Index

Symbols

--add-back-link gafaelfawr-openapi-schema command line option --alembic-config-path gafaelfawr-init command line option gafaelfawr-update-schema command line option --config-path gafaelfawr-audit command line option gafaelfawr-delete-all-data command line option gafaelfawr-generate-schema command line option gafaelfawr-init command line option gafaelfawr-maintenance command line option gafaelfawr-update-schema command line option gafaelfawr-validate-schema command line option

--fix gafaelfawr-audit command line option --output gafaelfawr-generate-schema command line option gafaelfawr-openapi-schema command line option --port gafaelfawr-run command line option --version gafaelfawr command line option

_

__call__() (gafaelfawr.dependencies.auth.AuthenticateRead method) (gafaelfawr.dependencies.auth.AuthenticateWrite method) (gafaelfawr.dependencies.config.ConfigDependency method) (gafaelfawr.dependencies.context.ContextDependency method)

__version__ (in module gafaelfawr)

A

access_token (gafaelfawr.models.oidc.OIDCTokenReply attribute) aclose() (gafaelfawr.dependencies.context.ContextDependency method) (gafaelfawr.factory.Factory method) (gafaelfawr.factory.ProcessContext method) action (gafaelfawr.models.history.AdminHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) active_user_sessions (gafaelfawr.events.StateEvents attribute) active_user_tokens (gafaelfawr.events.StateEvents attribute) actor (gafaelfawr.models.history.AdminHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) ACTOR_REGEX (in module gafaelfawr.constants) add (gafaelfawr.models.enums.AdminChange attribute) add() (gafaelfawr.storage.admin.AdminStore method) (gafaelfawr.storage.history.AdminHistoryStore method) (gafaelfawr.storage.history.TokenChangeHistoryStore method) (gafaelfawr.storage.token.TokenDatabaseStore method) add_admin() (gafaelfawr.services.admin.AdminService method) add_initial_admins() (gafaelfawr.services.admin.AdminService method) add_padding() (in module gafaelfawr.util) add_user_group (gafaelfawr.config.Config property) (gafaelfawr.config.LDAPConfig attribute) AdminChange (class in gafaelfawr.models.enums) AdminHistoryStore (class in gafaelfawr.storage.history) AdminService (class in gafaelfawr.services.admin) AdminStore (class in gafaelfawr.storage.admin) after_logout_url (gafaelfawr.config.Config attribute) alg (gafaelfawr.models.oidc.JWK attribute) ALGORITHM (in module gafaelfawr.constants) ALL (gafaelfawr.models.auth.Satisfy attribute)

all (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll attribute) annotations (gafaelfawr.models.kubernetes.GafaelfawrIngressMetadata attribute) (gafaelfawr.models.kubernetes.KubernetesMetadata attribute) anonymous (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous attribute) ANY (gafaelfawr.models.auth.Satisfy attribute) any (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny attribute) api (gafaelfawr.config.QuotaGrant attribute) (gafaelfawr.models.userinfo.Quota attribute) apply_cursor() (gafaelfawr.models.history.TokenChangeHistoryCursor method) apply_order() (gafaelfawr.models.history.TokenChangeHistoryCursor class method) asdict() (gafaelfawr.events.ActiveUserSessionsEvent method) (gafaelfawr.events.ActiveUserTokensEvent method) (gafaelfawr.events.AuthBotEvent method) (gafaelfawr.events.AuthUserEvent method) (gafaelfawr.events.LoginAttemptEvent method) (gafaelfawr.events.LoginEnrollmentEvent method) (gafaelfawr.events.LoginFailureEvent method) (gafaelfawr.events.LoginSuccessEvent method) audience (gafaelfawr.config.OIDCConfig attribute) audit() (gafaelfawr.services.token.TokenService method) auth (gafaelfawr.events.FrontendEvents attribute) auth_cache_duration (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) auth_type (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) AuthChallenge (class in gafaelfawr.models.auth) Authenticate (class in gafaelfawr.dependencies.auth) authenticate() (gafaelfawr.dependencies.auth.Authenticate method) AuthenticateRead (class in gafaelfawr.dependencies.auth) AuthenticateWrite (class in gafaelfawr.dependencies.auth) AuthError (class in gafaelfawr.models.auth) AuthErrorChallenge (class in gafaelfawr.models.auth) authorization_endpoint (gafaelfawr.models.oidc.OIDCConfig attribute) AuthType (class in gafaelfawr.models.auth)

B

backend (gafaelfawr.models.kubernetes.GafaelfawrIngressPath attribute) base64_to_number() (in module gafaelfawr.util) base_internal_url (gafaelfawr.config.Config attribute) base_url (gafaelfawr.config.Config attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) BaseCache (class in gafaelfawr.cache)

BaseState (class in gafaelfawr.middleware.state) Basic (gafaelfawr.models.auth.AuthType attribute) Bearer (gafaelfawr.models.auth.AuthType attribute) bootstrap_token (gafaelfawr.config.Config attribute) bootstrap_token() (gafaelfawr.models.token.TokenData class method) BOT_USERNAME_REGEX (in module gafaelfawr.constants)

C

capitalize() (gafaelfawr.models.oidc.OIDCScope method) casefold() (gafaelfawr.models.oidc.OIDCScope method) center() (gafaelfawr.models.oidc.OIDCScope method) CHANGE_HISTORY_RETENTION (in module gafaelfawr.constants) check() (gafaelfawr.services.health.HealthCheckService method) cilogon (gafaelfawr.config.Config attribute) claims (gafaelfawr.models.oidc.OIDCVerifiedToken attribute) clean_authorization() (in module gafaelfawr.auth) clean_cookies() (in module gafaelfawr.auth) clear() (gafaelfawr.cache.BaseCache method) (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.PerUserCache method) (gafaelfawr.services.token_cache.TokenCacheService method) client_id (gafaelfawr.config.GitHubConfig attribute) (gafaelfawr.config.OIDCConfig attribute) (gafaelfawr.models.oidc.OIDCAuthorization attribute) client_secret (gafaelfawr.config.GitHubConfig attribute) (gafaelfawr.config.OIDCConfig attribute) clients (gafaelfawr.config.OIDCServerConfig attribute) code (gafaelfawr.models.oidc.OIDCAuthorization attribute) config (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.factory.ProcessContext attribute) (gafaelfawr.models.auth.APILoginResponse attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngress attribute) config() (gafaelfawr.dependencies.config.ConfigDependency method) config_dependency (in module gafaelfawr.dependencies.config) config_path (gafaelfawr.dependencies.config.ConfigDependency attribute) CONFIG_PATH (in module gafaelfawr.constants) ConfigDependency (class in gafaelfawr.dependencies.config) configure_logging() (gafaelfawr.config.Config method) context_dependency (in module gafaelfawr.dependencies.context) ContextDependency (class in gafaelfawr.dependencies.context) COOKIE_NAME (in module gafaelfawr.constants) count (gafaelfawr.events.ActiveUserSessionsEvent attribute) (gafaelfawr.events.ActiveUserTokensEvent attribute) count() (gafaelfawr.models.oidc.OIDCScope method) count_unique_sessions() (gafaelfawr.storage.token.TokenDatabaseStore method) count_user_tokens() (gafaelfawr.storage.token.TokenDatabaseStore method)

cpu (gafaelfawr.config.NotebookQuota attribute) (gafaelfawr.models.userinfo.NotebookQuota attribute) create (gafaelfawr.models.enums.TokenChange attribute) create() (gafaelfawr.factory.Factory class method) (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (in module gafaelfawr.operator.ingress) (in module gafaelfawr.operator.tokens) create_admin_service() (gafaelfawr.factory.Factory method) create_firestore_service() (gafaelfawr.factory.Factory method) create_firestore_storage() (gafaelfawr.factory.Factory method) create_health_check_service() (gafaelfawr.factory.Factory method) create_ingress() (gafaelfawr.storage.kubernetes.KubernetesIngressStorage method) create_kubernetes_ingress_service() (gafaelfawr.factory.Factory method) create_kubernetes_token_service() (gafaelfawr.factory.Factory method) create_oidc_service() (gafaelfawr.factory.Factory method) create_oidc_token() (gafaelfawr.services.token.TokenService method) create_oidc_token_verifier() (gafaelfawr.factory.Factory method) create_provider() (gafaelfawr.factory.Factory method) create_secret() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) create_session_token() (gafaelfawr.services.token.TokenService method) create_slack_client() (gafaelfawr.factory.Factory method) create_token_cache_service() (gafaelfawr.factory.Factory method) create_token_from_admin_request() (gafaelfawr.services.token.TokenService method) create_token_redis_store() (gafaelfawr.factory.Factory method) create_token_service() (gafaelfawr.factory.Factory method) create_user_info() (gafaelfawr.providers.base.Provider method) (gafaelfawr.providers.github.GitHubProvider method) (gafaelfawr.providers.oidc.OIDCProvider method) create_user_info_service() (gafaelfawr.factory.Factory method) create_user_token() (gafaelfawr.services.token.TokenService method) Created (gafaelfawr.models.kubernetes.StatusReason attribute) created (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute) created_at (gafaelfawr.models.oidc.OIDCAuthorization attribute) csrf (gafaelfawr.models.auth.APILoginResponse attribute) (gafaelfawr.models.state.State attribute) CURSOR_REGEX (in module gafaelfawr.constants)

D

data_rights_mapping (gafaelfawr.config.OIDCServerConfig attribute) database_password (gafaelfawr.config.Config attribute) database_url (gafaelfawr.config.Config attribute) DatabaseSchemaError default (gafaelfawr.config.QuotaConfig attribute) delegate (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) delete() (gafaelfawr.storage.admin.AdminStore method) (gafaelfawr.storage.history.TokenChangeHistoryStore method) (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (gafaelfawr.storage.token.TokenDatabaseStore method) (gafaelfawr.storage.token.TokenRedisStore method)

delete_admin() (gafaelfawr.services.admin.AdminService method) delete_all() (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) (gafaelfawr.storage.token.TokenRedisStore method) delete_all_codes() (gafaelfawr.services.oidc.OIDCService method) delete_all_tokens() (gafaelfawr.services.token.TokenService method) delete_expired() (gafaelfawr.storage.token.TokenDatabaseStore method) delete_token() (gafaelfawr.services.token.TokenService method) description (gafaelfawr.models.auth.Scope attribute) dispatch() (gafaelfawr.middleware.state.StateMiddleware method) DuplicateAdminError DuplicateTokenNameError

E

e (gafaelfawr.models.oidc.JWK attribute) edit (gafaelfawr.models.enums.TokenChange attribute) elapsed (gafaelfawr.events.LoginSuccessEvent attribute) email (gafaelfawr.models.ldap.LDAPUserData attribute) (gafaelfawr.models.oidc.OIDCScope attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.userinfo.UserInfo attribute) email_attr (gafaelfawr.config.LDAPConfig attribute) enable_sentry (gafaelfawr.config.Config attribute) enable_telemetry() (in module gafaelfawr.sentry) enabled (gafaelfawr.config.OIDCServerConfig attribute) encode() (gafaelfawr.models.oidc.OIDCScope method) encoded (gafaelfawr.models.oidc.OIDCToken attribute) (gafaelfawr.models.oidc.OIDCVerifiedToken attribute) endswith() (gafaelfawr.models.oidc.OIDCScope method) enrollment_url (gafaelfawr.config.OIDCConfig attribute) error (gafaelfawr.exceptions.DuplicateAdminError attribute) (gafaelfawr.exceptions.DuplicateTokenNameError attribute) (gafaelfawr.exceptions.InsufficientScopeError attribute) (gafaelfawr.exceptions.InvalidClientError attribute) (gafaelfawr.exceptions.InvalidClientIdError attribute) (gafaelfawr.exceptions.InvalidCSRFError attribute) (gafaelfawr.exceptions.InvalidDelegateToError attribute) (gafaelfawr.exceptions.InvalidExpiresError attribute) (gafaelfawr.exceptions.InvalidGrantError attribute) (gafaelfawr.exceptions.InvalidIPAddressError attribute) (gafaelfawr.exceptions.InvalidMinimumLifetimeError attribute) (gafaelfawr.exceptions.InvalidRequestError attribute) (gafaelfawr.exceptions.InvalidReturnURLError attribute) (gafaelfawr.exceptions.InvalidScopesError attribute) (gafaelfawr.exceptions.InvalidServiceError attribute) (gafaelfawr.exceptions.InvalidTokenError attribute) (gafaelfawr.exceptions.NoScopesError attribute) (gafaelfawr.exceptions.NotConfiguredError attribute) (gafaelfawr.exceptions.NotFoundError attribute) (gafaelfawr.exceptions.OAuthError attribute) (gafaelfawr.exceptions.PermissionDeniedError attribute) (gafaelfawr.exceptions.ReturnUriMismatchError attribute) (gafaelfawr.exceptions.UnsupportedGrantTypeError attribute)

error_footer (gafaelfawr.config.Config attribute) event_time (gafaelfawr.models.history.AdminHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) events (gafaelfawr.dependencies.context.RequestContext attribute) Exact (gafaelfawr.models.kubernetes.PathType attribute) exp (gafaelfawr.models.userinfo.CADCUserInfo attribute) expandtabs() (gafaelfawr.models.oidc.OIDCScope method) expire (gafaelfawr.models.enums.TokenChange attribute) expire_tokens() (gafaelfawr.services.token.TokenService method) expires (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute) (gafaelfawr.models.token.UserTokenModifyRequest attribute) (gafaelfawr.models.token.UserTokenRequest attribute) expires_in (gafaelfawr.models.oidc.OIDCTokenReply attribute) ExternalUserInfoError

F

Factory (class in gafaelfawr.factory) factory (gafaelfawr.dependencies.context.RequestContext attribute) Failed (gafaelfawr.models.kubernetes.StatusReason attribute) failure() (gafaelfawr.models.kubernetes.KubernetesResourceStatus class method) fake() (gafaelfawr.events.ActiveUserSessionsEvent class method) (gafaelfawr.events.ActiveUserTokensEvent class method) (gafaelfawr.events.AuthBotEvent class method) (gafaelfawr.events.AuthUserEvent class method) (gafaelfawr.events.LoginAttemptEvent class method) (gafaelfawr.events.LoginEnrollmentEvent class method) (gafaelfawr.events.LoginFailureEvent class method) (gafaelfawr.events.LoginSuccessEvent class method) FetchKeysError find() (gafaelfawr.models.oidc.OIDCScope method) firestore (gafaelfawr.config.Config attribute) (gafaelfawr.factory.ProcessContext attribute)

FirestoreError FirestoreNotInitializedError FirestoreService (class in gafaelfawr.services.firestore) FirestoreStorage (class in gafaelfawr.storage.firestore) format() (gafaelfawr.models.oidc.OIDCScope method) format_map() (gafaelfawr.models.oidc.OIDCScope method) from_config() (gafaelfawr.factory.ProcessContext class method) from_cookie() (gafaelfawr.middleware.state.BaseState class method) (gafaelfawr.models.state.State class method) from_entry() (gafaelfawr.models.history.TokenChangeHistoryCursor class method) from_file() (gafaelfawr.config.Config class method) from_pem() (gafaelfawr.keypair.RSAKeyPair class method) from_str() (gafaelfawr.models.history.TokenChangeHistoryCursor class method) (gafaelfawr.models.oidc.OIDCAuthorizationCode class method) (gafaelfawr.models.token.Token class method) FrontendEvents (class in gafaelfawr.events)

G

gafaelfawr module gafaelfawr command line option --version gafaelfawr-audit command line option --config-path --fix gafaelfawr-delete-all-data command line option --config-path gafaelfawr-generate-schema command line option --config-path --output gafaelfawr-help command line option TOPIC gafaelfawr-init command line option --alembic-config-path --config-path gafaelfawr-maintenance command line option --config-path gafaelfawr-openapi-schema command line option --add-back-link --output gafaelfawr-run command line option --port gafaelfawr-update-schema command line option --alembic-config-path --config-path gafaelfawr-validate-schema command line option --config-path gafaelfawr.auth module gafaelfawr.cache module gafaelfawr.config module gafaelfawr.constants module gafaelfawr.dependencies.auth module gafaelfawr.dependencies.config module gafaelfawr.dependencies.context module gafaelfawr.dependencies.return_url module gafaelfawr.events module gafaelfawr.exceptions module gafaelfawr.factory module gafaelfawr.keypair module gafaelfawr.middleware.state module gafaelfawr.models.admin module gafaelfawr.models.auth module gafaelfawr.models.enums module gafaelfawr.models.history module gafaelfawr.models.kubernetes module gafaelfawr.models.ldap module gafaelfawr.models.oidc module gafaelfawr.models.state module gafaelfawr.models.token module gafaelfawr.models.userinfo module gafaelfawr.operator module gafaelfawr.operator.health module gafaelfawr.operator.ingress module gafaelfawr.operator.startup module gafaelfawr.operator.tokens module gafaelfawr.providers.base module gafaelfawr.providers.github module gafaelfawr.providers.oidc module gafaelfawr.pydantic module gafaelfawr.sentry module gafaelfawr.services.admin module gafaelfawr.services.firestore module gafaelfawr.services.health module gafaelfawr.services.kubernetes module

gafaelfawr.services.ldap module gafaelfawr.services.oidc module gafaelfawr.services.token module gafaelfawr.services.token_cache module gafaelfawr.services.userinfo module gafaelfawr.storage.admin module gafaelfawr.storage.firestore module gafaelfawr.storage.history module gafaelfawr.storage.kubernetes module gafaelfawr.storage.ldap module gafaelfawr.storage.oidc module gafaelfawr.storage.token module gafaelfawr.templates module gafaelfawr.util module gather_state_metrics() (gafaelfawr.services.token.TokenService method) generate() (gafaelfawr.keypair.RSAKeyPair class method) generate_challenge() (in module gafaelfawr.auth) generate_unauthorized_challenge() (in module gafaelfawr.auth) generation (gafaelfawr.models.kubernetes.KubernetesMetadata attribute) get() (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.InternalTokenCache method) (gafaelfawr.cache.LDAPCache method) (gafaelfawr.cache.NotebookTokenCache method) (gafaelfawr.storage.oidc.OIDCAuthorizationStore method) get_admins() (gafaelfawr.services.admin.AdminService method) get_change_history() (gafaelfawr.services.token.TokenService method) get_children() (gafaelfawr.storage.token.TokenDatabaseStore method) get_data() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.services.token.TokenService method) (gafaelfawr.storage.ldap.LDAPStorage method) (gafaelfawr.storage.token.TokenRedisStore method) get_data_by_key() (gafaelfawr.storage.token.TokenRedisStore method) get_gid() (gafaelfawr.services.firestore.FirestoreService method) (gafaelfawr.storage.firestore.FirestoreStorage method) get_group_names() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.storage.ldap.LDAPStorage method) get_groups() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.storage.ldap.LDAPStorage method) get_health() (in module gafaelfawr.operator.health) get_info() (gafaelfawr.storage.token.TokenDatabaseStore method) get_ingress() (gafaelfawr.storage.kubernetes.KubernetesIngressStorage method) get_internal_token() (gafaelfawr.services.token.TokenService method) (gafaelfawr.services.token_cache.TokenCacheService method) get_internal_token_key() (gafaelfawr.storage.token.TokenDatabaseStore method) get_jwks() (gafaelfawr.services.oidc.OIDCService method) get_notebook_token() (gafaelfawr.services.token.TokenService method) (gafaelfawr.services.token_cache.TokenCacheService method) get_notebook_token_key() (gafaelfawr.storage.token.TokenDatabaseStore method) get_openid_configuration() (gafaelfawr.services.oidc.OIDCService method) get_redirect_url() (gafaelfawr.providers.base.Provider method) (gafaelfawr.providers.github.GitHubProvider method) (gafaelfawr.providers.oidc.OIDCProvider method) get_scopes() (gafaelfawr.services.userinfo.UserInfoService method) get_scopes_for_group() (gafaelfawr.config.Config method) get_secret() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) get_token_info() (gafaelfawr.services.token.TokenService method) get_token_info_unchecked() (gafaelfawr.services.token.TokenService method) get_uid() (gafaelfawr.services.firestore.FirestoreService method) (gafaelfawr.storage.firestore.FirestoreStorage method) get_user_info_from_token() (gafaelfawr.services.userinfo.UserInfoService method) gid (gafaelfawr.models.ldap.LDAPUserData attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.userinfo.UserInfo attribute) gid_attr (gafaelfawr.config.LDAPConfig attribute) gid_cache (gafaelfawr.factory.ProcessContext attribute) GID_MAX (in module gafaelfawr.constants) GID_MIN (in module gafaelfawr.constants) github (gafaelfawr.config.Config attribute) (gafaelfawr.config.GitHubGroup attribute) (gafaelfawr.models.state.State attribute) GitHubError GitHubProvider (class in gafaelfawr.providers.github) GitHubWebError grant_types_supported (gafaelfawr.models.oidc.OIDCConfig attribute) group_base_dn (gafaelfawr.config.LDAPConfig attribute) group_mapping (gafaelfawr.config.Config attribute) group_member_attr (gafaelfawr.config.LDAPConfig attribute) group_name_for_github_team() (in module gafaelfawr.util) group_object_class (gafaelfawr.config.LDAPConfig attribute) group_search_by_dn (gafaelfawr.config.LDAPConfig attribute) GROUPNAME_REGEX (in module gafaelfawr.constants) groups (gafaelfawr.config.QuotaConfig attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.userinfo.UserInfo attribute)

H

HealthCheckService (class in gafaelfawr.services.health) hide_error (gafaelfawr.exceptions.InvalidGrantError attribute) (gafaelfawr.exceptions.OAuthError attribute) host (gafaelfawr.models.kubernetes.GafaelfawrIngressRule attribute)

hosts (gafaelfawr.models.kubernetes.GafaelfawrIngressTLS attribute) http (gafaelfawr.models.kubernetes.GafaelfawrIngressRule attribute) http_client (gafaelfawr.factory.ProcessContext attribute) HTTP_TIMEOUT (in module gafaelfawr.constants) HttpsUrl (in module gafaelfawr.config)

I

id (gafaelfawr.config.OIDCClient attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.userinfo.Group attribute) ID_CACHE_SIZE (in module gafaelfawr.constants) id_column() (gafaelfawr.models.history.TokenChangeHistoryCursor static method) id_token (gafaelfawr.models.oidc.OIDCTokenReply attribute) id_token_signing_alg_values_supported (gafaelfawr.models.oidc.OIDCConfig attribute) IdCache (class in gafaelfawr.cache) ImplementationSpecific (gafaelfawr.models.kubernetes.PathType attribute) index() (gafaelfawr.models.oidc.OIDCScope method) initial_admins (gafaelfawr.config.Config attribute) initialize() (gafaelfawr.cache.LDAPCache method) (gafaelfawr.cache.PerUserCache method) (gafaelfawr.cache.TokenCache method) (gafaelfawr.dependencies.context.ContextDependency method) (gafaelfawr.events.FrontendEvents method) (gafaelfawr.events.StateEvents method) (gafaelfawr.storage.firestore.FirestoreStorage method) InputValidationError insufficient_scope (gafaelfawr.models.auth.AuthError attribute) InsufficientScopeError internal (gafaelfawr.models.enums.TokenType attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegate attribute) internal_database (gafaelfawr.config.Config attribute) internal_token() (gafaelfawr.models.token.TokenData class method) internal_token_cache (gafaelfawr.factory.ProcessContext attribute) InternalTokenCache (class in gafaelfawr.cache) invalid_request (gafaelfawr.models.auth.AuthError attribute) invalid_token (gafaelfawr.models.auth.AuthError attribute) invalidate() (gafaelfawr.cache.LDAPCache method) invalidate_cache() (gafaelfawr.services.ldap.LDAPService method) (gafaelfawr.services.userinfo.UserInfoService method) InvalidClientError InvalidClientIdError InvalidCSRFError InvalidDelegateToError InvalidExpiresError

InvalidGrantError InvalidIPAddressError InvalidMinimumLifetimeError InvalidRequestError InvalidReturnURLError InvalidScopesError InvalidServiceError InvalidTokenClaimsError InvalidTokenError invert() (gafaelfawr.models.history.TokenChangeHistoryCursor method) ip_address (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.models.history.AdminHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) IpAddress (in module gafaelfawr.pydantic) is_anonymous() (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll method) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous method) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny method) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase method) is_bot_user() (in module gafaelfawr.util) is_token() (gafaelfawr.models.token.Token class method) isalnum() (gafaelfawr.models.oidc.OIDCScope method) isalpha() (gafaelfawr.models.oidc.OIDCScope method) isascii() (gafaelfawr.models.oidc.OIDCScope method) isdecimal() (gafaelfawr.models.oidc.OIDCScope method) isdigit() (gafaelfawr.models.oidc.OIDCScope method) isidentifier() (gafaelfawr.models.oidc.OIDCScope method) islower() (gafaelfawr.models.oidc.OIDCScope method) isnumeric() (gafaelfawr.models.oidc.OIDCScope method) isprintable() (gafaelfawr.models.oidc.OIDCScope method) isspace() (gafaelfawr.models.oidc.OIDCScope method) issue_code() (gafaelfawr.services.oidc.OIDCService method) issue_id_token() (gafaelfawr.services.oidc.OIDCService method) issuer (gafaelfawr.config.OIDCConfig attribute) (gafaelfawr.config.OIDCServerConfig attribute) (gafaelfawr.models.oidc.OIDCConfig attribute) istitle() (gafaelfawr.models.oidc.OIDCScope method) isupper() (gafaelfawr.models.oidc.OIDCScope method)

J

join() (gafaelfawr.models.oidc.OIDCScope method) json_schema() (gafaelfawr.events.ActiveUserSessionsEvent class method) (gafaelfawr.events.ActiveUserTokensEvent class method) (gafaelfawr.events.AuthBotEvent class method) (gafaelfawr.events.AuthUserEvent class method) (gafaelfawr.events.LoginAttemptEvent class method) (gafaelfawr.events.LoginEnrollmentEvent class method) (gafaelfawr.events.LoginFailureEvent class method) (gafaelfawr.events.LoginSuccessEvent class method)

jti (gafaelfawr.models.oidc.OIDCVerifiedToken attribute) jwks_uri (gafaelfawr.models.oidc.OIDCConfig attribute)

K

kerberos_config (gafaelfawr.config.LDAPConfig attribute) key (gafaelfawr.config.OIDCServerConfig attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngress property) (gafaelfawr.models.kubernetes.GafaelfawrServiceToken property) (gafaelfawr.models.kubernetes.KubernetesResource property) (gafaelfawr.models.oidc.OIDCAuthorizationCode attribute) (gafaelfawr.models.token.Token attribute) key_id (gafaelfawr.config.OIDCServerConfig attribute) keypair (gafaelfawr.config.OIDCServerConfig property) keys (gafaelfawr.models.oidc.JWKS attribute) kid (gafaelfawr.models.oidc.JWK attribute)

known_scopes (gafaelfawr.config.Config attribute) kty (gafaelfawr.models.oidc.JWK attribute) KUBERNETES_TIMER_DELAY (in module gafaelfawr.constants) KUBERNETES_TOKEN_INTERVAL (in module gafaelfawr.constants) KUBERNETES_WATCH_TIMEOUT (in module gafaelfawr.constants) KubernetesError KubernetesIngressService (class in gafaelfawr.services.kubernetes) KubernetesIngressStorage (class in gafaelfawr.storage.kubernetes) KubernetesObjectError KubernetesResourceStatus (class in gafaelfawr.models.kubernetes) KubernetesTokenService (class in gafaelfawr.services.kubernetes) KubernetesTokenStorage (class in gafaelfawr.storage.kubernetes)

L

labels (gafaelfawr.models.kubernetes.GafaelfawrIngressMetadata attribute) (gafaelfawr.models.kubernetes.KubernetesMetadata attribute) last_used (gafaelfawr.models.token.TokenInfo attribute) ldap (gafaelfawr.config.Config attribute) LDAP_CACHE_LIFETIME (in module gafaelfawr.constants) LDAP_CACHE_SIZE (in module gafaelfawr.constants) ldap_group_cache (gafaelfawr.factory.ProcessContext attribute) ldap_group_name_cache (gafaelfawr.factory.ProcessContext attribute) ldap_pool (gafaelfawr.factory.ProcessContext attribute) LDAP_TIMEOUT (in module gafaelfawr.constants) ldap_user_cache (gafaelfawr.factory.ProcessContext attribute) LDAPCache (class in gafaelfawr.cache) LDAPError LDAPService (class in gafaelfawr.services.ldap) LDAPStorage (class in gafaelfawr.storage.ldap) LDAPUserData (class in gafaelfawr.models.ldap) lifetime (gafaelfawr.models.oidc.OIDCAuthorization property) list() (gafaelfawr.storage.admin.AdminStore method) (gafaelfawr.storage.history.TokenChangeHistoryStore method) (gafaelfawr.storage.token.TokenRedisStore method) list_orphaned() (gafaelfawr.storage.token.TokenDatabaseStore method)

list_tokens() (gafaelfawr.services.token.TokenService method) (gafaelfawr.storage.token.TokenDatabaseStore method) list_with_parents() (gafaelfawr.storage.token.TokenDatabaseStore method) ljust() (gafaelfawr.models.oidc.OIDCScope method) lock() (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.PerUserCache method) log_level (gafaelfawr.config.Config attribute) logger (gafaelfawr.dependencies.context.RequestContext attribute) login_attempt (gafaelfawr.events.FrontendEvents attribute) login_enrollment (gafaelfawr.events.FrontendEvents attribute) login_failure (gafaelfawr.events.FrontendEvents attribute) login_params (gafaelfawr.config.OIDCConfig attribute) login_redirect (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) login_start (gafaelfawr.models.state.State attribute) login_success (gafaelfawr.events.FrontendEvents attribute) login_url (gafaelfawr.config.OIDCConfig attribute) logout() (gafaelfawr.providers.base.Provider method) (gafaelfawr.providers.github.GitHubProvider method) (gafaelfawr.providers.oidc.OIDCProvider method) lower() (gafaelfawr.models.oidc.OIDCScope method) lstrip() (gafaelfawr.models.oidc.OIDCScope method)

M

maketrans() (gafaelfawr.models.oidc.OIDCScope static method) memory (gafaelfawr.config.NotebookQuota attribute) (gafaelfawr.models.userinfo.NotebookQuota attribute) message (gafaelfawr.exceptions.InsufficientScopeError attribute) (gafaelfawr.exceptions.InvalidClientError attribute) (gafaelfawr.exceptions.InvalidGrantError attribute) (gafaelfawr.exceptions.InvalidRequestError attribute) (gafaelfawr.exceptions.InvalidTokenError attribute) (gafaelfawr.exceptions.OAuthError attribute) (gafaelfawr.exceptions.UnsupportedGrantTypeError attribute) metadata (gafaelfawr.models.kubernetes.GafaelfawrIngress attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressTemplate attribute) (gafaelfawr.models.kubernetes.GafaelfawrServiceToken attribute) (gafaelfawr.models.kubernetes.KubernetesResource attribute) metrics (gafaelfawr.config.Config attribute) minimum_lifetime (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegate attribute) MINIMUM_LIFETIME (in module gafaelfawr.constants) MissingGIDClaimError MissingUIDClaimError MissingUsernameClaimError model_dump_reduced() (gafaelfawr.models.history.TokenChangeHistoryEntry method) (gafaelfawr.models.history.TokenChangeHistoryRecord method) model_post_init() (gafaelfawr.config.Config method) (gafaelfawr.config.OIDCServerConfig method) modify() (gafaelfawr.storage.token.TokenDatabaseStore method) modify_token() (gafaelfawr.services.token.TokenService method) module gafaelfawr gafaelfawr.auth gafaelfawr.cache gafaelfawr.config gafaelfawr.constants gafaelfawr.dependencies.auth gafaelfawr.dependencies.config gafaelfawr.dependencies.context gafaelfawr.dependencies.return_url gafaelfawr.events gafaelfawr.exceptions gafaelfawr.factory gafaelfawr.keypair gafaelfawr.middleware.state gafaelfawr.models.admin gafaelfawr.models.auth gafaelfawr.models.enums gafaelfawr.models.history gafaelfawr.models.kubernetes gafaelfawr.models.ldap gafaelfawr.models.oidc gafaelfawr.models.state gafaelfawr.models.token gafaelfawr.models.userinfo gafaelfawr.operator gafaelfawr.operator.health gafaelfawr.operator.ingress gafaelfawr.operator.startup gafaelfawr.operator.tokens gafaelfawr.providers.base gafaelfawr.providers.github gafaelfawr.providers.oidc gafaelfawr.pydantic gafaelfawr.sentry gafaelfawr.services.admin gafaelfawr.services.firestore gafaelfawr.services.health gafaelfawr.services.kubernetes gafaelfawr.services.ldap gafaelfawr.services.oidc gafaelfawr.services.token gafaelfawr.services.token_cache gafaelfawr.services.userinfo gafaelfawr.storage.admin gafaelfawr.storage.firestore gafaelfawr.storage.history gafaelfawr.storage.kubernetes gafaelfawr.storage.ldap gafaelfawr.storage.oidc gafaelfawr.storage.token gafaelfawr.templates gafaelfawr.util

N

n (gafaelfawr.models.oidc.JWK attribute) name (gafaelfawr.models.auth.Scope attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressMetadata attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathService attribute) (gafaelfawr.models.kubernetes.GafaelfawrServicePortName attribute) (gafaelfawr.models.kubernetes.KubernetesMetadata attribute) (gafaelfawr.models.ldap.LDAPUserData attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.userinfo.Group attribute) (gafaelfawr.models.userinfo.UserInfo attribute) name_attr (gafaelfawr.config.LDAPConfig attribute) namespace (gafaelfawr.models.kubernetes.KubernetesMetadata attribute)

NGINX_SNIPPET (in module gafaelfawr.constants) NoAvailableGidError NoAvailableUidError nonce (gafaelfawr.models.oidc.OIDCAuthorization attribute) NoScopesError NotConfiguredError notebook (gafaelfawr.config.QuotaGrant attribute) (gafaelfawr.models.enums.TokenType attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegate attribute) (gafaelfawr.models.userinfo.Quota attribute) notebook_token_cache (gafaelfawr.factory.ProcessContext attribute) NotebookTokenCache (class in gafaelfawr.cache) NotFoundError number (gafaelfawr.models.kubernetes.GafaelfawrServicePortNumber attribute) number_to_base64() (in module gafaelfawr.util)

O

OAuthBearerError OAuthError oidc (gafaelfawr.config.Config attribute) (gafaelfawr.models.enums.TokenType attribute) OIDC_AUTHORIZATION_LIFETIME (in module gafaelfawr.constants) oidc_server (gafaelfawr.config.Config attribute) OIDCAuthorizationStore (class in gafaelfawr.storage.oidc) OIDCError OIDCNotEnrolledError OIDCProvider (class in gafaelfawr.providers.oidc) OIDCScope (class in gafaelfawr.models.oidc)

OIDCService (class in gafaelfawr.services.oidc) OIDCTokenVerifier (class in gafaelfawr.providers.oidc) OIDCWebError old_expires (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) old_scopes (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) old_token_name (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) only_services (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) openid (gafaelfawr.models.oidc.OIDCScope attribute) organization (gafaelfawr.config.GitHubGroupTeam attribute)

P

parent (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.token.TokenInfo attribute) parse_authorization() (in module gafaelfawr.auth) partition() (gafaelfawr.models.oidc.OIDCScope method) password (gafaelfawr.config.LDAPConfig attribute) path (gafaelfawr.models.kubernetes.GafaelfawrIngressPath attribute) path_type (gafaelfawr.models.kubernetes.GafaelfawrIngressPath attribute) paths (gafaelfawr.models.kubernetes.GafaelfawrIngressRuleHTTP attribute) PathType (class in gafaelfawr.models.kubernetes) periodic() (in module gafaelfawr.operator.tokens) PermissionDeniedError PerUserCache (class in gafaelfawr.cache) port (gafaelfawr.models.kubernetes.GafaelfawrIngressPathService attribute) preferred_username (gafaelfawr.models.userinfo.CADCUserInfo attribute) Prefix (gafaelfawr.models.kubernetes.PathType attribute)

private_key_as_pem() (gafaelfawr.keypair.RSAKeyPair method) process_context (gafaelfawr.dependencies.context.ContextDependency attribute) ProcessContext (class in gafaelfawr.factory) profile (gafaelfawr.models.oidc.OIDCScope attribute) project (gafaelfawr.config.FirestoreConfig attribute) Provider (class in gafaelfawr.providers.base) ProviderError ProviderWebError proxies (gafaelfawr.config.Config attribute) public_key_as_jwks() (gafaelfawr.keypair.RSAKeyPair method) public_key_as_pem() (gafaelfawr.keypair.RSAKeyPair method) public_numbers() (gafaelfawr.keypair.RSAKeyPair method) Python Enhancement Proposals PEP 440, [1] PEP 484 PEP 8

Q

quota (gafaelfawr.config.Config attribute) (gafaelfawr.models.userinfo.UserInfo attribute)

R

random_128_bits() (in module gafaelfawr.util) realm (gafaelfawr.config.Config attribute) rebind_logger() (gafaelfawr.dependencies.context.RequestContext method) redeem_code() (gafaelfawr.services.oidc.OIDCService method) redirect_uri (gafaelfawr.models.oidc.OIDCAuthorization attribute) redirect_url (gafaelfawr.config.OIDCConfig attribute) redis (gafaelfawr.factory.Factory attribute) (gafaelfawr.factory.ProcessContext attribute) REDIS_BACKOFF_MAX (in module gafaelfawr.constants) REDIS_BACKOFF_START (in module gafaelfawr.constants) redis_password (gafaelfawr.config.Config attribute) REDIS_POOL_SIZE (in module gafaelfawr.constants) REDIS_POOL_TIMEOUT (in module gafaelfawr.constants) REDIS_RETRIES (in module gafaelfawr.constants) REDIS_TIMEOUT (in module gafaelfawr.constants) redis_url (gafaelfawr.config.Config attribute) remove (gafaelfawr.models.enums.AdminChange attribute) removeprefix() (gafaelfawr.models.oidc.OIDCScope method) removesuffix() (gafaelfawr.models.oidc.OIDCScope method) replace() (gafaelfawr.models.oidc.OIDCScope method) replace_403 (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) replace_ingress() (gafaelfawr.storage.kubernetes.KubernetesIngressStorage method) replace_secret() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method)

request (gafaelfawr.dependencies.context.RequestContext attribute) RequestContext (class in gafaelfawr.dependencies.context) response_modes_supported (gafaelfawr.models.oidc.OIDCConfig attribute) response_types_supported (gafaelfawr.models.oidc.OIDCConfig attribute) return_uri (gafaelfawr.config.OIDCClient attribute) return_url (gafaelfawr.models.state.State attribute) return_url() (in module gafaelfawr.dependencies.return_url) return_url_with_header() (in module gafaelfawr.dependencies.return_url) ReturnUriMismatchError revoke (gafaelfawr.models.enums.TokenChange attribute) RFC RFC 2307, [1], [2] RFC 6750, [1] RFC 7617 rfind() (gafaelfawr.models.oidc.OIDCScope method) rindex() (gafaelfawr.models.oidc.OIDCScope method) rjust() (gafaelfawr.models.oidc.OIDCScope method) rpartition() (gafaelfawr.models.oidc.OIDCScope method) RSAKeyPair (class in gafaelfawr.keypair) rsplit() (gafaelfawr.models.oidc.OIDCScope method) rstrip() (gafaelfawr.models.oidc.OIDCScope method) rubin (gafaelfawr.models.oidc.OIDCScope attribute) rules (gafaelfawr.models.kubernetes.GafaelfawrIngressSpec attribute)

S

Satisfy (class in gafaelfawr.models.auth) satisfy (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll property) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous property) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny property) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase property) scope (gafaelfawr.models.auth.AuthErrorChallenge attribute) (gafaelfawr.models.oidc.OIDCTokenReply attribute) SCOPE_REGEX (in module gafaelfawr.constants) scopes (gafaelfawr.config.OIDCConfig attribute) (gafaelfawr.models.auth.APIConfig attribute) (gafaelfawr.models.auth.APILoginResponse attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegateInternal attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAll property) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAnonymous property) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesAny property) (gafaelfawr.models.kubernetes.GafaelfawrIngressScopesBase property) (gafaelfawr.models.kubernetes.GafaelfawrServiceTokenSpec attribute) (gafaelfawr.models.oidc.OIDCAuthorization attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute) (gafaelfawr.models.token.UserTokenModifyRequest attribute) (gafaelfawr.models.token.UserTokenRequest attribute) Scopes (in module gafaelfawr.pydantic) scopes_supported (gafaelfawr.models.oidc.OIDCConfig attribute) secret (gafaelfawr.config.OIDCClient attribute) (gafaelfawr.models.oidc.OIDCAuthorizationCode attribute) (gafaelfawr.models.token.Token attribute) secret_name (gafaelfawr.models.kubernetes.GafaelfawrIngressTLS attribute) serialize() (gafaelfawr.events.ActiveUserSessionsEvent method) (gafaelfawr.events.ActiveUserTokensEvent method) (gafaelfawr.events.AuthBotEvent method) (gafaelfawr.events.AuthUserEvent method) (gafaelfawr.events.LoginAttemptEvent method) (gafaelfawr.events.LoginEnrollmentEvent method) (gafaelfawr.events.LoginFailureEvent method) (gafaelfawr.events.LoginSuccessEvent method) service (gafaelfawr.events.AuthBotEvent attribute) (gafaelfawr.events.AuthUserEvent attribute) (gafaelfawr.models.enums.TokenType attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegateInternal attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathBackend attribute) (gafaelfawr.models.kubernetes.GafaelfawrServiceTokenSpec attribute) (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute)

session (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.models.enums.TokenType attribute) session_secret (gafaelfawr.config.Config attribute) set_config_path() (gafaelfawr.dependencies.config.ConfigDependency method) set_context() (gafaelfawr.factory.Factory method) set_logger() (gafaelfawr.factory.Factory method) shutdown() (in module gafaelfawr.operator.startup) slack_alerts (gafaelfawr.config.Config attribute) slack_webhook (gafaelfawr.config.Config attribute) spec (gafaelfawr.models.kubernetes.GafaelfawrIngressTemplate attribute) (gafaelfawr.models.kubernetes.GafaelfawrServiceToken attribute) split() (gafaelfawr.models.oidc.OIDCScope method) splitlines() (gafaelfawr.models.oidc.OIDCScope method) standalone() (gafaelfawr.factory.Factory class method) startswith() (gafaelfawr.models.oidc.OIDCScope method) startup() (in module gafaelfawr.operator.startup) State (class in gafaelfawr.models.state) state (gafaelfawr.dependencies.context.RequestContext attribute) (gafaelfawr.models.state.State attribute) StateEvents (class in gafaelfawr.events) StateMiddleware (class in gafaelfawr.middleware.state) status_code (gafaelfawr.exceptions.DuplicateAdminError attribute) (gafaelfawr.exceptions.DuplicateTokenNameError attribute) (gafaelfawr.exceptions.InsufficientScopeError attribute) (gafaelfawr.exceptions.InvalidClientIdError attribute) (gafaelfawr.exceptions.InvalidCSRFError attribute) (gafaelfawr.exceptions.InvalidTokenError attribute) (gafaelfawr.exceptions.NoScopesError attribute) (gafaelfawr.exceptions.NotConfiguredError attribute) (gafaelfawr.exceptions.NotFoundError attribute) (gafaelfawr.exceptions.OAuthBearerError attribute) (gafaelfawr.exceptions.PermissionDeniedError attribute) (gafaelfawr.exceptions.ReturnUriMismatchError attribute) StatusReason (class in gafaelfawr.models.kubernetes) store() (gafaelfawr.cache.IdCache method) (gafaelfawr.cache.InternalTokenCache method) (gafaelfawr.cache.LDAPCache method) (gafaelfawr.cache.NotebookTokenCache method) store_data() (gafaelfawr.storage.token.TokenRedisStore method) strip() (gafaelfawr.models.oidc.OIDCScope method) sub (gafaelfawr.models.userinfo.CADCUserInfo attribute) subject_types_supported (gafaelfawr.models.oidc.OIDCConfig attribute) swapcase() (gafaelfawr.models.oidc.OIDCScope method)

T

team (gafaelfawr.config.GitHubGroupTeam attribute) template (gafaelfawr.models.kubernetes.GafaelfawrIngress attribute) templates (in module gafaelfawr.templates) time_column() (gafaelfawr.models.history.TokenChangeHistoryCursor static method) Timestamp (in module gafaelfawr.pydantic) title() (gafaelfawr.models.oidc.OIDCScope method) tls (gafaelfawr.models.kubernetes.GafaelfawrIngressSpec attribute) to_auth_query() (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig method) to_cookie() (gafaelfawr.middleware.state.BaseState method) (gafaelfawr.models.state.State method) to_dict() (gafaelfawr.events.ActiveUserSessionsEvent method) (gafaelfawr.events.ActiveUserTokensEvent method) (gafaelfawr.events.AuthBotEvent method) (gafaelfawr.events.AuthUserEvent method) (gafaelfawr.events.LoginAttemptEvent method) (gafaelfawr.events.LoginEnrollmentEvent method) (gafaelfawr.events.LoginFailureEvent method) (gafaelfawr.events.LoginSuccessEvent method) (gafaelfawr.models.kubernetes.KubernetesResourceStatus method) to_header() (gafaelfawr.models.auth.AuthChallenge method) (gafaelfawr.models.auth.AuthErrorChallenge method) to_kubernetes() (gafaelfawr.models.kubernetes.GafaelfawrIngressPath method) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathBackend method) (gafaelfawr.models.kubernetes.GafaelfawrIngressPathService method) (gafaelfawr.models.kubernetes.GafaelfawrIngressRule method) (gafaelfawr.models.kubernetes.GafaelfawrIngressRuleHTTP method) (gafaelfawr.models.kubernetes.GafaelfawrIngressTLS method) (gafaelfawr.models.kubernetes.GafaelfawrServicePortName method) (gafaelfawr.models.kubernetes.GafaelfawrServicePortNumber method) to_userinfo_dict() (gafaelfawr.models.token.TokenData method) (gafaelfawr.models.token.TokenUserInfo method) token (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.oidc.OIDCAuthorization attribute) (gafaelfawr.models.state.State attribute) (gafaelfawr.models.token.NewToken attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute)

TOKEN_CACHE_SIZE (in module gafaelfawr.constants) token_endpoint (gafaelfawr.models.oidc.OIDCConfig attribute) token_endpoint_auth_methods_supported (gafaelfawr.models.oidc.OIDCConfig attribute) token_lifetime (gafaelfawr.config.Config attribute) token_name (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenInfo attribute) (gafaelfawr.models.token.UserTokenModifyRequest attribute) (gafaelfawr.models.token.UserTokenRequest attribute) token_to_userinfo_claims() (gafaelfawr.services.oidc.OIDCService method) token_type (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.oidc.OIDCTokenReply attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute) token_url (gafaelfawr.config.OIDCConfig attribute) TokenCache (class in gafaelfawr.cache) TokenCacheService (class in gafaelfawr.services.token_cache) TokenChange (class in gafaelfawr.models.enums) TokenChangeHistoryCursor (class in gafaelfawr.models.history) TokenChangeHistoryStore (class in gafaelfawr.storage.history) TokenDatabaseStore (class in gafaelfawr.storage.token) TokenRedisStore (class in gafaelfawr.storage.token) TokenService (class in gafaelfawr.services.token) TokenType (class in gafaelfawr.models.enums) TOPIC gafaelfawr-help command line option translate() (gafaelfawr.models.oidc.OIDCScope method) truncate_history() (gafaelfawr.services.token.TokenService method)

U

uid (gafaelfawr.models.kubernetes.KubernetesMetadata attribute) (gafaelfawr.models.ldap.LDAPUserData attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.userinfo.UserInfo attribute) uid_attr (gafaelfawr.config.LDAPConfig attribute) UID_BOT_MAX (in module gafaelfawr.constants) UID_BOT_MIN (in module gafaelfawr.constants) uid_cache (gafaelfawr.factory.ProcessContext attribute) UID_USER_MIN (in module gafaelfawr.constants) UnknownAlgorithmError UnknownKeyIdError UnsupportedGrantTypeError update() (gafaelfawr.services.kubernetes.KubernetesIngressService method) (gafaelfawr.services.kubernetes.KubernetesTokenService method) update_schema (gafaelfawr.config.Config attribute) update_secret_metadata() (gafaelfawr.storage.kubernetes.KubernetesTokenStorage method) Updated (gafaelfawr.models.kubernetes.StatusReason attribute) upper() (gafaelfawr.models.oidc.OIDCScope method) url (gafaelfawr.config.LDAPConfig attribute) use (gafaelfawr.models.oidc.JWK attribute) use_authorization (gafaelfawr.models.kubernetes.GafaelfawrIngressDelegate attribute) use_kerberos (gafaelfawr.config.LDAPConfig attribute)

user (gafaelfawr.models.enums.TokenType attribute) user_base_dn (gafaelfawr.config.LDAPConfig attribute) user_dn (gafaelfawr.config.LDAPConfig attribute) user_search_attr (gafaelfawr.config.LDAPConfig attribute) userinfo_endpoint (gafaelfawr.models.oidc.OIDCConfig attribute) UserInfoService (class in gafaelfawr.services.userinfo) UserLockManager (class in gafaelfawr.cache) username (gafaelfawr.events.AuthBotEvent attribute) (gafaelfawr.events.AuthUserEvent attribute) (gafaelfawr.events.LoginSuccessEvent attribute) (gafaelfawr.models.admin.Admin attribute) (gafaelfawr.models.auth.APILoginResponse attribute) (gafaelfawr.models.history.AdminHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryEntry attribute) (gafaelfawr.models.history.TokenChangeHistoryRecord attribute) (gafaelfawr.models.kubernetes.GafaelfawrIngressConfig attribute) (gafaelfawr.models.token.AdminTokenRequest attribute) (gafaelfawr.models.token.TokenBase attribute) (gafaelfawr.models.token.TokenData attribute) (gafaelfawr.models.token.TokenInfo attribute) (gafaelfawr.models.token.TokenUserInfo attribute) (gafaelfawr.models.userinfo.UserInfo attribute) username_claim (gafaelfawr.config.OIDCConfig attribute) USERNAME_REGEX (in module gafaelfawr.constants)

V

validate_avro() (gafaelfawr.events.ActiveUserSessionsEvent method) (gafaelfawr.events.ActiveUserTokensEvent method) (gafaelfawr.events.AuthBotEvent method) (gafaelfawr.events.AuthUserEvent method) (gafaelfawr.events.LoginAttemptEvent method) (gafaelfawr.events.LoginEnrollmentEvent method) (gafaelfawr.events.LoginFailureEvent method) (gafaelfawr.events.LoginSuccessEvent method) validate_client() (gafaelfawr.services.oidc.OIDCService method) validate_structure() (gafaelfawr.events.ActiveUserSessionsEvent class method) (gafaelfawr.events.ActiveUserTokensEvent class method) (gafaelfawr.events.AuthBotEvent class method) (gafaelfawr.events.AuthUserEvent class method) (gafaelfawr.events.LoginAttemptEvent class method) (gafaelfawr.events.LoginEnrollmentEvent class method) (gafaelfawr.events.LoginFailureEvent class method) (gafaelfawr.events.LoginSuccessEvent class method)

verified_oidc_token() (in module gafaelfawr.dependencies.auth) verify_token() (gafaelfawr.providers.oidc.OIDCTokenVerifier method) (gafaelfawr.services.oidc.OIDCService method) VerifyTokenError

Z

zfill() (gafaelfawr.models.oidc.OIDCScope method)