trust

package
v2.6.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 6, 2026 License: Apache-2.0 Imports: 17 Imported by: 0

Documentation

Overview

Package trust verifies external OIDC tokens and evaluates compiled trust bindings.

Index

Constants

View Source 
const (
	// MaxJWTBytes is the shared maximum compact external JWT size.
	MaxJWTBytes = 64 << 10
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Diagnostic 

type Diagnostic struct {
	BindingID string
	Match     bool
	Reason    string
}

Diagnostic records a bounded, token-free binding evaluation result.

type Result 

type Result struct {
	IssuerID, Issuer, UpstreamSubject string
	Claims                            map[string]any
	Binding                           *config.EffectiveTrustBinding
	Diagnostics                       []Diagnostic
}

Result contains verified provenance and the exactly matched binding.

type Service 

type Service struct {
	// contains filtered or unexported fields
}

Service performs external verification and policy evaluation.

func NewService 

func NewService(cfg *config.Config, resolver policyResolver) *Service

NewService constructs a verifier with bounded HTTP behavior.

func (*Service) VerifyAndEvaluate 

func (s *Service) VerifyAndEvaluate(ctx context.Context, raw, clientID string) (*Result, error)

VerifyAndEvaluate runs the complete production verification and exactly-one evaluator.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.