go-amzn-oidc

Description

go-amzn-oidc is a validator for x-amzn-oidc-data as JWT.

Usage as a library

package main

import (
	"fmt"
	"log"
	"net/http"

	"github.com/dgrijalva/jwt-go"
	validator "github.com/fujiwara/go-amzn-oidc/validator"
)

func handlerFunc(w http.ResponseWriter, r *http.Request) {
	claims, err := validator.Validate(r.Header.Get("x-amzn-oidc-data"))
	if err != nil {
		w.WriteHeader(http.StatusForbidden)
		fmt.Fprintln(w, "validation error", err.Error())
		return
	}
	fmt.Fprintln(w, claims.Email())
}

func main() {
	http.HandleFunc("/", handlerFunc)
	log.Fatal(http.ListenAndServe(":8080", nil))
}

With nginx auth_request

$ amzn-oidc-validate-server
2020/10/24 01:50:06 [info] Listening 127.0.0.1:8080

nginx.conf

location = /oidc_validate {
	proxy_pass http://127.0.0.1:8080;
	proxy_set_header X-Amzn-OIDC-Data $http_x_amzn_oidc_data;
	proxy_set_header Content-Length "";
	proxy_pass_request_body off;
	internal;
}

location / {
	auth_request /oidc_validate;
	auth_request_set $email $upstream_http_x_auth_request_email;
	proxy_set_header X-Email $email;
	# ...
}

LISENSE

MIT