auth

package

v0.1.8 Latest Latest Go to latest Published: Apr 18, 2026 License: MIT Imports: 7 Imported by: 0

Details

Package auth provides shared HMAC-signed session helpers used by glance and epoch for SSO cookie management.

This section is empty.

This section is empty.

func RandomState() string

RandomState returns a cryptographically random 32-character hex string suitable for OAuth state parameters and CSRF nonces.

func SignSession(sess Session, key []byte) string

SignSession encodes and HMAC-signs a session into a cookie value.

type Session struct {
	User  string `json:"u"`
	Email string `json:"e"`
	Exp   int64  `json:"x"` // unix timestamp
}

Session holds the claims embedded in an HMAC-signed cookie.

func VerifySession(cookie string, key []byte) (*Session, bool)

VerifySession validates the HMAC signature and decodes the session. Returns nil and false if the signature is invalid or decoding fails.