Index

Symbols

--add-back-link gafaelfawr-openapi-schema command line option --alembic-config-path gafaelfawr-init command line option gafaelfawr-update-schema command line option --config-path gafaelfawr-audit command line option gafaelfawr-delete-all-data command line option gafaelfawr-generate-schema command line option gafaelfawr-init command line option gafaelfawr-maintenance command line option gafaelfawr-update-schema command line option gafaelfawr-validate-schema command line option

--fix gafaelfawr-audit command line option --output gafaelfawr-generate-schema command line option gafaelfawr-openapi-schema command line option --port gafaelfawr-run command line option --version gafaelfawr command line option

_

__call__() (gafaelfawr.dependencies.auth.AuthenticateRead method) (gafaelfawr.dependencies.auth.AuthenticateWrite method) (gafaelfawr.dependencies.config.ConfigDependency method) (gafaelfawr.dependencies.context.ContextDependency method)

__version__ (in module gafaelfawr)

A

aclose() (gafaelfawr.dependencies.context.ContextDependency method) (gafaelfawr.factory.Factory method) (gafaelfawr.factory.ProcessContext method) active_user_sessions (gafaelfawr.events.StateEvents attribute) active_user_tokens (gafaelfawr.events.StateEvents attribute) ActiveUserSessionsEvent (class in gafaelfawr.events) ActiveUserTokensEvent (class in gafaelfawr.events) ACTOR_REGEX (in module gafaelfawr.constants) add (gafaelfawr.models.enums.AdminChange attribute) add() (gafaelfawr.storage.admin.AdminStore method) (gafaelfawr.storage.history.AdminHistoryStore method) (gafaelfawr.storage.history.TokenChangeHistoryStore method) (gafaelfawr.storage.token.TokenDatabaseStore method) add_admin() (gafaelfawr.services.admin.AdminService method) add_initial_admins() (gafaelfawr.services.admin.AdminService method) add_padding() (in module gafaelfawr.util) add_user_group (gafaelfawr.config.Config attribute) Admin (class in gafaelfawr.models.admin) AdminChange (class in gafaelfawr.models.enums) AdminHistoryEntry (class in gafaelfawr.models.history) AdminHistoryStore (class in gafaelfawr.storage.history)

AdminService (class in gafaelfawr.services.admin) AdminStore (class in gafaelfawr.storage.admin) AdminTokenRequest (class in gafaelfawr.models.token) ALGORITHM (in module gafaelfawr.constants) ALL (gafaelfawr.models.auth.Satisfy attribute) ANY (gafaelfawr.models.auth.Satisfy attribute) APIConfig (class in gafaelfawr.models.auth) APILoginResponse (class in gafaelfawr.models.auth) audit() (gafaelfawr.services.token.TokenService method) auth (gafaelfawr.events.FrontendEvents attribute) auth_type (gafaelfawr.models.auth.AuthChallenge attribute) (gafaelfawr.models.auth.AuthErrorChallenge attribute) AuthBotEvent (class in gafaelfawr.events) AuthChallenge (class in gafaelfawr.models.auth) Authenticate (class in gafaelfawr.dependencies.auth) authenticate() (gafaelfawr.dependencies.auth.Authenticate method) AuthenticateRead (class in gafaelfawr.dependencies.auth) AuthenticateWrite (class in gafaelfawr.dependencies.auth) AuthError (class in gafaelfawr.models.auth) AuthErrorChallenge (class in gafaelfawr.models.auth) AuthType (class in gafaelfawr.models.auth) AuthUserEvent (class in gafaelfawr.events)

B

base64_to_number() (in module gafaelfawr.util) base_hostname (gafaelfawr.config.Config attribute) BaseAuthEvent (class in gafaelfawr.events) BaseCache (class in gafaelfawr.cache)

BaseState (class in gafaelfawr.middleware.state) Basic (gafaelfawr.models.auth.AuthType attribute) Bearer (gafaelfawr.models.auth.AuthType attribute) bootstrap_token() (gafaelfawr.models.token.TokenData class method) BOT_USERNAME_REGEX (in module gafaelfawr.constants)

C

calculate_quota() (gafaelfawr.config.QuotaConfig method) CamelCaseSettings (class in gafaelfawr.config) CHANGE_HISTORY_RETENTION (in module gafaelfawr.constants) check() (gafaelfawr.services.health.HealthCheckService method) clean_authorization() (in module gafaelfawr.auth) clean_cookies() (in module gafaelfawr.auth) clear() (gafaelfawr.cache.BaseCache method) (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.PerUserCache method) (gafaelfawr.services.token_cache.TokenCacheService method) Config (class in gafaelfawr.config) config (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.factory.ProcessContext attribute) config() (gafaelfawr.dependencies.config.ConfigDependency method) config_dependency (in module gafaelfawr.dependencies.config) config_path (gafaelfawr.dependencies.config.ConfigDependency attribute) CONFIG_PATH (in module gafaelfawr.constants) ConfigDependency (class in gafaelfawr.dependencies.config) configure_logging() (gafaelfawr.config.Config method) context_dependency (in module gafaelfawr.dependencies.context) ContextDependency (class in gafaelfawr.dependencies.context) COOKIE_NAME (in module gafaelfawr.constants) cookie_parameters (gafaelfawr.config.Config attribute) CookieParameters (class in gafaelfawr.config) count_unique_sessions() (gafaelfawr.storage.token.TokenDatabaseStore method) count_user_tokens() (gafaelfawr.storage.token.TokenDatabaseStore method) create (gafaelfawr.models.enums.TokenChange attribute) create() (gafaelfawr.factory.Factory class method) (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (in module gafaelfawr.operator.ingress) (in module gafaelfawr.operator.tokens)

create_admin_service() (gafaelfawr.factory.Factory method) create_firestore_service() (gafaelfawr.factory.Factory method) create_firestore_storage() (gafaelfawr.factory.Factory method) create_health_check_service() (gafaelfawr.factory.Factory method) create_ingress() (gafaelfawr.storage.kubernetes.KubernetesIngressStorage method) create_kubernetes_ingress_service() (gafaelfawr.factory.Factory method) create_kubernetes_token_service() (gafaelfawr.factory.Factory method) create_oidc_service() (gafaelfawr.factory.Factory method) create_oidc_token() (gafaelfawr.services.token.TokenService method) create_oidc_token_verifier() (gafaelfawr.factory.Factory method) create_provider() (gafaelfawr.factory.Factory method) create_secret() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) create_session_token() (gafaelfawr.services.token.TokenService method) create_slack_client() (gafaelfawr.factory.Factory method) create_token_cache_service() (gafaelfawr.factory.Factory method) create_token_from_admin_request() (gafaelfawr.services.token.TokenService method) create_token_redis_store() (gafaelfawr.factory.Factory method) create_token_service() (gafaelfawr.factory.Factory method) create_user_info() (gafaelfawr.providers.base.Provider method) (gafaelfawr.providers.github.GitHubProvider method) (gafaelfawr.providers.oidc.OIDCProvider method) create_user_info_service() (gafaelfawr.factory.Factory method) create_user_token() (gafaelfawr.services.token.TokenService method) Created (gafaelfawr.models.kubernetes.StatusReason attribute) CURSOR_REGEX (in module gafaelfawr.constants)

D

DatabaseSchemaError delete() (gafaelfawr.storage.admin.AdminStore method) (gafaelfawr.storage.history.TokenChangeHistoryStore method) (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (gafaelfawr.storage.quota.QuotaOverridesStore method) (gafaelfawr.storage.token.TokenDatabaseStore method) (gafaelfawr.storage.token.TokenRedisStore method) delete_admin() (gafaelfawr.services.admin.AdminService method) delete_all() (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (gafaelfawr.storage.token.TokenRedisStore method)

delete_all_codes() (gafaelfawr.services.oidc.OIDCService method) delete_all_tokens() (gafaelfawr.services.token.TokenService method) delete_expired() (gafaelfawr.storage.token.TokenDatabaseStore method) delete_quota_overrides() (gafaelfawr.services.userinfo.UserInfoService method) delete_token() (gafaelfawr.services.token.TokenService method) DisallowedCORSRequestError dispatch() (gafaelfawr.middleware.state.StateMiddleware method) DuplicateAdminError DuplicateTokenNameError

E

edit (gafaelfawr.models.enums.TokenChange attribute) email (gafaelfawr.models.ldap.LDAPUserData attribute) (gafaelfawr.models.oidc.OIDCScope attribute) EnvFirstSettings (class in gafaelfawr.config) ephemeral_redis (gafaelfawr.factory.Factory attribute) (gafaelfawr.factory.ProcessContext attribute) error (gafaelfawr.exceptions.DisallowedCORSRequestError attribute) (gafaelfawr.exceptions.DuplicateAdminError attribute) (gafaelfawr.exceptions.DuplicateTokenNameError attribute) (gafaelfawr.exceptions.InsufficientScopeError attribute) (gafaelfawr.exceptions.InvalidClientError attribute) (gafaelfawr.exceptions.InvalidClientIdError attribute) (gafaelfawr.exceptions.InvalidCSRFError attribute) (gafaelfawr.exceptions.InvalidDelegateToError attribute) (gafaelfawr.exceptions.InvalidExpiresError attribute) (gafaelfawr.exceptions.InvalidGrantError attribute) (gafaelfawr.exceptions.InvalidIPAddressError attribute) (gafaelfawr.exceptions.InvalidMinimumLifetimeError attribute) (gafaelfawr.exceptions.InvalidRequestError attribute) (gafaelfawr.exceptions.InvalidReturnURLError attribute) (gafaelfawr.exceptions.InvalidScopesError attribute) (gafaelfawr.exceptions.InvalidServiceError attribute) (gafaelfawr.exceptions.InvalidTokenError attribute) (gafaelfawr.exceptions.NoScopesError attribute) (gafaelfawr.exceptions.NotConfiguredError attribute) (gafaelfawr.exceptions.NotFoundError attribute) (gafaelfawr.exceptions.OAuthError attribute) (gafaelfawr.exceptions.OptionsNotSupportedError attribute) (gafaelfawr.exceptions.PermissionDeniedError attribute) (gafaelfawr.exceptions.ReturnUriMismatchError attribute) (gafaelfawr.exceptions.UnsupportedGrantTypeError attribute) (gafaelfawr.models.auth.AuthErrorChallenge attribute)

error_description (gafaelfawr.models.auth.AuthErrorChallenge attribute) events (gafaelfawr.dependencies.context.RequestContext attribute) Exact (gafaelfawr.models.kubernetes.PathType attribute) expire (gafaelfawr.models.enums.TokenChange attribute) expire_tokens() (gafaelfawr.services.token.TokenService method) ExternalUserInfoError

F

Factory (class in gafaelfawr.factory) factory (gafaelfawr.dependencies.context.RequestContext attribute) Failed (gafaelfawr.models.kubernetes.StatusReason attribute) failure() (gafaelfawr.models.kubernetes.KubernetesResourceStatus class method) FetchKeysError firestore (gafaelfawr.factory.ProcessContext attribute) FirestoreAPIError FirestoreConfig (class in gafaelfawr.config) FirestoreError FirestoreNotInitializedError FirestoreService (class in gafaelfawr.services.firestore)

FirestoreStorage (class in gafaelfawr.storage.firestore) from_config() (gafaelfawr.factory.ProcessContext class method) from_cookie() (gafaelfawr.middleware.state.BaseState class method) (gafaelfawr.models.state.State class method) from_entry() (gafaelfawr.models.history.TokenChangeHistoryCursor class method) from_exception() (gafaelfawr.exceptions.FirestoreAPIError class method) from_file() (gafaelfawr.config.Config class method) from_pem() (gafaelfawr.keypair.RSAKeyPair class method) from_str() (gafaelfawr.models.oidc.OIDCAuthorizationCode class method) (gafaelfawr.models.token.Token class method) FrontendEvents (class in gafaelfawr.events)

G

gafaelfawr module gafaelfawr command line option --version gafaelfawr-audit command line option --config-path --fix gafaelfawr-delete-all-data command line option --config-path gafaelfawr-generate-schema command line option --config-path --output gafaelfawr-help command line option TOPIC gafaelfawr-init command line option --alembic-config-path --config-path gafaelfawr-maintenance command line option --config-path gafaelfawr-openapi-schema command line option --add-back-link --output gafaelfawr-run command line option --port gafaelfawr-update-schema command line option --alembic-config-path --config-path gafaelfawr-validate-schema command line option --config-path gafaelfawr.auth module gafaelfawr.cache module gafaelfawr.config module gafaelfawr.constants module gafaelfawr.dependencies.auth module gafaelfawr.dependencies.config module gafaelfawr.dependencies.context module gafaelfawr.dependencies.return_url module gafaelfawr.events module gafaelfawr.exceptions module gafaelfawr.factory module gafaelfawr.keypair module gafaelfawr.middleware.state module gafaelfawr.models.admin module gafaelfawr.models.auth module gafaelfawr.models.enums module gafaelfawr.models.history module gafaelfawr.models.kubernetes module gafaelfawr.models.ldap module gafaelfawr.models.oidc module gafaelfawr.models.state module gafaelfawr.models.token module gafaelfawr.models.userinfo module gafaelfawr.operator module gafaelfawr.operator.health module gafaelfawr.operator.ingress module gafaelfawr.operator.startup module gafaelfawr.operator.tokens module gafaelfawr.providers.base module gafaelfawr.providers.github module gafaelfawr.providers.oidc module gafaelfawr.services.admin module gafaelfawr.services.firestore module gafaelfawr.services.health module gafaelfawr.services.kubernetes module gafaelfawr.services.ldap module gafaelfawr.services.oidc module gafaelfawr.services.token module gafaelfawr.services.token_cache module

gafaelfawr.services.userinfo module gafaelfawr.storage.admin module gafaelfawr.storage.firestore module gafaelfawr.storage.history module gafaelfawr.storage.kubernetes module gafaelfawr.storage.ldap module gafaelfawr.storage.oidc module gafaelfawr.storage.quota module gafaelfawr.storage.token module gafaelfawr.templates module gafaelfawr.types module gafaelfawr.util module GafaelfawrIngress (class in gafaelfawr.models.kubernetes) GafaelfawrIngressConfig (class in gafaelfawr.models.kubernetes) GafaelfawrIngressDelegate (class in gafaelfawr.models.kubernetes) GafaelfawrIngressDelegateInternal (class in gafaelfawr.models.kubernetes) GafaelfawrIngressDelegateNotebook (class in gafaelfawr.models.kubernetes) GafaelfawrIngressMetadata (class in gafaelfawr.models.kubernetes) GafaelfawrIngressPath (class in gafaelfawr.models.kubernetes) GafaelfawrIngressPathBackend (class in gafaelfawr.models.kubernetes) GafaelfawrIngressPathService (class in gafaelfawr.models.kubernetes) GafaelfawrIngressRule (class in gafaelfawr.models.kubernetes) GafaelfawrIngressRuleHTTP (class in gafaelfawr.models.kubernetes) GafaelfawrIngressScopesAll (class in gafaelfawr.models.kubernetes) GafaelfawrIngressScopesAnonymous (class in gafaelfawr.models.kubernetes) GafaelfawrIngressScopesAny (class in gafaelfawr.models.kubernetes) GafaelfawrIngressScopesBase (class in gafaelfawr.models.kubernetes) GafaelfawrIngressSpec (class in gafaelfawr.models.kubernetes) GafaelfawrIngressTemplate (class in gafaelfawr.models.kubernetes) GafaelfawrIngressTLS (class in gafaelfawr.models.kubernetes) GafaelfawrServicePortName (class in gafaelfawr.models.kubernetes) GafaelfawrServicePortNumber (class in gafaelfawr.models.kubernetes) GafaelfawrServiceToken (class in gafaelfawr.models.kubernetes) GafaelfawrServiceTokenSpec (class in gafaelfawr.models.kubernetes) gather_state_metrics() (gafaelfawr.services.token.TokenService method) generate() (gafaelfawr.keypair.RSAKeyPair class method) generate_challenge() (in module gafaelfawr.auth) generate_unauthorized_challenge() (in module gafaelfawr.auth) generation (gafaelfawr.models.kubernetes.KubernetesResourceStatus attribute) get() (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.InternalTokenCache method) (gafaelfawr.cache.LDAPCache method) (gafaelfawr.cache.NotebookTokenCache method) (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (gafaelfawr.storage.quota.QuotaOverridesStore method) get_admins() (gafaelfawr.services.admin.AdminService method) get_change_history() (gafaelfawr.services.token.TokenService method) get_children() (gafaelfawr.storage.token.TokenDatabaseStore method) get_data() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.services.token.TokenService method) (gafaelfawr.storage.ldap.LDAPStorage method) (gafaelfawr.storage.token.TokenRedisStore method) get_data_by_key() (gafaelfawr.storage.token.TokenRedisStore method) get_gid() (gafaelfawr.services.firestore.FirestoreService method) (gafaelfawr.storage.firestore.FirestoreStorage method) get_group_names() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.storage.ldap.LDAPStorage method) get_groups() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.storage.ldap.LDAPStorage method) get_health() (in module gafaelfawr.operator.health) get_info() (gafaelfawr.storage.token.TokenDatabaseStore method) get_ingress() (gafaelfawr.storage.kubernetes.KubernetesIngressStorage method) get_internal_token() (gafaelfawr.services.token.TokenService method) (gafaelfawr.services.token_cache.TokenCacheService method) get_internal_token_key() (gafaelfawr.storage.token.TokenDatabaseStore method) get_jwks() (gafaelfawr.services.oidc.OIDCService method) get_notebook_token() (gafaelfawr.services.token.TokenService method) (gafaelfawr.services.token_cache.TokenCacheService method) get_notebook_token_key() (gafaelfawr.storage.token.TokenDatabaseStore method) get_openid_configuration() (gafaelfawr.services.oidc.OIDCService method) get_quota_overrides() (gafaelfawr.services.userinfo.UserInfoService method) get_redirect_url() (gafaelfawr.providers.base.Provider method) (gafaelfawr.providers.github.GitHubProvider method) (gafaelfawr.providers.oidc.OIDCProvider method) get_scopes() (gafaelfawr.services.userinfo.UserInfoService method) get_scopes_for_group() (gafaelfawr.config.Config method) get_secret() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) get_token_info() (gafaelfawr.services.token.TokenService method) get_token_info_unchecked() (gafaelfawr.services.token.TokenService method) get_uid() (gafaelfawr.services.firestore.FirestoreService method) (gafaelfawr.storage.firestore.FirestoreStorage method) get_user_info_from_ldap() (gafaelfawr.services.userinfo.UserInfoService method) get_user_info_from_token() (gafaelfawr.services.userinfo.UserInfoService method) gid (gafaelfawr.models.ldap.LDAPUserData attribute) gid_cache (gafaelfawr.factory.ProcessContext attribute) GID_MAX (in module gafaelfawr.constants) GID_MIN (in module gafaelfawr.constants) GitHubConfig (class in gafaelfawr.config) GitHubError GitHubGroup (class in gafaelfawr.config) GitHubGroupTeam (class in gafaelfawr.config) GitHubProvider (class in gafaelfawr.providers.github) GitHubWebError Group (class in gafaelfawr.models.userinfo) group_name_for_github_team() (in module gafaelfawr.util) GROUPNAME_REGEX (in module gafaelfawr.constants)

H

HealthCheckService (class in gafaelfawr.services.health) hide_error (gafaelfawr.exceptions.InvalidGrantError attribute) (gafaelfawr.exceptions.OAuthError attribute)

http_client (gafaelfawr.factory.ProcessContext attribute) HTTP_TIMEOUT (in module gafaelfawr.constants) HttpsUrl (in module gafaelfawr.config)

I

id (gafaelfawr.models.history.TokenChangeHistoryCursor attribute) ID_CACHE_SIZE (in module gafaelfawr.constants) id_column() (gafaelfawr.models.history.TokenChangeHistoryCursor static method) IdCache (class in gafaelfawr.cache) ImplementationSpecific (gafaelfawr.models.kubernetes.PathType attribute) initialize() (gafaelfawr.cache.LDAPCache method) (gafaelfawr.cache.PerUserCache method) (gafaelfawr.cache.TokenCache method) (gafaelfawr.dependencies.context.ContextDependency method) (gafaelfawr.events.FrontendEvents method) (gafaelfawr.events.StateEvents method) (gafaelfawr.storage.firestore.FirestoreStorage method) InputValidationError insufficient_scope (gafaelfawr.models.auth.AuthError attribute) InsufficientScopeError internal (gafaelfawr.models.enums.TokenType attribute) internal_token() (gafaelfawr.models.token.TokenData class method) internal_token_cache (gafaelfawr.factory.ProcessContext attribute) InternalTokenCache (class in gafaelfawr.cache) invalid_request (gafaelfawr.models.auth.AuthError attribute) invalid_token (gafaelfawr.models.auth.AuthError attribute) invalidate() (gafaelfawr.cache.LDAPCache method) invalidate_cache() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.services.userinfo.UserInfoService method) InvalidClientError

InvalidClientIdError InvalidCSRFError InvalidDelegateToError InvalidExpiresError InvalidGrantError InvalidIPAddressError InvalidMinimumLifetimeError InvalidRequestError InvalidReturnURLError InvalidScopesError InvalidServiceError InvalidTokenClaimsError InvalidTokenError ip_address (gafaelfawr.dependencies.context.RequestContext attribute) IpAddress (in module gafaelfawr.types) is_anonymous() (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll method) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous method) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny method) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase method) is_bot_user() (in module gafaelfawr.util) is_empty() (gafaelfawr.models.ldap.LDAPUserData method) is_hostname_allowed() (gafaelfawr.config.Config method) is_token() (gafaelfawr.models.token.Token class method) issue_code() (gafaelfawr.services.oidc.OIDCService method) issue_id_token() (gafaelfawr.services.oidc.OIDCService method)

J

JWK (class in gafaelfawr.models.oidc)

JWKS (class in gafaelfawr.models.oidc)

K

key (gafaelfawr.models.kubernetes.KubernetesResource attribute) keypair (gafaelfawr.config.OIDCServerConfig attribute) KUBERNETES_TIMER_DELAY (in module gafaelfawr.constants) KUBERNETES_TOKEN_INTERVAL (in module gafaelfawr.constants) KUBERNETES_WATCH_TIMEOUT (in module gafaelfawr.constants) KubernetesError KubernetesIngressError

KubernetesIngressService (class in gafaelfawr.services.kubernetes) KubernetesIngressStorage (class in gafaelfawr.storage.kubernetes) KubernetesMetadata (class in gafaelfawr.models.kubernetes) KubernetesObjectError KubernetesResource (class in gafaelfawr.models.kubernetes) KubernetesResourceStatus (class in gafaelfawr.models.kubernetes) KubernetesTokenService (class in gafaelfawr.services.kubernetes) KubernetesTokenStorage (class in gafaelfawr.storage.kubernetes)

L

LDAP_CACHE_LIFETIME (in module gafaelfawr.constants) LDAP_CACHE_SIZE (in module gafaelfawr.constants) ldap_group_cache (gafaelfawr.factory.ProcessContext attribute) ldap_group_name_cache (gafaelfawr.factory.ProcessContext attribute) ldap_pool (gafaelfawr.factory.ProcessContext attribute) LDAP_TIMEOUT (in module gafaelfawr.constants) ldap_user_cache (gafaelfawr.factory.ProcessContext attribute) LDAPCache (class in gafaelfawr.cache) LDAPConfig (class in gafaelfawr.config) LDAPError LDAPService (class in gafaelfawr.services.ldap) LDAPStorage (class in gafaelfawr.storage.ldap) LDAPUserData (class in gafaelfawr.models.ldap) lifetime (gafaelfawr.models.oidc.OIDCAuthorization attribute) limit (gafaelfawr.models.userinfo.RateLimitStatus attribute) list() (gafaelfawr.storage.admin.AdminStore method) (gafaelfawr.storage.history.TokenChangeHistoryStore method) (gafaelfawr.storage.token.TokenRedisStore method)

list_orphaned() (gafaelfawr.storage.token.TokenDatabaseStore method) list_tokens() (gafaelfawr.services.token.TokenService method) (gafaelfawr.storage.token.TokenDatabaseStore method) list_with_parents() (gafaelfawr.storage.token.TokenDatabaseStore method) lock() (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.PerUserCache method) logger (gafaelfawr.dependencies.context.RequestContext attribute) login_attempt (gafaelfawr.events.FrontendEvents attribute) login_enrollment (gafaelfawr.events.FrontendEvents attribute) login_failure (gafaelfawr.events.FrontendEvents attribute) login_success (gafaelfawr.events.FrontendEvents attribute) LoginAttemptEvent (class in gafaelfawr.events) LoginEnrollmentEvent (class in gafaelfawr.events) LoginFailureEvent (class in gafaelfawr.events) LoginSuccessEvent (class in gafaelfawr.events) logout() (gafaelfawr.providers.base.Provider method) (gafaelfawr.providers.github.GitHubProvider method) (gafaelfawr.providers.oidc.OIDCProvider method)

M

message (gafaelfawr.exceptions.DisallowedCORSRequestError attribute) (gafaelfawr.exceptions.InsufficientScopeError attribute) (gafaelfawr.exceptions.InvalidClientError attribute) (gafaelfawr.exceptions.InvalidGrantError attribute) (gafaelfawr.exceptions.InvalidRequestError attribute) (gafaelfawr.exceptions.InvalidTokenError attribute) (gafaelfawr.exceptions.OAuthError attribute) (gafaelfawr.exceptions.OptionsNotSupportedError attribute) (gafaelfawr.exceptions.UnsupportedGrantTypeError attribute) (gafaelfawr.models.kubernetes.KubernetesResourceStatus attribute) MINIMUM_LIFETIME (in module gafaelfawr.constants) MissingGIDClaimError MissingUIDClaimError MissingUsernameClaimError model_config (gafaelfawr.config.CamelCaseSettings attribute) (gafaelfawr.config.Config attribute) (gafaelfawr.config.EnvFirstSettings attribute) (gafaelfawr.config.FirestoreConfig attribute) (gafaelfawr.config.GitHubConfig attribute) (gafaelfawr.config.GitHubGroup attribute) (gafaelfawr.config.GitHubGroupTeam attribute) (gafaelfawr.config.LDAPConfig attribute) (gafaelfawr.config.OIDCClient attribute) (gafaelfawr.config.OIDCConfig attribute) (gafaelfawr.config.OIDCServerConfig attribute) (gafaelfawr.config.QuotaConfig attribute) (gafaelfawr.events.ActiveUserSessionsEvent attribute) (gafaelfawr.events.ActiveUserTokensEvent attribute) (gafaelfawr.events.AuthBotEvent attribute) (gafaelfawr.events.AuthUserEvent attribute) (gafaelfawr.events.BaseAuthEvent attribute) (gafaelfawr.events.LoginAttemptEvent attribute) (gafaelfawr.events.LoginEnrollmentEvent attribute) (gafaelfawr.events.LoginFailureEvent attribute) (gafaelfawr.events.LoginSuccessEvent attribute) (gafaelfawr.events.RateLimitEvent attribute) (gafaelfawr.models.admin.Admin attribute) (gafaelfawr.models.auth.APIConfig attribute) (gafaelfawr.models.auth.APILoginResponse attribute) (gafaelfawr.models.auth.Scope attribute) (gafaelfawr.models.history.AdminHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngress attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegate attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegateInternal attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegateNotebook attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressMetadata attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressPath attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathBackend attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathService attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressRule attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressRuleHTTP attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressSpec attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressTemplate attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressTLS attribute) (gafaelfawr.models.kubernetes.GafaelfawrServicePortName attribute) (gafaelfawr.models.kubernetes.GafaelfawrServicePortNumber attribute) (gafaelfawr.models.kubernetes.GafaelfawrServiceToken attribute) (gafaelfawr.models.kubernetes.GafaelfawrServiceTokenSpec attribute) (gafaelfawr.models.kubernetes.KubernetesMetadata attribute) (gafaelfawr.models.kubernetes.KubernetesResource attribute) (gafaelfawr.models.oidc.JWK attribute) (gafaelfawr.models.oidc.JWKS attribute) (gafaelfawr.models.oidc.OIDCAuthorization attribute) (gafaelfawr.models.oidc.OIDCAuthorizationCode attribute) (gafaelfawr.models.oidc.OIDCConfig attribute) (gafaelfawr.models.oidc.OIDCToken attribute) (gafaelfawr.models.oidc.OIDCTokenReply attribute) (gafaelfawr.models.oidc.OIDCVerifiedToken attribute) (gafaelfawr.models.state.State attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.NewToken attribute) (gafaelfawr.models.token.Token attribute) (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.token.UserTokenModifyRequest attribute) (gafaelfawr.models.token.UserTokenRequest attribute) (gafaelfawr.models.userinfo.Group attribute) (gafaelfawr.models.userinfo.Quota attribute) (gafaelfawr.models.userinfo.UserInfo attribute)

model_dump_reduced() (gafaelfawr.models.history.TokenChangeHistoryEntry method) model_post_init() (gafaelfawr.config.Config method) (gafaelfawr.config.OIDCServerConfig method) modify() (gafaelfawr.storage.token.TokenDatabaseStore method) modify_token() (gafaelfawr.services.token.TokenService method) module gafaelfawr gafaelfawr.auth gafaelfawr.cache gafaelfawr.config gafaelfawr.constants gafaelfawr.dependencies.auth gafaelfawr.dependencies.config gafaelfawr.dependencies.context gafaelfawr.dependencies.return_url gafaelfawr.events gafaelfawr.exceptions gafaelfawr.factory gafaelfawr.keypair gafaelfawr.middleware.state gafaelfawr.models.admin gafaelfawr.models.auth gafaelfawr.models.enums gafaelfawr.models.history gafaelfawr.models.kubernetes gafaelfawr.models.ldap gafaelfawr.models.oidc gafaelfawr.models.state gafaelfawr.models.token gafaelfawr.models.userinfo gafaelfawr.operator gafaelfawr.operator.health gafaelfawr.operator.ingress gafaelfawr.operator.startup gafaelfawr.operator.tokens gafaelfawr.providers.base gafaelfawr.providers.github gafaelfawr.providers.oidc gafaelfawr.services.admin gafaelfawr.services.firestore gafaelfawr.services.health gafaelfawr.services.kubernetes gafaelfawr.services.ldap gafaelfawr.services.oidc gafaelfawr.services.token gafaelfawr.services.token_cache gafaelfawr.services.userinfo gafaelfawr.storage.admin gafaelfawr.storage.firestore gafaelfawr.storage.history gafaelfawr.storage.kubernetes gafaelfawr.storage.ldap gafaelfawr.storage.oidc gafaelfawr.storage.quota gafaelfawr.storage.token gafaelfawr.templates gafaelfawr.types gafaelfawr.util

N

name (gafaelfawr.models.ldap.LDAPUserData attribute) NewToken (class in gafaelfawr.models.token) NGINX_SNIPPET (in module gafaelfawr.constants) NoAvailableGidError NoAvailableUidError NoScopesError

NotConfiguredError notebook (gafaelfawr.models.enums.TokenType attribute) notebook_token_cache (gafaelfawr.factory.ProcessContext attribute) NotebookTokenCache (class in gafaelfawr.cache) NotFoundError number_to_base64() (in module gafaelfawr.util)

O

OAuthBearerError OAuthError oidc (gafaelfawr.models.enums.TokenType attribute) OIDC_AUTHORIZATION_LIFETIME (in module gafaelfawr.constants) OIDCAuthorization (class in gafaelfawr.models.oidc) OIDCAuthorizationCode (class in gafaelfawr.models.oidc) OIDCAuthorizationStore (class in gafaelfawr.storage.oidc) OIDCClient (class in gafaelfawr.config) OIDCConfig (class in gafaelfawr.config) (class in gafaelfawr.models.oidc) OIDCError

OIDCNotEnrolledError OIDCProvider (class in gafaelfawr.providers.oidc) OIDCScope (class in gafaelfawr.models.oidc) OIDCServerConfig (class in gafaelfawr.config) OIDCService (class in gafaelfawr.services.oidc) OIDCToken (class in gafaelfawr.models.oidc) OIDCTokenReply (class in gafaelfawr.models.oidc) OIDCTokenVerifier (class in gafaelfawr.providers.oidc) OIDCVerifiedToken (class in gafaelfawr.models.oidc) OIDCWebError openid (gafaelfawr.models.oidc.OIDCScope attribute) OptionsNotSupportedError

P

parse_authorization() (in module gafaelfawr.auth) parse_scopes() (gafaelfawr.models.oidc.OIDCScope class method) PathType (class in gafaelfawr.models.kubernetes) periodic() (in module gafaelfawr.operator.tokens) PermissionDeniedError persistent_redis (gafaelfawr.factory.Factory attribute) (gafaelfawr.factory.ProcessContext attribute) PerUserCache (class in gafaelfawr.cache) Prefix (gafaelfawr.models.kubernetes.PathType attribute) previous (gafaelfawr.models.history.TokenChangeHistoryCursor attribute) private_key_as_pem() (gafaelfawr.keypair.RSAKeyPair method) process_context (gafaelfawr.dependencies.context.ContextDependency attribute)

ProcessContext (class in gafaelfawr.factory) profile (gafaelfawr.models.oidc.OIDCScope attribute) Provider (class in gafaelfawr.providers.base) ProviderError ProviderWebError public_key_as_jwks() (gafaelfawr.keypair.RSAKeyPair method) public_key_as_pem() (gafaelfawr.keypair.RSAKeyPair method) public_numbers() (gafaelfawr.keypair.RSAKeyPair method) Python Enhancement Proposals PEP 440, [1] PEP 484 PEP 8

Q

Quota (class in gafaelfawr.models.userinfo)

QuotaConfig (class in gafaelfawr.config) QuotaOverridesStore (class in gafaelfawr.storage.quota)

R

random_128_bits() (in module gafaelfawr.util) rate_limit (gafaelfawr.events.FrontendEvents attribute) rate_limiter (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.factory.ProcessContext attribute) RateLimitEvent (class in gafaelfawr.events) RateLimitStatus (class in gafaelfawr.models.userinfo) realm (gafaelfawr.models.auth.AuthChallenge attribute) (gafaelfawr.models.auth.AuthErrorChallenge attribute) reason (gafaelfawr.models.kubernetes.KubernetesResourceStatus attribute) rebind_logger() (gafaelfawr.dependencies.context.RequestContext method) redeem_code() (gafaelfawr.services.oidc.OIDCService method) REDIS_BACKOFF_MAX (in module gafaelfawr.constants) REDIS_BACKOFF_START (in module gafaelfawr.constants) REDIS_EPHEMERAL_POOL_SIZE (in module gafaelfawr.constants) REDIS_PERSISTENT_POOL_SIZE (in module gafaelfawr.constants) REDIS_POOL_TIMEOUT (in module gafaelfawr.constants) REDIS_RATE_LIMIT_POOL_SIZE (in module gafaelfawr.constants) redis_rate_limit_url (gafaelfawr.config.Config attribute)

REDIS_RETRIES (in module gafaelfawr.constants) REDIS_TIMEOUT (in module gafaelfawr.constants) remaining (gafaelfawr.models.userinfo.RateLimitStatus attribute) remove (gafaelfawr.models.enums.AdminChange attribute) replace_ingress() (gafaelfawr.storage.kubernetes.KubernetesIngressStorage method) replace_secret() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) request (gafaelfawr.dependencies.context.RequestContext attribute) RequestContext (class in gafaelfawr.dependencies.context) reset (gafaelfawr.models.userinfo.RateLimitStatus attribute) resource (gafaelfawr.models.userinfo.RateLimitStatus attribute) return_url() (in module gafaelfawr.dependencies.return_url) return_url_with_header() (in module gafaelfawr.dependencies.return_url) ReturnUriMismatchError revoke (gafaelfawr.models.enums.TokenChange attribute) RFC RFC 6750, [1] RFC 7617 RSAKeyPair (class in gafaelfawr.keypair) rubin (gafaelfawr.models.oidc.OIDCScope attribute)

S

Satisfy (class in gafaelfawr.models.auth) satisfy (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase attribute) Scope (class in gafaelfawr.models.auth) scope (gafaelfawr.models.auth.AuthErrorChallenge attribute) SCOPE_REGEX (in module gafaelfawr.constants) scopes (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase attribute) Scopes (in module gafaelfawr.types) service (gafaelfawr.models.enums.TokenType attribute) session (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.models.enums.TokenType attribute) set_config_path() (gafaelfawr.dependencies.config.ConfigDependency method) set_context() (gafaelfawr.factory.Factory method) set_logger() (gafaelfawr.factory.Factory method) set_quota_overrides() (gafaelfawr.services.userinfo.UserInfoService method) settings_customise_sources() (gafaelfawr.config.EnvFirstSettings class method) shutdown() (in module gafaelfawr.operator.startup) standalone() (gafaelfawr.factory.Factory class method) startup() (in module gafaelfawr.operator.startup)

State (class in gafaelfawr.models.state) state (gafaelfawr.dependencies.context.RequestContext attribute) StateEvents (class in gafaelfawr.events) StateMiddleware (class in gafaelfawr.middleware.state) status_code (gafaelfawr.exceptions.DisallowedCORSRequestError attribute) (gafaelfawr.exceptions.DuplicateAdminError attribute) (gafaelfawr.exceptions.DuplicateTokenNameError attribute) (gafaelfawr.exceptions.InsufficientScopeError attribute) (gafaelfawr.exceptions.InvalidClientIdError attribute) (gafaelfawr.exceptions.InvalidCSRFError attribute) (gafaelfawr.exceptions.InvalidTokenError attribute) (gafaelfawr.exceptions.NoScopesError attribute) (gafaelfawr.exceptions.NotConfiguredError attribute) (gafaelfawr.exceptions.NotFoundError attribute) (gafaelfawr.exceptions.OAuthBearerError attribute) (gafaelfawr.exceptions.OptionsNotSupportedError attribute) (gafaelfawr.exceptions.PermissionDeniedError attribute) (gafaelfawr.exceptions.ReturnUriMismatchError attribute) StatusReason (class in gafaelfawr.models.kubernetes) store() (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.InternalTokenCache method) (gafaelfawr.cache.LDAPCache method) (gafaelfawr.cache.NotebookTokenCache method) (gafaelfawr.storage.quota.QuotaOverridesStore method) store_data() (gafaelfawr.storage.token.TokenRedisStore method)

T

templates (in module gafaelfawr.templates) time (gafaelfawr.models.history.TokenChangeHistoryCursor attribute) time_column() (gafaelfawr.models.history.TokenChangeHistoryCursor static method) timestamp (gafaelfawr.models.kubernetes.KubernetesResourceStatus attribute) Timestamp (in module gafaelfawr.types) to_auth_query() (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig method) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegate method) to_cookie() (gafaelfawr.middleware.state.BaseState method) (gafaelfawr.models.state.State method) to_dict() (gafaelfawr.models.kubernetes.KubernetesResourceStatus method) to_header() (gafaelfawr.models.auth.AuthChallenge method) (gafaelfawr.models.auth.AuthErrorChallenge method) to_http_headers() (gafaelfawr.models.userinfo.RateLimitStatus method) to_kubernetes() (gafaelfawr.models.kubernetes.GafaelfawrIngressPath method) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathBackend method) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathService method) (gafaelfawr.models.kubernetes.GafaelfawrIngressRule method) (gafaelfawr.models.kubernetes.GafaelfawrIngressRuleHTTP method) (gafaelfawr.models.kubernetes.GafaelfawrIngressTLS method) (gafaelfawr.models.kubernetes.GafaelfawrServicePortName method) (gafaelfawr.models.kubernetes.GafaelfawrServicePortNumber method) to_sentry() (gafaelfawr.exceptions.FirestoreAPIError method)

to_slack() (gafaelfawr.exceptions.FirestoreAPIError method) to_userinfo_dict() (gafaelfawr.models.token.TokenUserInfo method) Token (class in gafaelfawr.models.token) TOKEN_CACHE_SIZE (in module gafaelfawr.constants) token_to_userinfo_claims() (gafaelfawr.services.oidc.OIDCService method) TokenBase (class in gafaelfawr.models.token) TokenCache (class in gafaelfawr.cache) TokenCacheService (class in gafaelfawr.services.token_cache) TokenChange (class in gafaelfawr.models.enums) TokenChangeHistoryCursor (class in gafaelfawr.models.history) TokenChangeHistoryEntry (class in gafaelfawr.models.history) TokenChangeHistoryRecord (class in gafaelfawr.models.history) TokenChangeHistoryStore (class in gafaelfawr.storage.history) TokenData (class in gafaelfawr.models.token) TokenDatabaseStore (class in gafaelfawr.storage.token) TokenInfo (class in gafaelfawr.models.token) TokenRedisStore (class in gafaelfawr.storage.token) TokenService (class in gafaelfawr.services.token) TokenType (class in gafaelfawr.models.enums) TokenUserInfo (class in gafaelfawr.models.token) TOPIC gafaelfawr-help command line option truncate_history() (gafaelfawr.services.token.TokenService method)

U

uid (gafaelfawr.models.ldap.LDAPUserData attribute) UID_BOT_MAX (in module gafaelfawr.constants) UID_BOT_MIN (in module gafaelfawr.constants) uid_cache (gafaelfawr.factory.ProcessContext attribute) UID_USER_MIN (in module gafaelfawr.constants) UnknownAlgorithmError UnknownKeyIdError UnsupportedGrantTypeError update() (gafaelfawr.services.kubernetes.KubernetesIngressService method) (gafaelfawr.services.kubernetes.KubernetesTokenService method)

update_secret_metadata() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) Updated (gafaelfawr.models.kubernetes.StatusReason attribute) used (gafaelfawr.models.userinfo.RateLimitStatus attribute) user (gafaelfawr.models.enums.TokenType attribute) UserInfo (class in gafaelfawr.models.userinfo) UserInfoService (class in gafaelfawr.services.userinfo) UserLockManager (class in gafaelfawr.cache) USERNAME_REGEX (in module gafaelfawr.constants) UserTokenModifyRequest (class in gafaelfawr.models.token) UserTokenRequest (class in gafaelfawr.models.token)

V

validate_client() (gafaelfawr.services.oidc.OIDCService method) verified_oidc_token() (in module gafaelfawr.dependencies.auth)

verify_token() (gafaelfawr.providers.oidc.OIDCTokenVerifier method) (gafaelfawr.services.oidc.OIDCService method) VerifyTokenError