auth

Apr 24, 2026

Changes in this version

+ var ErrBearerTokenNotConfigured = errors.New("cloud bearer token is not configured")

+ var ErrInvalidDashboardSessionToken = errors.New("invalid dashboard session token")

+ var ErrProjectNotAllowed = errors.New("project is not allowed for this token")

+ type ProjectScopeAuthorizer struct

+ func NewProjectScopeAuthorizer(projects []string) *ProjectScopeAuthorizer

+ func (a *ProjectScopeAuthorizer) AuthorizeProject(project string) error

+ func (a *ProjectScopeAuthorizer) EnrolledProjects() []string

+ func (a *ProjectScopeAuthorizer) SetAllowedProjects(projects []string)

type Service

+ func (s *Service) Authorize(r *http.Request) error

+ func (s *Service) AuthorizeProject(project string) error

+ func (s *Service) EnrolledProjects() []string

+ func (s *Service) MintDashboardSession(bearerToken string) (string, error)

+ func (s *Service) ParseDashboardSession(sessionToken string) (string, error)

+ func (s *Service) SetAllowedProjects(projects []string)

+ func (s *Service) SetBearerToken(token string)

+ func (s *Service) SetDashboardSessionTokens(tokens []string)

Mar 7, 2026

Changes in this version

+ var ErrInvalidCredentials = errors.New("invalid credentials")

+ var ErrInvalidToken = errors.New("invalid token")

+ var ErrSecretTooShort = errors.New("jwt secret must be at least 32 bytes")

+ var ErrTokenExpired = errors.New("token has expired")

+ var ErrWeakPassword = errors.New("password must be at least 8 characters")

+ var ErrWrongTokenType = errors.New("wrong token type")

+ func GenerateAPIKey() (plainKey, hash string, err error)

+ func ValidateAPIKey(store *cloudstore.CloudStore, key string) (*cloudstore.CloudUser, error)

+ type AuthResult struct

+ AccessToken string

+ ExpiresIn int

+ RefreshToken string

+ UserID string

+ Username string

+ type Claims struct

+ Type string

+ UserID string

+ Username string

+ type Service struct

+ func NewService(store *cloudstore.CloudStore, jwtSecret string) (*Service, error)

+ func (s *Service) GenerateTokenPair(userID, username string) (accessToken, refreshToken string, err error)

+ func (s *Service) Login(identifier, password string) (*AuthResult, error)

+ func (s *Service) RefreshAccessToken(refreshTokenStr string) (newAccessToken string, err error)

+ func (s *Service) Register(username, email, password string) (*AuthResult, error)

+ func (s *Service) ValidateAccessToken(tokenStr string) (*Claims, error)