oauth2-proxy/pkg/apis/options/claim_source.go

46 lines
1.5 KiB
Go

package options
import "fmt"
// ClaimSource allows loading a header value from a claim within the session
type ClaimSource struct {
// Claim is the name of the claim in the session that the value should be
// loaded from. Available claims: `access_token` `id_token` `created_at`
// `expires_on` `refresh_token` `email` `user` `groups` `preferred_username`.
Claim string `yaml:"claim,omitempty"`
// Prefix is an optional prefix that will be prepended to the value of the
// claim if it is non-empty.
Prefix string `yaml:"prefix,omitempty"`
// BasicAuthPassword converts this claim into a basic auth header.
// Note the value of claim will become the basic auth username and the
// basicAuthPassword will be used as the password value.
BasicAuthPassword *SecretSource `yaml:"basicAuthPassword,omitempty"`
}
// MarshalYAML implements the yaml.Marshaler interface for ClaimSource.
// This is only necessary for the conversion workflow from toml to yaml
func (c *ClaimSource) MarshalYAML() (interface{}, error) {
if c == nil {
return nil, nil
}
mapped := make(map[string]interface{})
if c.Claim != "" {
mapped["claim"] = c.Claim
}
if c.Prefix != "" {
mapped["prefix"] = c.Prefix
}
if c.BasicAuthPassword != nil {
basicAuthPasswordYAML, err := c.BasicAuthPassword.MarshalYAML()
if err != nil {
return nil, fmt.Errorf("error marshaling basicAuthPassword for ClaimSource: %w", err)
}
mapped["basicAuthPassword"] = basicAuthPasswordYAML
}
return mapped, nil
}