Documentation
¶
Overview ¶
Package server exposes the GraphQL API over HTTP: POST /graphql, an embedded GraphiQL page, and health endpoints. The schema is swappable at runtime (watch mode): requests in flight keep the schema they started with.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Authenticator ¶
type Authenticator struct {
// contains filtered or unexported fields
}
Authenticator turns an HTTP request into (claims, role) per the configured claim source: verified JWT, trusted gateway headers, or none.
func NewAuthenticator ¶
func NewAuthenticator(cfg config.RLS) *Authenticator
func (*Authenticator) Authenticate ¶
Authenticate never fails open: a present-but-invalid credential is an error; an absent credential yields the anonymous role.
Click to show internal directories.
Click to hide internal directories.