validator

type AuthorizedUsersCache interface {
	Match(string, string) bool
	WatchChanges()
	Close()
}

type BasicAuthValidator struct {
	// contains filtered or unexported fields
}

type BasicAuthValidatorSpec struct {
	Mode string `yaml:"mode" jsonschema:"omitempty,enum=FILE,enum=ETCD"`
	// Required for 'FILE' mode.
	// UserFile is path to file containing encrypted user credentials in apache2-utils/htpasswd format.
	// To add user `userY`, use `sudo htpasswd /etc/apache2/.htpasswd userY`
	// Reference: https://manpages.debian.org/testing/apache2-utils/htpasswd.1.en.html#EXAMPLES
	UserFile string `yaml:"userFile" jsonschema:"omitempty"`
	// Required for 'ETCD' mode.
	// When EtcdPrefix is specified, verify user credentials from etcd. Etcd should store them:
	// key: /custom-data/{etcdPrefix}/{$key}
	// value:
	//   key: "$key"
	//   username: "$username" # optional
	//   password: "$password"
	// Username and password are used for Basic Authentication. If "username" is empty, the value of "key"
	// entry is used as username for Basic Auth.
	EtcdPrefix string `yaml:"etcdPrefix" jsonschema:"omitempty"`
}

type JWTValidator struct {
	// contains filtered or unexported fields
}

type JWTValidatorSpec struct {
	Algorithm string `yaml:"algorithm" jsonschema:"enum=HS256,enum=HS384,enum=HS512"`
	// Secret is in hex encoding
	Secret string `yaml:"secret" jsonschema:"required,pattern=^[A-Fa-f0-9]+$"`
	// CookieName specifies the name of a cookie, if not empty, and the cookie with
	// this name both exists and has a non-empty value, its value is used as token
	// string, the Authorization header is used to get the token string otherwise.
	CookieName string `yaml:"cookieName" jsonschema:"omitempty"`
}

type OAuth2JWT struct {
	Algorithm string `yaml:"algorithm" jsonschema:"enum=HS256,enum=HS384,enum=HS512"`
	// Secret is in hex encoding
	Secret string `yaml:"secret" jsonschema:"required,pattern=^[A-Fa-f0-9]+$"`
	// contains filtered or unexported fields
}

type OAuth2TokenIntrospect struct {
	EndPoint     string `yaml:"endPoint" jsonschema:"required"`
	BasicAuth    string `yaml:"basicAuth" jsonschema:"omitempty"`
	ClientID     string `yaml:"clientId" jsonschema:"omitempty"`
	ClientSecret string `yaml:"clientSecret" jsonschema:"omitempty"`
	InsecureTLS  bool   `yaml:"insecureTls"`
}

type OAuth2Validator struct {
	// contains filtered or unexported fields
}

type OAuth2ValidatorSpec struct {
	TokenIntrospect *OAuth2TokenIntrospect `yaml:"tokenIntrospect" jsonschema:"omitempty"`
	JWT             *OAuth2JWT             `yaml:"jwt" jsonschema:"omitempty"`
}

type Spec struct {
	Headers   *httpheader.ValidatorSpec `yaml:"headers,omitempty" jsonschema:"omitempty"`
	JWT       *JWTValidatorSpec         `yaml:"jwt,omitempty" jsonschema:"omitempty"`
	Signature *signer.Spec              `yaml:"signature,omitempty" jsonschema:"omitempty"`
	OAuth2    *OAuth2ValidatorSpec      `yaml:"oauth2,omitempty" jsonschema:"omitempty"`
	BasicAuth *BasicAuthValidatorSpec   `yaml:"basicAuth,omitempty" jsonschema:"omitempty"`
}

type Validator struct {
	// contains filtered or unexported fields
}