pomerium/authenticate/identity.go
Kenneth Jenkins 9678e6a231
ssh: implement authorization policy evaluation (#5665)
Implement the pkg/ssh.AuthInterface. Add logic for converting from the
ssh stream state to an evaluator request, and for interpreting the
results of policy evaluation. Refactor some of the existing authorize
logic to make it easier to reuse.
2025-07-01 12:04:00 -07:00

24 lines
609 B
Go

package authenticate
import (
"context"
oteltrace "go.opentelemetry.io/otel/trace"
"github.com/pomerium/pomerium/config"
"github.com/pomerium/pomerium/pkg/identity"
)
func defaultGetIdentityProvider(ctx context.Context, tracerProvider oteltrace.TracerProvider, options *config.Options, idpID string) (identity.Authenticator, error) {
redirectURL, err := options.GetAuthenticateRedirectURL()
if err != nil {
return nil, err
}
idp, err := options.GetIdentityProviderForID(idpID)
if err != nil {
return nil, err
}
return identity.GetIdentityProvider(ctx, tracerProvider, idp, redirectURL)
}