authhdr

package

v0.3.9 Latest Latest Go to latest Published: Nov 12, 2026 License: GPL-3.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/braedonsaunders/ether

Links

Open Source Insights

Documentation ¶

Overview ¶

Package authhdr parses client authentication headers without exposing tokens in URLs.

Index ¶

Variables
func Bearer(value string) (string, bool)
func MediaBrowser(value string) (map[string]string, error)
func MediaBrowserCredentialSupplied(r *http.Request) bool
func MediaBrowserToken(r *http.Request) string
func Plex(h http.Header) http.Header

Constants ¶

This section is empty.

Variables ¶

View Source

var ErrMalformed = errors.New("malformed authorization header")

Functions ¶

func Bearer ¶

func Bearer(value string) (string, bool)

Bearer extracts an Authorization bearer credential. An empty or malformed value is rejected, and the credential is never accepted from a URL.

func MediaBrowser ¶

func MediaBrowser(value string) (map[string]string, error)

MediaBrowser parses the case-sensitive key/value parameters of a MediaBrowser or Emby authorization value. Quoted values may contain commas and backslash-escaped quotes. Values are form-decoded after parsing ("+" is a space, as Jellyfin's WebUtility.UrlDecode does): the Jellyfin Kotlin SDK sends "+" where the web client sends "%20", and both must name the same device so a token issued to one is accepted from the other.

func MediaBrowserCredentialSupplied ¶

func MediaBrowserCredentialSupplied(r *http.Request) bool

MediaBrowserCredentialSupplied reports whether the request carries any MediaBrowser-style credential at all: a token header, an authorization header, or an ApiKey query parameter. It stays true for a malformed or foreign credential so callers can distinguish "no credential" (eligible for anonymous handling) from "a credential that failed" (always rejected).

func MediaBrowserToken ¶

func MediaBrowserToken(r *http.Request) string

MediaBrowserToken returns legacy header credentials before an ApiKey query parameter. It does not interpret a query credential as Plex auth.

func Plex ¶

func Plex(h http.Header) http.Header

Plex returns X-Plex headers keyed by their canonical HTTP header names.

Types ¶

This section is empty.

Source Files ¶

View all Source files

authhdr.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL