Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct {
// common for type=oidc and type=jwt
JWTSupportedAlgs []string `json:",omitempty"`
BoundAudiences []string `json:",omitempty"`
ClaimMappings map[string]string `json:",omitempty"`
ListClaimMappings map[string]string `json:",omitempty"`
OIDCDiscoveryURL string `json:",omitempty"`
OIDCDiscoveryCACert string `json:",omitempty"`
// just for type=jwt
JWKSURL string `json:",omitempty"`
JWKSCACert string `json:",omitempty"`
JWTValidationPubKeys []string `json:",omitempty"`
BoundIssuer string `json:",omitempty"`
ExpirationLeeway time.Duration `json:",omitempty"`
NotBeforeLeeway time.Duration `json:",omitempty"`
ClockSkewLeeway time.Duration `json:",omitempty"`
// contains filtered or unexported fields
}
Config is the collection of all settings that pertain to doing OIDC-based authentication and direct JWT-based authentication processes.
type Validator ¶
type Validator struct {
// contains filtered or unexported fields
}
Validator is the wrapper around the go-sso library that also conforms to the authmethod.Validator interface.
func NewValidator ¶
func NewValidator(logger hclog.Logger, method *structs.ACLAuthMethod) (*Validator, error)
func (*Validator) NewIdentity ¶
func (v *Validator) NewIdentity() *authmethod.Identity
NewIdentity implements authmethod.Validator.
func (*Validator) ValidateLogin ¶
func (v *Validator) ValidateLogin(ctx context.Context, loginToken string) (*authmethod.Identity, error)
ValidateLogin implements authmethod.Validator.
Source Files
Click to show internal directories.
Click to hide internal directories.