@@ -16,7 +16,7 @@ syntax = "proto3";
16
16
17
17
package istio.mixer.v1.config.client ;
18
18
19
- option go_package = "istio.io/api/mixer/v1/config/client" ;
19
+ option go_package = "istio.io/api/mixer/v1/config/client" ;
20
20
21
21
import "gogoproto/gogo.proto" ;
22
22
import "google/protobuf/duration.proto" ;
@@ -66,8 +66,7 @@ message JWT {
66
66
repeated string audiences = 2 ;
67
67
68
68
// URL of the provider's public key set to validate signature of the
69
- // JWT. See [OpenID
70
- // Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
69
+ // JWT. See [OpenID Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
71
70
//
72
71
// Optional if the key set document can either (a) be retrieved from
73
72
// [OpenID Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html)
@@ -78,8 +77,7 @@ message JWT {
78
77
string jwks_uri = 3 ;
79
78
80
79
// If true, forward the entire base64 encoded JWT in the HTTP request.
81
- // If false, remove the JWT from the HTTP request and do not forward to the
82
- // application.
80
+ // If false, remove the JWT from the HTTP request and do not forward to the application.
83
81
bool forward_jwt = 4 ;
84
82
85
83
// Duration after which the cached public key should be expired. The
@@ -124,7 +122,6 @@ message JWT {
124
122
}
125
123
126
124
// Determines how to apply auth policies for individual requests.
127
- // WIP: to be replaced by AuthenticationPolicy.
128
125
message EndUserAuthenticationPolicySpec {
129
126
// List of JWT rules to valide.
130
127
//
@@ -151,7 +148,6 @@ message EndUserAuthenticationPolicySpec {
151
148
repeated JWT jwts = 2 ;
152
149
}
153
150
154
- // WIP: to be replaced by AuthenticationPolicy.
155
151
message EndUserAuthenticationPolicySpecReference {
156
152
// REQUIRED. The short name of the
157
153
// EndUserAuthenticationPolicySpec. This is the resource name
@@ -166,14 +162,12 @@ message EndUserAuthenticationPolicySpecReference {
166
162
167
163
// EndUserAuthenticationPolicySpecBinding defines the binding between
168
164
// EndUserAuthenticationPolicySpecs and one or more IstioService.
169
- // WIP: to be replaced by AuthenticationPolicy.
170
165
message EndUserAuthenticationPolicySpecBinding {
171
166
// REQUIRED. One or more services to map the listed
172
167
// EndUserAuthenticationPolicySpecs onto.
173
168
repeated IstioService services = 1 ;
174
169
175
170
// REQUIRED. One or more EndUserAuthenticationPolicySpecReference
176
171
// that should be mapped to the specified service(s).
177
- // WIP: to be replaced by AuthenticationPolicy.
178
172
repeated EndUserAuthenticationPolicySpecReference policies = 2 ;
179
173
}
0 commit comments