pomerium / pomerium / 12679744783

52%

Build Type

push

github

Committed by web-flow

Commit Message

authorize: add filter options for JWT groups (#5417)

Add a new option for filtering to a subset of directory groups in the
Pomerium JWT and Impersonate-Group headers. Add a JWTGroupsFilter field
to both the Options struct (for a global filter) and to the Policy
struct (for per-route filter). These will be populated only from the
config protos, and not from a config file.

If either filter is set, then for each of a user's groups, the group
name or group ID will be added to the JWT groups claim only if it is an
exact string match with one of the elements of either filter.

Coverage Stats

68 of 77 new or added lines in 8 files covered. (88.31%)

9 existing lines in 4 files now uncovered.

20782 of 35799 relevant lines covered (58.05%)

140.89 hits per line