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type MockConfig

+ Certificate string

+ CertificateExpiresAt string

+ Key string

+ OsbURL string

+ ProofTokenURL string

+ ZoneUUID uuid.UUID

+ func (c MockConfig) GetCertificate() string

+ func (c MockConfig) GetCertificateExpiresAt() string

+ func (c MockConfig) GetKey() string

+ func (c MockConfig) GetOsbURL() string

+ func (c MockConfig) GetProofTokenURL() string

+ func (c MockConfig) GetZoneUUID() uuid.UUID

type OAuthConfig

+ GetCertificate func() string

+ GetCertificateExpiresAt func() string

+ GetKey func() string

+ GetProofTokenURL func() string

+ GetZoneUUID func() uuid.UUID

Feb 10, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Feb 10, 2021 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type OIDCClaims

+ func (c OIDCClaims) GetAllCustomClaims() map[string]interface{}

Nov 18, 2020 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

+ type ContextKey int

+ const UserContextKey

+ type Middleware struct

+ func NewMiddleware(oAuthConfig OAuthConfig, options Options) *Middleware

+ func (m *Middleware) Authenticate(r *http.Request) (*OIDCClaims, error)

+ func (m *Middleware) AuthenticationHandler(next http.Handler) http.Handler

+ func (m *Middleware) ClearCache()

Nov 17, 2020 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

type OIDCClaims

+ func GetClaims(r *http.Request) *OIDCClaims

Nov 12, 2020 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

+ type ErrorHandler func(w http.ResponseWriter, r *http.Request, err error)

+ type UserContext string

Nov 10, 2020 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Nov 10, 2020 GO-2023-2400

  GO-2023-2400: Escalation of privileges in github.com/sap/cloud-security-client-go

Changes in this version

+ func DefaultErrorHandler(w http.ResponseWriter, r *http.Request, err error)

+ type AuthMiddleware struct

+ func NewAuthMiddleware(oAuthConfig OAuthConfig, options Options) *AuthMiddleware

+ func (m *AuthMiddleware) Authenticate(r *http.Request) (*OIDCClaims, error)

+ func (m *AuthMiddleware) ClearCache()

+ func (m *AuthMiddleware) Handler(h http.Handler) http.Handler

+ func (m *AuthMiddleware) ParseAndValidateJWT(rawToken string) (*jwt.Token, error)

+ type MockConfig struct

+ ClientID string

+ ClientSecret string

+ Domain string

+ URL string

+ func (c MockConfig) GetClientID() string

+ func (c MockConfig) GetClientSecret() string

+ func (c MockConfig) GetDomain() string

+ func (c MockConfig) GetURL() string

+ type MockServer struct

+ Config *MockConfig

+ JWKsHitCounter int

+ RSAKey *rsa.PrivateKey

+ Server *httptest.Server

+ WellKnownHitCounter int

+ func NewOIDCMockServer() (*MockServer, error)

+ func (m *MockServer) ClearAllHitCounters()

+ func (m *MockServer) DefaultClaims() OIDCClaims

+ func (m *MockServer) DefaultHeaders() map[string]interface{}

+ func (m *MockServer) JWKsHandler(w http.ResponseWriter, _ *http.Request)

+ func (m *MockServer) SignToken(claims OIDCClaims, header map[string]interface{}) (string, error)

+ func (m *MockServer) SignTokenWithAdditionalClaims(claims OIDCClaims, additionalClaims map[string]interface{}, ...) (string, error)

+ func (m *MockServer) WellKnownHandler(w http.ResponseWriter, _ *http.Request)

+ type OAuthConfig interface

+ GetClientID func() string

+ GetClientSecret func() string

+ GetDomain func() string

+ GetURL func() string

+ type OIDCClaims struct

+ Email string

+ FamilyName string

+ GivenName string

+ UserUUID string

+ ZoneID string

+ func (c OIDCClaims) GetClaimAsString(claim string) (string, error)

+ func (c OIDCClaims) GetClaimAsStringSlice(claim string) ([]string, error)

+ type OIDCClaimsBuilder struct

+ func NewOIDCClaimsBuilder(base OIDCClaims) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) Audience(aud ...string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) Build() OIDCClaims

+ func (b *OIDCClaimsBuilder) Email(email string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) ExpiresAt(expiresAt time.Time) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) FamilyName(familyName string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) GivenName(givenName string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) ID(id string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) IssuedAt(issuedAt time.Time) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) Issuer(issuer string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) NotBefore(notBefore time.Time) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) Subject(subject string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) UserUUID(userUUID string) *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) WithoutAudience() *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) WithoutExpiresAt() *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) WithoutIssuedAt() *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) WithoutNotBefore() *OIDCClaimsBuilder

+ func (b *OIDCClaimsBuilder) ZoneID(zoneID string) *OIDCClaimsBuilder

+ type OIDCHeaderBuilder struct

+ func NewOIDCHeaderBuilder(base map[string]interface{}) *OIDCHeaderBuilder

+ func (b *OIDCHeaderBuilder) Alg(alg string) *OIDCHeaderBuilder

+ func (b *OIDCHeaderBuilder) Build() map[string]interface{}

+ func (b *OIDCHeaderBuilder) KeyID(keyID string) *OIDCHeaderBuilder

+ type Options struct

+ ErrorHandler errorHandler

+ HTTPClient *http.Client

+ UserContext string