kubernetes/staging/src/k8s.io/apiserver/pkg/endpoints/filters/authentication.go

type authenticationRecordMetricsFunc …

// WithAuthentication creates an http handler that tries to authenticate the given request as a user, and then
// stores any such user found onto the provided context for the request. If authentication fails or returns an error
// the failed handler is used. On success, "Authorization" header is removed from the request and handler
// is invoked to serve the request.
func WithAuthentication(handler http.Handler, auth authenticator.Request, failed http.Handler, apiAuds authenticator.Audiences, requestHeaderConfig *authenticatorfactory.RequestHeaderConfig) http.Handler { … }

func withAuthentication(handler http.Handler, auth authenticator.Request, failed http.Handler, apiAuds authenticator.Audiences, requestHeaderConfig *authenticatorfactory.RequestHeaderConfig, metrics authenticationRecordMetricsFunc) http.Handler { … }

func Unauthorized(s runtime.NegotiatedSerializer) http.Handler { … }

func audiencesAreAcceptable(apiAuds, responseAudiences authenticator.Audiences) bool { … }

func isAnonymousUser(u user.Info) bool { … }