pomerium/pkg/grpc
Kenneth Jenkins 21b9e7890c
authorize: add filter options for JWT groups (#5417)
Add a new option for filtering to a subset of directory groups in the
Pomerium JWT and Impersonate-Group headers. Add a JWTGroupsFilter field
to both the Options struct (for a global filter) and to the Policy
struct (for per-route filter). These will be populated only from the
config protos, and not from a config file.

If either filter is set, then for each of a user's groups, the group
name or group ID will be added to the JWT groups claim only if it is an
exact string match with one of the elements of either filter.
2025-01-08 13:57:57 -08:00
..
audit core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
cli core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
config authorize: add filter options for JWT groups (#5417) 2025-01-08 13:57:57 -08:00
databroker New integration test fixtures (#5233) 2024-11-05 14:31:40 -05:00
device core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
events core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
identity core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
registry core/grpc: add mock for registry service (#5243) 2024-08-26 11:30:17 -06:00
session core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
testdata grpc: rename internal/grpc to pkg/grpc (#1010) 2020-06-26 09:17:02 -06:00
user core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
client.go authorize: remove wait for ready (#5376) 2024-11-22 10:17:00 -07:00
docs.go grpc: rename internal/grpc to pkg/grpc (#1010) 2020-06-26 09:17:02 -06:00
health.go logging: remove ctx from global log methods (#5337) 2024-10-23 14:18:52 -06:00
protoc.bash authorize/log: remove audit logging (#5369) 2024-11-22 14:32:52 -05:00