- Sort Score
- Result 10 results
- Languages All
Results 21 - 30 of 126 for audB (0.05 sec)
-
pkg/serviceaccount/claims_test.go
node *core.Node exp int64 warnafter int64 aud []string err string // desired sc *jwt.Claims pc *privateClaims featureJTI, featurePodNodeInfo, featureNodeBinding bool }{ { // pod and secret sa: sa, pod: pod, sec: sec, // really fast exp: 0, // nil audience aud: nil, err: "internal error, token can only be bound to one object type",
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 17.9K bytes - Viewed (0) -
security/pkg/k8s/tokenreview/k8sauthn.go
// aud: list of audiences to check. If empty 1st party tokens will be checked. func ValidateK8sJwt(kubeClient kubernetes.Interface, targetToken string, aud []string) (security.KubernetesInfo, error) { tokenReview := &k8sauth.TokenReview{ Spec: k8sauth.TokenReviewSpec{ Token: targetToken, }, } if aud != nil { tokenReview.Spec.Audiences = aud }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Feb 13 17:12:41 UTC 2023 - 4.3K bytes - Viewed (0) -
security/pkg/credentialfetcher/plugin/gce.go
rotateToken = enable } // GCEPlugin is the plugin object. type GCEPlugin struct { // aud is the unique URI agreed upon by both the instance and the system verifying the instance's identity. // For more info: https://cloud.google.com/compute/docs/instances/verifying-instance-identity aud string // The location to save the identity token jwtPath string // identity provider identityProvider string
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 30 13:56:46 UTC 2024 - 4.7K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/server/deprecated_insecure_serving.go
func (InsecureSuperuser) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error) { auds, _ := authenticator.AudiencesFrom(req.Context()) return &authenticator.Response{ User: &user.DefaultInfo{ Name: "system:unsecured", Groups: []string{user.SystemPrivilegedGroup, user.AllAuthenticated}, }, Audiences: auds, }, true, nil
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jul 27 15:58:45 UTC 2021 - 3.2K bytes - Viewed (0) -
istioctl/pkg/xds/client.go
} // Use bearer token aud := tokenAudiences isMCP := strings.HasSuffix(opts.Xds, ".googleapis.com") || strings.HasSuffix(opts.Xds, ".googleapis.com:443") if isMCP { // Special credentials handling when using ASM Managed Control Plane. mem, err := getHubMembership(ctx, kubeClient) if err != nil { return nil, fmt.Errorf("failed to query Hub membership: %w", err) } aud = []string{mem.WorkloadIdentityPool} }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Dec 19 22:42:42 UTC 2023 - 3.7K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/webhook/webhook.go
return nil, false, err } if checkAuds { gotAuds := w.implicitAuds if len(result.Status.Audiences) > 0 { gotAuds = result.Status.Audiences } auds = wantAuds.Intersect(gotAuds) if len(auds) == 0 { return nil, false, nil } } r.Status = result.Status if !r.Status.Authenticated { var err error if len(r.Status.Error) != 0 {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 18 00:47:42 UTC 2022 - 11.5K bytes - Viewed (0) -
internal/grid/connection_test.go
remoteHost := hosts[1] local, err := NewManager(context.Background(), ManagerOptions{ Dialer: dialer.DialContext, Local: localHost, Hosts: hosts, AddAuth: func(aud string) string { return aud }, AuthRequest: dummyRequestValidate, BlockConnect: connReady, }) errFatal(err) // 1: Echo errFatal(local.RegisterSingleHandler(handlerTest, func(payload []byte) ([]byte, *RemoteErr) {
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Tue Nov 21 01:09:35 UTC 2023 - 6K bytes - Viewed (0) -
internal/config/identity/openid/jwt.go
// case sensitive audValues, ok := policy.GetValuesFromClaims(mclaims, audClaim) if !ok { return errors.New("STS JWT Token has `aud` claim invalid, `aud` must match configured OpenID Client ID") } if !audValues.Contains(pCfg.ClientID) { // if audience claims is missing, look for "azp" claims. // OPTIONAL. Authorized party - the party to which the ID
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Thu May 30 18:10:41 UTC 2024 - 8.3K bytes - Viewed (0) -
tests/common/jwt/jwt_token.go
// Payload { // "aud": foo, // "exp": 4732994801, // "iat": 1579394801, // "iss": "******@****.***", // "sub": "sub-1" // } // Generated by: security/tools/jwt/samples/gen-jwt.py tests/common/jwt/key.pem -jwks=tests/common/jwt/jwks.json // --expire=3153600000 --iss=******@****.*** --sub=sub-1 --aud=foo // nolint: lll
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed May 08 23:36:51 UTC 2024 - 12.1K bytes - Viewed (0) -
pkg/serviceaccount/jwt.go
} requestedAudiences, ok := authenticator.AudiencesFrom(ctx) if !ok { // default to apiserver audiences requestedAudiences = j.implicitAuds } auds := authenticator.Audiences(tokenAudiences).Intersect(requestedAudiences) if len(auds) == 0 && len(j.implicitAuds) != 0 { return nil, false, fmt.Errorf("token audiences %q is invalid for the target audiences %q", tokenAudiences, requestedAudiences) }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Feb 27 22:16:08 UTC 2024 - 10.7K bytes - Viewed (0)