issuer

type DataplaneClaims ¶ added in v1.8.1

type DataplaneClaims struct {
	Name string
	Mesh string
	Tags map[string][]string
	Type string
	jwt.RegisteredClaims
}

func (d *DataplaneClaims) ID() string

func (d *DataplaneClaims) KeyIDFallback() (int, error)

func (d *DataplaneClaims) SetRegisteredClaims(claims jwt.RegisteredClaims)

type DataplaneIdentity ¶

type DataplaneIdentity struct {
	Name string
	Mesh string
	Tags mesh_proto.MultiValueTagSet
	Type mesh_proto.ProxyType
}

type DataplaneTokenIssuer ¶

type DataplaneTokenIssuer interface {
	Generate(ctx context.Context, identity DataplaneIdentity, validFor time.Duration) (tokens.Token, error)
}

DataplaneTokenIssuer issues Dataplane Tokens used then for proving identity of the dataplanes. Issued token can be bound by name, mesh or tags so you can pick your level of security.

func NewDataplaneTokenIssuer(issuers func(string) tokens.Issuer) DataplaneTokenIssuer

type Validator ¶ added in v1.8.1

type Validator interface {
	Validate(ctx context.Context, token core_tokens.Token, meshName string) (DataplaneIdentity, error)
}

func NewValidator(validators func(string) core_tokens.Validator) Validator