Documentation
¶
Overview ¶
Package auth configures the original Datly JWT verification contract for explicitly declared input codecs. It never injects an ambient principal.
Index ¶
Constants ¶
View Source
const JwtClaim = "JwtClaim"
Variables ¶
This section is empty.
Functions ¶
func VerifiesJWT ¶
VerifiesJWT recognizes the configured codec actually constructed by Service. Names, marker interfaces, and unrelated codec implementations cannot assert this authority. No keys or verifier configuration are exposed.
Types ¶
type ClaimPolicy ¶ added in v1.1.0
type ClaimPolicy struct {
Issuer string `json:"Issuer,omitempty" yaml:"Issuer,omitempty"`
Audience string `json:"Audience,omitempty" yaml:"Audience,omitempty"`
RequireSubject bool `json:"RequireSubject,omitempty" yaml:"RequireSubject,omitempty"`
}
ClaimPolicy binds a successfully verified JWT to the intended issuer, audience and principal. It is optional so existing Datly deployments retain their current verifier contract until they opt in.
type Config ¶
type Config struct {
JWTValidator *verifier.Config
ClaimPolicy *ClaimPolicy
}
Config retains the original Datly JWTValidator configuration, including CertURL and RSA public-key resources. Verification policy stays with Scy.
Source Files
Directories
Click to show internal directories.
Click to hide internal directories.