mirror of
https://github.com/smallstep/certificates.git
synced 2024-10-31 03:20:16 +00:00
Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
This commit is contained in:
parent
35b7539243
commit
6ca1df5081
@ -40,7 +40,8 @@ type Authority struct {
|
||||
// Do not re-initialize
|
||||
initOnce bool
|
||||
// Custom functions
|
||||
sshBastionFunc func(user, hostname string) (*Bastion, error)
|
||||
sshBastionFunc func(user, hostname string) (*Bastion, error)
|
||||
getIdentityFunc func(p provisioner.Interface, email string) (*provisioner.Identity, error)
|
||||
}
|
||||
|
||||
// New creates and initiates a new Authority type.
|
||||
|
@ -1,6 +1,7 @@
|
||||
package authority
|
||||
|
||||
import (
|
||||
"github.com/smallstep/certificates/authority/provisioner"
|
||||
"github.com/smallstep/certificates/db"
|
||||
)
|
||||
|
||||
@ -15,10 +16,18 @@ func WithDatabase(db db.AuthDB) Option {
|
||||
}
|
||||
}
|
||||
|
||||
// WithSSHBastionFunc defines sets a custom function to get the bastion for a
|
||||
// WithSSHBastionFunc sets a custom function to get the bastion for a
|
||||
// given user-host pair.
|
||||
func WithSSHBastionFunc(fn func(user, host string) (*Bastion, error)) Option {
|
||||
return func(a *Authority) {
|
||||
a.sshBastionFunc = fn
|
||||
}
|
||||
}
|
||||
|
||||
// WithGetIdentityFunc sets a custom function to retrieve the identity from
|
||||
// an external resource.
|
||||
func WithGetIdentityFunc(fn func(p provisioner.Interface, email string) (*provisioner.Identity, error)) Option {
|
||||
return func(a *Authority) {
|
||||
a.getIdentityFunc = fn
|
||||
}
|
||||
}
|
||||
|
@ -319,6 +319,12 @@ func (b *base) AuthorizeSSHRekey(ctx context.Context, token string) (*ssh.Certif
|
||||
return nil, nil, errors.New("not implemented; provisioner does not implement AuthorizeSSHRekey")
|
||||
}
|
||||
|
||||
// Identity is the type representing an externally supplied identity that is used
|
||||
// by provisioners to populate certificate fields.
|
||||
type Identity struct {
|
||||
Usernames []string `json:"usernames"`
|
||||
}
|
||||
|
||||
// MockProvisioner for testing
|
||||
type MockProvisioner struct {
|
||||
Mret1, Mret2, Mret3 interface{}
|
||||
|
Loading…
Reference in New Issue
Block a user