jwt

type Authenticator ¶

type Authenticator interface {
	authentication.RequestAuthenticator
	TokenParser
}

type JWTAuthenticator ¶

type JWTAuthenticator struct {
	// contains filtered or unexported fields
}

JWTAuthenticator is an authenticator responsible for handling JWT tokens from a client.

func NewAuthenticator(refreshURL string) *JWTAuthenticator

func NewAuthenticatorWithHTTPClient(
	client *http.Client,
	refreshURL string,
) *JWTAuthenticator

func (j *JWTAuthenticator) Authenticate(req *http.Request) (authentication.AuthInfo, error)

func (j *JWTAuthenticator) AuthenticateLoginRequest(
	ctx context.Context,
	_, _ string,
	authParams authentication.AuthParams,
) (authentication.AuthInfo, error)

func (j *JWTAuthenticator) Parse(ctx context.Context, tok string) (jwt.Token, authentication.Entity, error)

func (j *JWTAuthenticator) RegisterJWKSCache(ctx context.Context) error

type PermissionDelegator ¶

type PermissionDelegator struct {
	// Token is the authenticated context to answer all authorization questions
	// from.
	Token jwt.Token
}

PermissionDelegator is responsible for handling authorization questions within the context of the JWT it has. It implements authentication.PermissionDelegator interface.

func (p *PermissionDelegator) PermissionError(
	subject names.Tag,
	perm permission.Access,
) error

func (p *PermissionDelegator) SubjectPermissions(
	e authentication.Entity,
	subject names.Tag,
) (a permission.Access, err error)

type TokenEntity ¶

type TokenEntity struct {
	User names.UserTag
}

TokenEntity represents the entity found within a JWT token and conforms to state.Entity

func (t TokenEntity) Tag() names.Tag

type TokenParser ¶

type TokenParser interface {
	// Parse parses the supplied token string and returns both the constructed
	// jwt and the entity found within the token.
	Parse(ctx context.Context, tok string) (jwt.Token, authentication.Entity, error)
}

TokenParser parses a jwt token returning the token and entity derived from the token subject.