Documentation
¶
There is no documentation for this package.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
app
|
|
|
bootfx
Package bootfx provides bootfx functionality.
|
Package bootfx provides bootfx functionality. |
|
configfx
Package configfx provides configfx functionality.
|
Package configfx provides configfx functionality. |
|
envfx
Package envfx provides envfx functionality.
|
Package envfx provides envfx functionality. |
|
languagefx
Package languagefx provides languagefx functionality.
|
Package languagefx provides languagefx functionality. |
|
localizationfx
Package localizationfx wires declarative policy catalogs into startup and reload handling.
|
Package localizationfx wires declarative policy catalogs into startup and reload handling. |
|
logfx
Package logfx provides logfx functionality.
|
Package logfx provides logfx functionality. |
|
loopsfx
Package loopsfx provides loopsfx functionality.
|
Package loopsfx provides loopsfx functionality. |
|
opsfx
Package opsfx provides opsfx functionality.
|
Package opsfx provides opsfx functionality. |
|
policyfx
Package policyfx wires policy snapshot reloads into the runtime container.
|
Package policyfx wires policy snapshot reloads into the runtime container. |
|
redifx
Package redifx provides redifx functionality.
|
Package redifx provides redifx functionality. |
|
reloadfx
Package reloadfx provides reloadfx functionality.
|
Package reloadfx provides reloadfx functionality. |
|
restartfx
Package restartfx provides restartfx functionality.
|
Package restartfx provides restartfx functionality. |
|
signalsfx
Package signalsfx provides signalsfx functionality.
|
Package signalsfx provides signalsfx functionality. |
|
Package backend provides backend functionality.
|
Package backend provides backend functionality. |
|
accountcache
Package accountcache provides accountcache functionality.
|
Package accountcache provides accountcache functionality. |
|
bktype
Package bktype provides bktype functionality.
|
Package bktype provides bktype functionality. |
|
ldapendpoint
Package ldapendpoint parses LDAP URIs into secret-free endpoint metadata.
|
Package ldapendpoint parses LDAP URIs into secret-free endpoint metadata. |
|
ldappool
Package ldappool provides ldappool functionality.
|
Package ldappool provides ldappool functionality. |
|
priorityqueue
Package priorityqueue provides priorityqueue functionality.
|
Package priorityqueue provides priorityqueue functionality. |
|
remote
Package remote implements edge-side backends backed by a Nauthilus authority.
|
Package remote implements edge-side backends backed by a Nauthilus authority. |
|
Package backendmonitoring provides backendmonitoring functionality.
|
Package backendmonitoring provides backendmonitoring functionality. |
|
Package bruteforce provides bruteforce functionality.
|
Package bruteforce provides bruteforce functionality. |
|
l1
Package l1 provides l1 functionality.
|
Package l1 provides l1 functionality. |
|
tolerate
Package tolerate provides tolerate functionality.
|
Package tolerate provides tolerate functionality. |
|
Package core provides core functionality.
|
Package core provides core functionality. |
|
auth
Package auth provides auth functionality.
|
Package auth provides auth functionality. |
|
cookie
Package cookie provides secure encrypted cookie management for storing sensitive session data in a single encrypted browser cookie.
|
Package cookie provides secure encrypted cookie management for storing sensitive session data in a single encrypted browser cookie. |
|
language
Package language provides language functionality.
|
Package language provides language functionality. |
|
localization
Package localization contains transport-neutral policy message localization.
|
Package localization contains transport-neutral policy message localization. |
|
Package definitions provides definitions functionality.
|
Package definitions provides definitions functionality. |
|
encoding
|
|
|
cborcodec
Package cborcodec centralizes the CBOR policy used by HTTP handlers and Lua helpers.
|
Package cborcodec centralizes the CBOR policy used by HTTP handlers and Lua helpers. |
|
Package errors provides errors functionality.
|
Package errors provides errors functionality. |
|
Package frontend provides frontend functionality.
|
Package frontend provides frontend functionality. |
|
grpcapi
|
|
|
auth/v1
Package authv1 contains the versioned gRPC auth service contract.
|
Package authv1 contains the versioned gRPC auth service contract. |
|
common/v1
Package commonv1 contains shared gRPC transport messages used across versioned APIs.
|
Package commonv1 contains shared gRPC transport messages used across versioned APIs. |
|
identity/v1
Package identityv1 contains the versioned gRPC identity backend service contract.
|
Package identityv1 contains the versioned gRPC identity backend service contract. |
|
internal/prototest
Package prototest provides descriptor assertions for protobuf contract tests.
|
Package prototest provides descriptor assertions for protobuf contract tests. |
|
grpcclient
|
|
|
authority
Package authority contains outbound gRPC authority client helpers.
|
Package authority contains outbound gRPC authority client helpers. |
|
handler
|
|
|
api/v1
Package v1 provides v1 functionality.
|
Package v1 provides v1 functionality. |
|
asyncjobs
Package asyncjobs provides asyncjobs functionality.
|
Package asyncjobs provides asyncjobs functionality. |
|
auth
Package auth provides auth functionality.
|
Package auth provides auth functionality. |
|
backchannel
Package backchannel provides backchannel functionality.
|
Package backchannel provides backchannel functionality. |
|
bruteforce
Package bruteforce provides bruteforce functionality.
|
Package bruteforce provides bruteforce functionality. |
|
cache
Package cache provides cache functionality.
|
Package cache provides cache functionality. |
|
common
Package common provides common functionality.
|
Package common provides common functionality. |
|
custom
Package custom provides custom functionality.
|
Package custom provides custom functionality. |
|
deps
Package deps provides deps functionality.
|
Package deps provides deps functionality. |
|
devui
Package devui provides devui functionality.
|
Package devui provides devui functionality. |
|
frontend/idp
Package idp contains frontend handlers for IDP browser flows.
|
Package idp contains frontend handlers for IDP browser flows. |
|
grpcauthority
Package grpcauthority adapts authority-side gRPC APIs to application services.
|
Package grpcauthority adapts authority-side gRPC APIs to application services. |
|
health
Package health provides health functionality.
|
Package health provides health functionality. |
|
mfa_backchannel
Package mfa_backchannel provides mfa backchannel functionality.
|
Package mfa_backchannel provides mfa backchannel functionality. |
|
registry
Package registry provides registry functionality.
|
Package registry provides registry functionality. |
|
Package idp provides idp functionality.
|
Package idp provides idp functionality. |
|
clientauth
Package clientauth provides OOP abstractions for OIDC client authentication endpoints.
|
Package clientauth provides OOP abstractions for OIDC client authentication endpoints. |
|
flow
Package flow provides flow functionality.
|
Package flow provides flow functionality. |
|
oidckeys
Package oidckeys provides oidckeys functionality.
|
Package oidckeys provides oidckeys functionality. |
|
signing
Package signing provides OOP abstractions for JWT signing and verification.
|
Package signing provides OOP abstractions for JWT signing and verification. |
|
slo
Package slo provides slo functionality.
|
Package slo provides slo functionality. |
|
internal
|
|
|
passwordhash
Package passwordhash contains bounded server-internal Redis hash compatibility.
|
Package passwordhash contains bounded server-internal Redis hash compatibility. |
|
Package ipscoper provides ipscoper functionality.
|
Package ipscoper provides ipscoper functionality. |
|
Package localcache provides localcache functionality.
|
Package localcache provides localcache functionality. |
|
Package log provides log functionality.
|
Package log provides log functionality. |
|
color
Package color provides ANSI color helpers and a slog.Handler wrapper that preserves slog.TextHandler formatting while coloring entire lines.
|
Package color provides ANSI color helpers and a slog.Handler wrapper that preserves slog.TextHandler formatting while coloring entire lines. |
|
level
Package level is a thin compatibility wrapper that mimics common go-kit/log/level usage patterns while delegating to the Go standard library's log/slog package.
|
Package level is a thin compatibility wrapper that mimics common go-kit/log/level usage patterns while delegating to the Go standard library's log/slog package. |
|
action
Package action provides action functionality.
|
Package action provides action functionality. |
|
bruteforce
Package bruteforce provides bruteforce functionality.
|
Package bruteforce provides bruteforce functionality. |
|
cacheflush
Package cacheflush executes the optional Lua callback used by cache flush endpoints.
|
Package cacheflush executes the optional Lua callback used by cache flush endpoints. |
|
connmgr
Package connmgr provides connmgr functionality.
|
Package connmgr provides connmgr functionality. |
|
convert
Package convert provides convert functionality.
|
Package convert provides convert functionality. |
|
environment
Package environment executes Lua environment source scripts.
|
Package environment executes Lua environment source scripts. |
|
hook
Package hook provides hook functionality.
|
Package hook provides hook functionality. |
|
luamod
Package luamod provides luamod functionality.
|
Package luamod provides luamod functionality. |
|
luapool
Package luapool provides a pool for reusing Lua states.
|
Package luapool provides a pool for reusing Lua states. |
|
luastack
Package luastack provides luastack functionality.
|
Package luastack provides luastack functionality. |
|
metrics
Package metrics provides metrics functionality.
|
Package metrics provides metrics functionality. |
|
pipeline
Package pipeline plans deterministic dependency levels for request-local Lua execution.
|
Package pipeline plans deterministic dependency levels for request-local Lua execution. |
|
policyschedule
Package policyschedule adapts policy script schedules to Lua execution plans.
|
Package policyschedule adapts policy script schedules to Lua execution plans. |
|
redislib
Package redislib provides redislib functionality.
|
Package redislib provides redislib functionality. |
|
smtp
Package smtp provides smtp functionality.
|
Package smtp provides smtp functionality. |
|
subject
Package subject executes Lua subject source scripts.
|
Package subject executes Lua subject source scripts. |
|
vmpool
Package vmpool provides per-key (backend/category) pools of reusable Lua VMs.
|
Package vmpool provides per-key (backend/category) pools of reusable Lua VMs. |
|
middleware
|
|
|
auth
Package auth provides auth functionality.
|
Package auth provides auth functionality. |
|
brmw
Package brmw provides brmw functionality.
|
Package brmw provides brmw functionality. |
|
compression
Package compression provides compression functionality.
|
Package compression provides compression functionality. |
|
cors
Package cors provides centralized CORS handling for HTTP routes.
|
Package cors provides centralized CORS handling for HTTP routes. |
|
csrf
Package csrf provides Cross-Site Request Forgery (CSRF) protection middleware for Gin.
|
Package csrf provides Cross-Site Request Forgery (CSRF) protection middleware for Gin. |
|
i18n
Package i18n provides i18n functionality.
|
Package i18n provides i18n functionality. |
|
limit
Package limit provides limit functionality.
|
Package limit provides limit functionality. |
|
logging
Package logging provides logging functionality.
|
Package logging provides logging functionality. |
|
lua
Package lua provides lua functionality.
|
Package lua provides lua functionality. |
|
metrics
Package metrics provides metrics functionality.
|
Package metrics provides metrics functionality. |
|
oidcbearer
Package oidcbearer provides a Gin middleware that validates Bearer tokens issued by the Nauthilus IDP (client_credentials flow).
|
Package oidcbearer provides a Gin middleware that validates Bearer tokens issued by the Nauthilus IDP (client_credentials flow). |
|
openapivalidation
Package openapivalidation contains the opt-in runtime request validation pilot for selected OpenAPI operations.
|
Package openapivalidation contains the opt-in runtime request validation pilot for selected OpenAPI operations. |
|
securityheaders
Package securityheaders provides securityheaders functionality.
|
Package securityheaders provides securityheaders functionality. |
|
zstdmw
Package zstdmw provides zstdmw functionality.
|
Package zstdmw provides zstdmw functionality. |
|
model
|
|
|
admin
Package admin provides admin functionality.
|
Package admin provides admin functionality. |
|
authdto
Package authdto provides authdto functionality.
|
Package authdto provides authdto functionality. |
|
bruteforce
Package bruteforce provides bruteforce functionality.
|
Package bruteforce provides bruteforce functionality. |
|
mfa
Package mfa provides mfa functionality.
|
Package mfa provides mfa functionality. |
|
rest
Package rest provides rest functionality.
|
Package rest provides rest functionality. |
|
Package monitoring contains backend reachability and protocol health-check logic.
|
Package monitoring contains backend reachability and protocol health-check logic. |
|
trace
Package trace provides trace functionality.
|
Package trace provides trace functionality. |
|
Package objpool provides objpool functionality.
|
Package objpool provides objpool functionality. |
|
Package openapi exposes embedded OpenAPI contracts for stable HTTP APIs.
|
Package openapi exposes embedded OpenAPI contracts for stable HTTP APIs. |
|
client
Package client exposes the supported production boundary around selected generated OpenAPI clients.
|
Package client exposes the supported production boundary around selected generated OpenAPI clients. |
|
generated/idp
Package idp provides primitives to interact with the openapi HTTP API.
|
Package idp provides primitives to interact with the openapi HTTP API. |
|
generated/management
Package management provides primitives to interact with the openapi HTTP API.
|
Package management provides primitives to interact with the openapi HTTP API. |
|
requesttest
Package requesttest provides reusable OpenAPI request-contract helpers for handler tests.
|
Package requesttest provides reusable OpenAPI request-contract helpers for handler tests. |
|
requestvalidation
Package requestvalidation provides OpenAPI request validation for selected HTTP boundaries.
|
Package requestvalidation provides OpenAPI request validation for selected HTTP boundaries. |
|
Package pluginloader verifies native plugin artifacts before loading them.
|
Package pluginloader verifies native plugin artifacts before loading them. |
|
cmd/nauthilus-plugin-sign
command
Command nauthilus-plugin-sign creates and signs native plugin distribution keys.
|
Command nauthilus-plugin-sign creates and signs native plugin distribution keys. |
|
Package pluginregistry records native plugin declarations before runtime execution is enabled.
|
Package pluginregistry records native plugin declarations before runtime execution is enabled. |
|
Package pluginruntime owns native plugin lifecycle execution.
|
Package pluginruntime owns native plugin lifecycle execution. |
|
Package policy contains shared vocabulary for the internal policy decision layer.
|
Package policy contains shared vocabulary for the internal policy decision layer. |
|
collection
Package collection maps current auth mechanisms into policy check facts.
|
Package collection maps current auth mechanisms into policy check facts. |
|
compiler
Package compiler defines the internal policy snapshot compiler boundary.
|
Package compiler defines the internal policy snapshot compiler boundary. |
|
enforcement
Package enforcement defines the internal policy enforcement handoff boundary.
|
Package enforcement defines the internal policy enforcement handoff boundary. |
|
evaluation
Package evaluation evaluates built-in policy decisions from collected facts.
|
Package evaluation evaluates built-in policy decisions from collected facts. |
|
fsm
Package fsm evaluates policy-owned auth FSM markers.
|
Package fsm evaluates policy-owned auth FSM markers. |
|
observability
Package observability contains policy logging, metric, and tracing helpers.
|
Package observability contains policy logging, metric, and tracing helpers. |
|
registry
Package registry contains internal policy attribute registry primitives.
|
Package registry contains internal policy attribute registry primitives. |
|
report
Package report contains redaction-aware policy decision report primitives.
|
Package report contains redaction-aware policy decision report primitives. |
|
runtime
Package runtime contains policy snapshot activation primitives.
|
Package runtime contains policy snapshot activation primitives. |
|
subjectschedule
Package subjectschedule classifies policy subject checks around the supported Lua/native boundary.
|
Package subjectschedule classifies policy subject checks around the supported Lua/native boundary. |
|
Package privilege implements chroot and privilege-drop (setuid/setgid) for the Nauthilus server process.
|
Package privilege implements chroot and privilege-drop (setuid/setgid) for the Nauthilus server process. |
|
Package processcache provides dependency-light process-local cache semantics.
|
Package processcache provides dependency-light process-local cache semantics. |
|
Package rediscli contains Redis client helpers and key builders.
|
Package rediscli contains Redis client helpers and key builders. |
|
Package router provides router functionality.
|
Package router provides router functionality. |
|
Package secret provides secret functionality.
|
Package secret provides secret functionality. |
|
Package security provides security functionality.
|
Package security provides security functionality. |
|
Package svcctx is a small package that provides a long-lived service/root context for the application.
|
Package svcctx is a small package that provides a long-lived service/root context for the application. |
|
testing
|
|
|
dbmock
Package dbmock provides dbmock functionality.
|
Package dbmock provides dbmock functionality. |
|
oteltest
Package oteltest provides config-independent OpenTelemetry test collection.
|
Package oteltest provides config-independent OpenTelemetry test collection. |
|
tracetest
Package tracetest provides small OpenTelemetry helpers for focused tracing tests.
|
Package tracetest provides small OpenTelemetry helpers for focused tracing tests. |
|
contentneg
Package contentneg implements server-driven content negotiation against the HTTP Accept header following RFC 9110 section 12.5.1.
|
Package contentneg implements server-driven content negotiation against the HTTP Accept header following RFC 9110 section 12.5.1. |
|
crypto
Package crypto provides crypto functionality.
|
Package crypto provides crypto functionality. |
|
keygen
Package keygen provides keygen functionality.
|
Package keygen provides keygen functionality. |
Click to show internal directories.
Click to hide internal directories.