Documentation
¶
Index ¶
Constants ¶
View Source
const ServiceTokenHeader = "gitlab-iam-auth-token"
ServiceTokenHeader is the metadata key (gRPC) / HTTP header name that service-to-service callers of the auth service present their token under.
Variables ¶
This section is empty.
Functions ¶
func CorsHandler ¶
func ServiceTokenAuth ¶
ServiceTokenAuth returns middleware that validates the service token header. It wraps a handler and rejects requests where the header value does not match any of the expected tokens using constant-time comparison. Empty token values are ignored, allowing optional tokens (e.g. next_service_token) to be unset.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.