auth

package

Go to main page

Versions in this module

v0

v0.6.0

Jun 17, 2026

v0.5.0

Jun 16, 2026

Changes in this version

type AuthHandler

+ func (h *AuthHandler) SetTokenValidator(v TokenValidator)

type Claims

+ TokenGeneration int

type JWTManager

+ func (m *JWTManager) GenerateTokenWithGeneration(userID, username, role, tenantID string, tokenGen int) (string, error)

type User

+ TokenGeneration int

type UserManagementHandler

+ func (h *UserManagementHandler) SetTokenValidator(v TokenValidator)

type UserStore

+ func (s *UserStore) RevokeUserTokens(userID string) error

v0.4.1

Jun 4, 2026

Changes in this version

+ const BcryptCost

+ const DefaultRefreshTokenDuration

+ const DefaultTokenDuration

+ const KeyPrefixProduction

+ const KeyPrefixTest

+ const KeyRandomLength

+ const MaxUsernameLength

+ const MinPasswordLength

+ const MinUsernameLength

+ const RoleAdmin

+ const RoleEditor

+ const RoleViewer

+ var ErrAPIKeyExpired = errors.New("API key has expired")

+ var ErrAPIKeyNotFound = errors.New("API key not found")

+ var ErrAPIKeyRevoked = errors.New("API key has been revoked")

+ var ErrAPIKeyWrongEnv = errors.New("API key environment mismatch")

+ var ErrEmptyKeyName = errors.New("key name cannot be empty")

+ var ErrEmptyPassword = errors.New("password cannot be empty")

+ var ErrEmptyPermissions = errors.New("permissions cannot be empty")

+ var ErrEmptyRole = errors.New("role cannot be empty")

+ var ErrEmptyUserID = errors.New("userID cannot be empty")

+ var ErrEmptyUsername = errors.New("username cannot be empty")

+ var ErrExpiredToken = errors.New("token has expired")

+ var ErrInvalidClaims = errors.New("invalid token claims")

+ var ErrInvalidPermission = errors.New("invalid permission")

+ var ErrInvalidRole = errors.New("invalid role")

+ var ErrInvalidToken = errors.New("invalid token")

+ var ErrInvalidUsername = errors.New("username must be 3-50 alphanumeric characters")

+ var ErrNoValidatorMatched = errors.New("no validator could validate the token")

+ var ErrPasswordHashFailed = errors.New("failed to hash password")

+ var ErrShortSecret = errors.New("secret must be at least 32 characters")

+ var ErrUserExists = errors.New("user already exists")

+ var ErrUserNotFound = errors.New("user not found")

+ var ErrWeakPassword = errors.New("password must be at least 8 characters")

+ type APIKey struct

+ CreatedAt time.Time

+ Environment string

+ ExpiresAt time.Time

+ ID string

+ KeyHash string

+ LastUsed time.Time

+ Name string

+ Permissions []string

+ Prefix string

+ Revoked bool

+ UserID string

+ type APIKeyHandler struct

+ func NewAPIKeyHandler(store *APIKeyStore, userStore *UserStore) *APIKeyHandler

+ func (h *APIKeyHandler) HandleCreateAPIKey(w http.ResponseWriter, r *http.Request, userID, role string)

+ func (h *APIKeyHandler) HandleListAPIKeys(w http.ResponseWriter, r *http.Request, userID, role string)

+ func (h *APIKeyHandler) HandleRevokeAPIKey(w http.ResponseWriter, r *http.Request, keyID, userID, role string)

+ type APIKeyStore struct

+ func NewAPIKeyStore() *APIKeyStore

+ func NewAPIKeyStoreWithSecret(secret []byte) (*APIKeyStore, error)

+ func (s *APIKeyStore) CreateKey(userID, name string, permissions []string, expiresIn time.Duration) (*APIKey, string, error)

+ func (s *APIKeyStore) CreateKeyWithEnv(userID, name string, permissions []string, expiresIn time.Duration, env string) (*APIKey, string, error)

+ func (s *APIKeyStore) GetKey(keyID string) (*APIKey, error)

+ func (s *APIKeyStore) HasPermission(apiKey *APIKey, permission string) bool

+ func (s *APIKeyStore) ListKeys(userID string) []*APIKey

+ func (s *APIKeyStore) LoadAPIKeys(dataDir string) error

+ func (s *APIKeyStore) RevokeKey(keyID string) error

+ func (s *APIKeyStore) SaveAPIKeys(dataDir string) error

+ func (s *APIKeyStore) UpdateKeyName(keyID, newName string) error

+ func (s *APIKeyStore) UpdateLastUsed(keyID string) error

+ func (s *APIKeyStore) ValidateKey(keyString string) (*APIKey, error)

+ func (s *APIKeyStore) ValidateKeyForEnv(keyString, serverEnv string) (*APIKey, error)

+ type AuthHandler struct

+ func NewAuthHandler(userStore *UserStore, jwtManager *JWTManager) *AuthHandler

+ func (h *AuthHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type AuthProvider string

+ const AuthProviderLocal

+ const AuthProviderOIDC

+ type ChangePasswordRequest struct

+ NewPassword string

+ type ChangePasswordResponse struct

+ Success bool

+ type Claims struct

+ ExpiresAt time.Time

+ IssuedAt time.Time

+ Role string

+ TenantID string

+ UserID string

+ Username string

+ type CompositeTokenValidator struct

+ func NewCompositeTokenValidator(validators ...TokenValidator) *CompositeTokenValidator

+ func (c *CompositeTokenValidator) AddValidator(v TokenValidator)

+ func (c *CompositeTokenValidator) Name() string

+ func (c *CompositeTokenValidator) ValidateToken(ctx context.Context, token string) (*Claims, error)

+ type CreateAPIKeyRequest struct

+ ExpiresIn int64

+ Name string

+ Permissions []string

+ type CreateAPIKeyResponse struct

+ APIKey *APIKey

+ Key string

+ type CreateUserRequest struct

+ Password string

+ Role string

+ Username string

+ type CreateUserResponse struct

+ User UserListItem

+ type DeleteUserResponse struct

+ Success bool

+ type ErrorResponse struct

+ Error string

+ Message string

+ type GetUserResponse struct

+ User UserListItem

+ type JWTManager struct

+ func NewJWTManager(secret string, tokenDuration, refreshTokenDuration time.Duration) (*JWTManager, error)

+ func (m *JWTManager) GenerateRefreshToken(userID string) (string, error)

+ func (m *JWTManager) GenerateToken(userID, username, role string) (string, error)

+ func (m *JWTManager) GenerateTokenWithTenant(userID, username, role, tenantID string) (string, error)

+ func (m *JWTManager) GetTokenDuration() time.Duration

+ func (m *JWTManager) Name() string

+ func (m *JWTManager) ValidateRefreshToken(tokenString string) (string, error)

+ func (m *JWTManager) ValidateToken(_ context.Context, tokenString string) (*Claims, error)

+ type ListUsersResponse struct

+ Users []UserListItem

+ type LoginRequest struct

+ Password string

+ Username string

+ type LoginResponse struct

+ AccessToken string

+ RefreshToken string

+ User UserResponse

+ type MeResponse struct

+ User UserResponse

+ type OIDCUserInfo struct

+ Email string

+ EmailVerified bool

+ Issuer string

+ Name string

+ Picture string

+ PreferredUsername string

+ Role string

+ Subject string

+ type RefreshClaims struct

+ ExpiresAt time.Time

+ IssuedAt time.Time

+ UserID string

+ type RefreshRequest struct

+ RefreshToken string

+ type RefreshResponse struct

+ AccessToken string

+ type RegisterRequest struct

+ Password string

+ Role string

+ Username string

+ type RegisterResponse struct

+ User UserResponse

+ type TokenValidator interface

+ Name func() string

+ ValidateToken func(ctx context.Context, token string) (*Claims, error)

+ type UpdateUserRequest struct

+ Role string

+ type UpdateUserResponse struct

+ User UserListItem

+ type User struct

+ AuthProvider AuthProvider

+ CreatedAt int64

+ DisplayName string

+ Email string

+ EmailVerified bool

+ ID string

+ LastLoginAt int64

+ OIDCIssuer string

+ OIDCSubject string

+ PasswordHash string

+ Picture string

+ Role string

+ Username string

+ func (u *User) IsOIDCUser() bool

+ type UserListItem struct

+ CreatedAt int64

+ ID string

+ Role string

+ Username string

+ type UserManagementHandler struct

+ func NewUserManagementHandler(userStore *UserStore, jwtManager *JWTManager) *UserManagementHandler

+ func (h *UserManagementHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type UserResponse struct

+ ID string

+ Role string

+ Username string

+ type UserStore struct

+ func NewUserStore() *UserStore

+ func (s *UserStore) ChangePassword(userID, newPassword string) error

+ func (s *UserStore) CreateOrUpdateOIDCUser(info *OIDCUserInfo, createdAt int64) (*User, bool, error)

+ func (s *UserStore) CreateUser(username, password, role string) (*User, error)

+ func (s *UserStore) DeleteUser(userID string) error

+ func (s *UserStore) GetUserByID(userID string) (*User, error)

+ func (s *UserStore) GetUserByOIDCSubject(issuer, subject string) (*User, error)

+ func (s *UserStore) GetUserByUsername(username string) (*User, error)

+ func (s *UserStore) ListUsers() []*User

+ func (s *UserStore) LoadUsers(dataDir string) error

+ func (s *UserStore) SaveUsers(dataDir string) error

+ func (s *UserStore) UpdateUserRole(userID, newRole string) error

+ func (s *UserStore) VerifyPassword(user *User, password string) bool

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL