default_jwt_claim_mapper.go ×4

Frontier kind: Code frontier

unlabeled · c_2ad590dc0258

10 tests · 1824 LOC · 77 files · introduces 0 tests · 10 LOC · 1 file

Introduces — evidence that enters the hierarchy at this concept

Code: 4 ranges10 lines · 1 files
Tests: 0 tests

Contains — complete concept membership

All code (extent): 251 ranges1824 lines · 77 files · Browse complete extent
All tests (intent): 10 testsBrowse complete intent

Neighbourhood graph

The orange circle is the focus. Violet and green circles are every ancestor and descendant, broader and narrower, at any distance; blue squares and pink diamonds are the introduced files and exact introduced tests of every visible concept, not only the focus's. Arrows point from broader to narrower concepts and bridge only concepts omitted from this view. Undirected links show source or test introduction. Concept and file size follows LOC; exact test nodes use test-count units.

Focus concept
Ancestors (broader)
Descendants (narrower)
Introduced files
Introduced tests

Introduced files, introduced tests, and structurally relevant concept specialization

In the embedded map, ordinary wheel input scrolls the page; use the visible controls to zoom and drag to pan. Open the full-screen map for canvas navigation: wheel pans, Ctrl/Command plus wheel zooms, and arrow keys pan when this region is focused. On touch screens, open the full-screen map to pan or pinch. If JavaScript or WebGL is unavailable, use the native relationship evidence on this page.

Native relationship evidence

Every exact file and test below is linked only from the concept that introduces it.

default_jwt_claim_mapper.go ×4 — Focused concept Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
TestTokenWithAdminPermissionsRegex — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestTokenWithAdminPermissionsRegex
TestTokenWithReaderWriterWorkerPermissionsRegex — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestTokenWithReaderWriterWorkerPermissionsRegex
default_jwt_claim_mapper.go ×2 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
TestIgnoreAudience, TestCorrectAudience, +1 — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestCorrectAudience
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestIgnoreAudience
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestTokenWithAdminPermissionsRSA
TestTokenWithAdminPermissionsECDSA — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestTokenWithAdminPermissionsECDSA
TestTokenWithReaderWriterWorkerPermissionsECDSA — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestTokenWithReaderWriterWorkerPermissionsECDSA
TestTokenWithReaderWriterWorkerPermissionsRSA — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestTokenWithReaderWriterWorkerPermissionsRSA
TestNamespacePermissionCaseSensitive — Ancestor (broader) Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestNamespacePermissionCaseSensitive
default_jwt_claim_mapper.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×2 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×1 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×9 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×2 — Ancestor (broader) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
Introduced tests:
- go.temporal.io/server/common/authorization/TestDefaultClaimMapperSuite/TestWrongAudience
default_jwt_claim_mapper.go ×4 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×3 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
default_jwt_claim_mapper.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go
noop_moving_window_average.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/aggregate/noop_moving_window_average.go
- go.temporal.io/server/common/persistence/noop_health_signal_aggregator.go
search_attribute.go ×12 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/chasm/v1/message.pb.go
- go.temporal.io/server/api/visibilityservice/v1/request_response.pb.go
- go.temporal.io/server/chasm/library.go
- go.temporal.io/server/chasm/registrable_component.go
- go.temporal.io/server/chasm/search_attribute.go
key.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/service/history/tasks/key.go
priority.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/tasks/priority.go
setting_gen.go ×51 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/dynamicconfig/collection.go
- go.temporal.io/server/common/dynamicconfig/deepcopy.go
- go.temporal.io/server/common/dynamicconfig/gradual_change.go
- go.temporal.io/server/common/dynamicconfig/key.go
- go.temporal.io/server/common/dynamicconfig/registry.go
- go.temporal.io/server/common/dynamicconfig/setting_gen.go
- go.temporal.io/server/common/dynamicconfig/shared_structure.go
- go.temporal.io/server/common/util/wildcard.go
Introduced tests:
- go.temporal.io/server/common/circuitbreaker/TestTSCBWithDynamicSettings
- go.temporal.io/server/common/dynamicconfig/TestDeepCopy_OtherReferenceTypes_Nil
- go.temporal.io/server/service/matching/configs/TestQuotasSuite/TestAPIPrioritiesOrdered
- go.temporal.io/server/service/matching/configs/TestQuotasSuite/TestAPIToPriorityMapping
grpc_resolver.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/membership/grpc_resolver.go
predicates.pb.go ×21 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/enums/v1/predicate.pb.go
- go.temporal.io/server/api/persistence/v1/predicates.go-helpers.pb.go
- go.temporal.io/server/api/persistence/v1/predicates.pb.go
service.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/adminservice/v1/request_response.pb.go
- go.temporal.io/server/api/adminservice/v1/service.pb.go
- go.temporal.io/server/api/cluster/v1/message.pb.go
- go.temporal.io/server/api/common/v1/api_category.pb.go
- go.temporal.io/server/api/common/v1/dlq.pb.go
- go.temporal.io/server/api/health/v1/message.pb.go
- go.temporal.io/server/api/historyservice/v1/request_response.pb.go
- go.temporal.io/server/api/historyservice/v1/service.pb.go
- go.temporal.io/server/api/matchingservice/v1/request_response.pb.go
- go.temporal.io/server/api/matchingservice/v1/service.pb.go
- go.temporal.io/server/api/namespace/v1/message.pb.go
- go.temporal.io/server/api/replication/v1/message.pb.go
- go.temporal.io/server/api/token/v1/message.pb.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/errordetails/v1/message.pb.go
constants.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/searchattribute/sadefs/constants.go
task.pb.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/enums/v1/task.pb.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/history/v1/message.pb.go
- go.temporal.io/server/api/persistence/v1/chasm.pb.go
- go.temporal.io/server/api/persistence/v1/chasm_visibility.pb.go
- go.temporal.io/server/api/persistence/v1/cluster_metadata.pb.go
- go.temporal.io/server/api/persistence/v1/executions.pb.go
- go.temporal.io/server/api/persistence/v1/history_tree.pb.go
- go.temporal.io/server/api/persistence/v1/hsm.pb.go
- go.temporal.io/server/api/persistence/v1/namespaces.pb.go
- go.temporal.io/server/api/persistence/v1/nexus.pb.go
- go.temporal.io/server/api/persistence/v1/predicates.pb.go
- go.temporal.io/server/api/persistence/v1/queue_metadata.pb.go
- go.temporal.io/server/api/persistence/v1/queues.pb.go
- go.temporal.io/server/api/persistence/v1/task_queues.pb.go
- go.temporal.io/server/api/persistence/v1/tasks.pb.go
- go.temporal.io/server/api/persistence/v1/update.pb.go
- go.temporal.io/server/api/persistence/v1/workflow_mutable_state.pb.go
- go.temporal.io/server/api/workflow/v1/message.pb.go
defs.go ×5 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/metrics/v1/message.pb.go
- go.temporal.io/server/common/build/build.go
- go.temporal.io/server/common/metrics/defs.go
- go.temporal.io/server/common/metrics/defs_base.go
- go.temporal.io/server/common/metrics/noop_impl.go
- go.temporal.io/server/common/metrics/option.go
- go.temporal.io/server/common/metrics/registry.go
Introduced tests:
- go.temporal.io/server/common/metrics/TestBaggageBenchSuite/TestMutexMapBaggage
- go.temporal.io/server/common/metrics/TestBaggageBenchSuite/TestSyncMapBaggage
noop_logger.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/log/noop_logger.go
tags.go ×9 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/log/tag/tags.go
- go.temporal.io/server/common/log/tag/zap_tag.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/deployment/v1/message.pb.go
- go.temporal.io/server/api/taskqueue/v1/message.pb.go
cluster.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/enums/v1/cluster.pb.go
- go.temporal.io/server/api/enums/v1/common.pb.go
- go.temporal.io/server/api/enums/v1/dlq.pb.go
- go.temporal.io/server/api/enums/v1/fairness_state.pb.go
- go.temporal.io/server/api/enums/v1/nexus.pb.go
- go.temporal.io/server/api/enums/v1/predicate.pb.go
- go.temporal.io/server/api/enums/v1/replication.pb.go
- go.temporal.io/server/api/enums/v1/task.pb.go
- go.temporal.io/server/api/enums/v1/workflow.pb.go
- go.temporal.io/server/api/enums/v1/workflow_task_type.pb.go
wildcard.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/util/wildcard.go
wildcard.go ×4 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/util/wildcard.go
retrypolicy.go ×3 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/backoff/retrypolicy.go
message.pb.go ×2 — Descendant (narrower) Introduced files:
- go.temporal.io/server/api/clock/v1/message.pb.go
payload.go ×1 — Descendant (narrower) Introduced files:
- go.temporal.io/server/common/payload/payload.go
TestOperatorServiceMetadata, TestWorkflowServiceMetadata — Descendant (narrower) Introduced tests:
- go.temporal.io/server/common/api/TestOperatorServiceMetadata
- go.temporal.io/server/common/api/TestWorkflowServiceMetadata

Introduced tests

Every collected test enters the hierarchy at exactly one concept.

No tests are introduced at this concept. Its intent tests are introduced by other concepts.

Introduced code

Every collected source range enters the hierarchy at exactly one concept.

1 file ranked by introduced lines: 10 introduced LOC across 4 ranges. Expand a file to inspect source; the > gutter marks introduced lines.

go.temporal.io/server/common/authorization/default_jwt_claim_mapper.go 10 introduced LOC · 4 ranges

Open complete file

  74
  
  var _ ClaimMapper = (*defaultJWTClaimMapper)(nil)
  
  75
  
  76
  >
  func (a *defaultJWTClaimMapper) GetClaims(authInfo *AuthInfo) (*Claims, error) {
  
default_jwt_claim_mapper.go

  77
  >
  
  78
  >
  	claims := Claims{AuthType: "jwt"}
  
  79
  >
  
  80
  >
  	if authInfo.AuthToken == "" {
  
  81
  
  		return &claims, nil
  
  82
  
  	}

  84
  
  	// We use strings.SplitN even though we check the length later, to avoid
  
  85
  
  	// unnecessary allocations if the format is correct.
  
  86
  >
  	parts := strings.SplitN(authInfo.AuthToken, " ", 2)
  
default_jwt_claim_mapper.go

  87
  >
  	if len(parts) != 2 {
  
  88
  
  		return nil, serviceerror.NewPermissionDenied("unexpected authorization token format", "")
  
  89
  
  	}
  
  90
  >
  	if !strings.EqualFold(parts[0], authorizationBearer) {
  
default_jwt_claim_mapper.go

  91
  
  		return nil, serviceerror.NewPermissionDenied("unexpected name in authorization token", "")
  
  92
  
  	}
  
  93
  >
  	jwtClaims, err := parseJWTWithAudience(parts[1], a.keyProvider, authInfo.Audience)
  
default_jwt_claim_mapper.go

  94
  >
  	if err != nil {
  
  95
  
  		return nil, err
  
  96
  
  	}

default_jwt_claim_mapper.go ×4

Introduces — evidence that enters the hierarchy at this concept

Contains — complete concept membership

Neighbourhood graph

Introduced tests

Introduced code

Direct hierarchy

Parents

Children