downstreamsession

func DownstreamLDAPSubject ¶ added in v0.37.0

func DownstreamLDAPSubject(uid string, ldapURL url.URL) string

func GetDownstreamIdentityFromUpstreamIDToken ¶ added in v0.37.0

func GetDownstreamIdentityFromUpstreamIDToken(
	upstreamIDPConfig provider.UpstreamOIDCIdentityProviderI,
	idTokenClaims map[string]interface{},
) (string, string, []string, error)

GetDownstreamIdentityFromUpstreamIDToken returns the mapped subject, username, and group names, in that order.

func GrantScopesIfRequested ¶

func GrantScopesIfRequested(authorizeRequester fosite.AuthorizeRequester)

GrantScopesIfRequested auto-grants the scopes for which we do not require end-user approval, if they were requested.

func MakeDownstreamSession ¶

func MakeDownstreamSession(subject string, username string, groups []string, custom *psession.CustomSessionData) *psession.PinnipedSession

MakeDownstreamSession creates a downstream OIDC session.