middleware

func HTMXMiddleware ¶ added in v0.1.12

func HTMXMiddleware(next http.Handler) http.Handler

func OptionalAccessIdentity ¶ added in v0.1.16

func OptionalAccessIdentity(
	sessionSvc *session.Service,
	audience token.Audience,
	now func() time.Time,
) func(http.Handler) http.Handler

func RedirectIfAuthenticated ¶

func RedirectIfAuthenticated(sessionService *session.Service, now func() time.Time) func(http.Handler) http.Handler

func RequestLogger ¶

func RequestLogger(logger *slog.Logger) func(http.Handler) http.Handler

func RequireAPIAccessAuth ¶

func RequireAPIAccessAuth(sessionSvc *session.Service, audience token.Audience, now func() time.Time) func(http.Handler) http.Handler

func RequireAPICSRF ¶

func RequireAPICSRF(next http.Handler) http.Handler

func RequireAccessAuthWithRefresh ¶

func RequireAccessAuthWithRefresh(
	sessionSvc *session.Service,
	audience token.Audience,
	accessTTL time.Duration,
	refreshTTL time.Duration,
	now func() time.Time,
) func(http.Handler) http.Handler

RequirePageAccessAuthWithRefresh protects Authara-rendered pages + HTMX actions. It validates the access token, and if it's missing/expired it will try to refresh using the refresh token cookie. If refresh fails, it redirects to login.

func RequireAdmin ¶

func RequireAdmin(next http.Handler) http.Handler

func RequireAllowlistEnabled ¶ added in v0.1.23

func RequireAllowlistEnabled(enabled bool) func(http.Handler) http.Handler

func RequireCSRF ¶

func RequireCSRF(next http.Handler) http.Handler

func RequireChallengeEnabled ¶ added in v0.1.14

func RequireChallengeEnabled(enabled bool) func(http.Handler) http.Handler

func ReturnTo ¶

func ReturnTo(next http.Handler) http.Handler

func SecurityHeaders ¶ added in v0.1.23

func SecurityHeaders(cfg SecurityHeadersConfig) func(http.Handler) http.Handler