ingress

type DomainFilter ¶

type DomainFilter interface {
	Filter(r *http.Request) *UserInfo
}

type EscapedCertFilter ¶ added in v0.1.6

type EscapedCertFilter struct {
	// contains filtered or unexported fields
}

EscapedCertFilter retrieves user information from a full client certificate in PEM format

func NewEscapedCertFilter(header string) *EscapedCertFilter

func (f *EscapedCertFilter) Filter(r *http.Request) *UserInfo

type FilterMode ¶ added in v0.3.0

type FilterMode string

const (
	FilterNGINX       FilterMode = "nginx"
	FilterHAProxy     FilterMode = "haproxy"
	FilterEscapedCert FilterMode = "x509_escaped"
	FilterTLS         FilterMode = "x509"
)

type HAProxyFilter ¶

type HAProxyFilter struct{}

HAProxyFilter retrieves user information from headers provided by the OpenShift/HAProxy Ingress Controller

func (f *HAProxyFilter) Filter(r *http.Request) *UserInfo

type NGINXFilter ¶

type NGINXFilter struct{}

NGINXFilter retrieves user information from headers provided by the NGINX Ingress Controller

func (f *NGINXFilter) Filter(r *http.Request) *UserInfo

type TLSFilter ¶ added in v0.1.6

type TLSFilter struct{}

TLSFilter retrieves user information from a TLS handshake - requires the application to be running using TLS

func (f *TLSFilter) Filter(r *http.Request) *UserInfo

type UserInfo ¶

type UserInfo struct {
	// Sub is the Subject of the user (e.g. CN or username)
	Sub string
	// Iss is the Issuer of the user (e.g. Certificate Authority or OIDC provider)
	Iss string
	// Claims are bits of arbitrary information about a user
	Claims map[string]interface{}
}

UserInfo is the base amount of information required to uniquely identify a user

func (ui *UserInfo) AsUsername() string