mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-09-25 12:17:52 +00:00
rebase authenticators onto new interface.
This commit is contained in:
@@ -68,19 +68,23 @@ func (r *REST) Create(ctx context.Context, obj runtime.Object, createValidation
|
||||
fakeReq := &http.Request{Header: http.Header{}}
|
||||
fakeReq.Header.Add("Authorization", "Bearer "+tokenReview.Spec.Token)
|
||||
|
||||
tokenUser, ok, err := r.tokenAuthenticator.AuthenticateRequest(fakeReq)
|
||||
resp, ok, err := r.tokenAuthenticator.AuthenticateRequest(fakeReq)
|
||||
tokenReview.Status.Authenticated = ok
|
||||
if err != nil {
|
||||
tokenReview.Status.Error = err.Error()
|
||||
}
|
||||
if tokenUser != nil {
|
||||
|
||||
// TODO(mikedanese): verify the response audience matches one of apiAuds if
|
||||
// non-empty
|
||||
|
||||
if resp != nil && resp.User != nil {
|
||||
tokenReview.Status.User = authentication.UserInfo{
|
||||
Username: tokenUser.GetName(),
|
||||
UID: tokenUser.GetUID(),
|
||||
Groups: tokenUser.GetGroups(),
|
||||
Username: resp.User.GetName(),
|
||||
UID: resp.User.GetUID(),
|
||||
Groups: resp.User.GetGroups(),
|
||||
Extra: map[string]authentication.ExtraValue{},
|
||||
}
|
||||
for k, v := range tokenUser.GetExtra() {
|
||||
for k, v := range resp.User.GetExtra() {
|
||||
tokenReview.Status.User.Extra[k] = authentication.ExtraValue(v)
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user