msgcrypto

Sep 16, 2026

Changes in this version

+ const BackendVersion

+ const DefaultAuthCodeTTL

+ const DefaultSafeChatKeyServer

+ const DefaultSafeChatRedirectHost

+ const VendorSafeChat

+ var ErrAlreadyOpen = errors.New("msgcrypto: a cipher is already open in this process")

+ var ErrClosed = errors.New("msgcrypto: cipher is closed")

+ var ErrEmptyPayload = errors.New("msgcrypto: payload is empty")

+ var ErrInvalidKeyServer = errors.New("msgcrypto: config.KeyServer is not a valid URL")

+ var ErrKeyServerNotHTTPS = errors.New("msgcrypto: config.KeyServer must be an https URL")

+ var ErrNoAuthCode = errors.New("msgcrypto: auth code provider returned an empty code")

+ var ErrNoAuthCodeProvider = errors.New("msgcrypto: config.AuthCode is required")

+ var ErrNoCorpID = errors.New("msgcrypto: corpID is required")

+ var ErrNoKeyServer = errors.New("msgcrypto: config.KeyServer is required")

+ var ErrRedirectHostMismatch = errors.New("msgcrypto: goProxy domain host does not match AllowedRedirectHost")

+ var ErrUnavailable = errors.New("msgcrypto: SafeChat backend not built into this binary")

+ func Available() bool

+ func DefaultKeystoreDir() string

+ type AuthCodeFunc func(ctx context.Context) (string, error)

+ func (f AuthCodeFunc) AuthCode(ctx context.Context) (string, error)

+ type AuthCodeProvider interface

+ AuthCode func(ctx context.Context) (string, error)

+ func StaticAuthCode(code string) AuthCodeProvider

+ type CachedAuthCode struct

+ func NewCachedAuthCode(provider AuthCodeProvider, ttl time.Duration) *CachedAuthCode

+ func (c *CachedAuthCode) AuthCode(ctx context.Context) (string, error)

+ func (c *CachedAuthCode) Invalidate()

+ type Cipher interface

+ Close func() error

+ DecryptMessage func(ctx context.Context, corpID, staffID string, ciphertext []byte) ([]byte, error)

+ EncryptMessage func(ctx context.Context, corpID, staffID string, plaintext []byte) ([]byte, error)

+ func Open(ctx context.Context, cfg Config) (Cipher, error)

+ type Config struct

+ AllowedRedirectHost string

+ AuthCode AuthCodeProvider

+ Debug bool

+ HTTPTimeout time.Duration

+ KeyServer string

+ KeystoreDir string

+ Logf func(format string, args ...any)

+ MaxRetry int

+ UserID string

+ type CorpAuthCodeProvider interface

+ AuthCodeForCorp func(ctx context.Context, corpID string) (string, error)

+ type Identity struct

+ CorpID string

+ StaffID string

+ func CurrentIdentity(ctx context.Context, configDir string) (Identity, error)

+ type PortalAuthCode struct

+ CLIVersion string

+ ConfigDir string

+ HTTPClient *http.Client

+ Vendor string

+ func NewPortalAuthCode(configDir, cliVersion string) *PortalAuthCode

+ func (p *PortalAuthCode) AuthCode(ctx context.Context) (string, error)

+ func (p *PortalAuthCode) AuthCodeForCorp(ctx context.Context, corpID string) (string, error)

+ type Session struct

+ Cipher Cipher

+ CorpID string

+ KeystoreDir string

+ StaffID string

+ func OpenSession(ctx context.Context, opts SessionOptions) (*Session, error)

+ func (s *Session) Close() error

+ type SessionOptions struct

+ AllowedRedirectHost string

+ CLIVersion string

+ ConfigDir string

+ Debug bool

+ KeyServer string

+ KeystoreDir string

+ Logf func(format string, args ...any)