Expand description
User attribution validation (prevents impersonation attacks) User attribution validation for preventing impersonation attacks
This module provides utilities for validating user attribution headers against authenticated identity, preventing OIDC users from impersonating others while allowing service accounts (API keys) to delegate on behalf of users.
This is specifically designed for gRPC services using tonic metadata.
Structs§
- User
Attribution - Resolved user attribution from gRPC metadata
Functions§
- validate_
and_ resolve_ user_ attribution_ grpc - Validate and resolve user attribution from gRPC metadata