Documentation
¶
Overview ¶
Copyright 2023 Jesus Ruiz. All rights reserved. Use of this source code is governed by an Apache 2.0 license that can be found in the LICENSE file.
Index ¶
- func NewLogin(authenticate authenticate, callback func(context.Context, string) string, ...) *login
- func SetupServer(verifierUrl string, storage Storage, logger *slog.Logger, wrapServer bool, ...) chi.Router
- func StarDictFromFiberRequest(c *fiber.Ctx) *starlark.Dict
- func StarDictFromHttpRequest(request *http.Request) (*starlark.Dict, error)
- type Decision
- type PDP
- type Storage
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func SetupServer ¶
func SetupServer(verifierUrl string, storage Storage, logger *slog.Logger, wrapServer bool, extraOptions ...op.Option) chi.Router
SetupServer creates an OIDC server with the verifier URL passed
Use one of the pre-made clients in storage/clients.go or register a new one.
Types ¶
type Decision ¶
type Decision int
Decision can be Authenticate or Authorize
const Authenticate Decision = 1
const Authorize Decision = 2
type PDP ¶
type PDP struct {
// contains filtered or unexported fields
}
PDP implements a simple Policy Decision Point in Starlark
func (PDP) HttpHandler ¶
func (m PDP) HttpHandler(w http.ResponseWriter, r *http.Request)
func (*PDP) ParseAndCompileFile ¶
ParseAndCompileFile reads a file with Starlark code and compiles it, storing the resulting global dictionary for later usage. In particular, the compiled module should define two functions, one for athentication and the second for athorisation. ParseAndCompileFile can be called several times and will perform a new compilation every time, creating a new Thread and so the old ones will never be called again and eventually will be disposed.
func (PDP) TakeAuthnDecision ¶
func (m PDP) TakeAuthnDecision(decision Decision, r *http.Request, credential string, protectedResource string) (bool, error)
TakeAuthnDecision is called when a decision should be taken for either Athentication or Authorization. The type of decision to evaluate is passed in the Decision argument. The rest of the arguments contain the information required for the decision. They are: - the Verifiable Credential with the information from the caller needed for the decision - the protected resource that the caller identified in the Credential wants to access
Source Files