security

Apr 14, 2025

Changes in this version

+ func AccountLockoutMiddleware() mist.HandleFunc

+ func CleanupSecurity()

+ func Middleware() mist.HandleFunc

+ func RecordFailedLoginAttempt(ctx *mist.Context) bool

+ func ResetLockout(ctx *mist.Context)

+ func SessionWithSecurityMiddleware(manager *session.Manager) mist.HandleFunc

+ type AccountLockoutConfig struct

+ CleanupInterval time.Duration

+ Enabled bool

+ IncludeIPInKey bool

+ LockoutDuration time.Duration

+ MaxAttempts int

+ ResetDuration time.Duration

type AuthConfig

+ AccountLockout AccountLockoutConfig

type HeadersConfig

+ CacheControl string

+ CrossOriginEmbedderPolicy string

+ CrossOriginOpenerPolicy string

+ CrossOriginResourcePolicy string

+ EnableCacheControl bool

+ EnableCrossOriginPolicies bool

+ EnablePermissionsPolicy bool

+ EnableReferrerPolicy bool

+ PermissionsPolicy string

+ ReferrerPolicy string

type SessionConfig

+ AbsoluteTimeout time.Duration

+ EnableFingerprinting bool

+ IdleTimeout time.Duration

+ ReauthTimeout time.Duration

+ RequireReauthForSensitive bool

+ RotateTokenOnValidation bool

Apr 9, 2025

Changes in this version

+ func SetSecurityConfig(config SecurityConfig)

+ func SetSecurityLevel(level SecurityLevel)

+ type AuthConfig struct

+ EnableRefreshToken bool

+ JWTSecret string

+ LockoutDuration time.Duration

+ MaxLoginAttempts int

+ type CSRFConfig struct

+ CookieName string

+ Enabled bool

+ FormField string

+ HeaderName string

+ IgnoreMethods []string

+ TokenLength int

+ type HeadersConfig struct

+ ContentSecurityPolicy string

+ EnableContentTypeNosniff bool

+ EnableHSTS bool

+ EnableXFrameOptions bool

+ EnableXSSProtection bool

+ HSTSIncludeSubdomains bool

+ HSTSMaxAge time.Duration

+ HSTSPreload bool

+ XFrameOptionsValue string

+ type PasswordConfig struct

+ MaxAge time.Duration

+ MinLength int

+ PreventReuseCount int

+ RequireDigits bool

+ RequireLowercase bool

+ RequireSpecialChars bool

+ RequireUppercase bool

+ type RateLimitConfig struct

+ Burst int

+ EnableIPRateLimit bool

+ Enabled bool

+ Rate float64

+ UseRedisBackend bool

+ type SecurityConfig struct

+ Auth AuthConfig

+ CSRF CSRFConfig

+ Headers HeadersConfig

+ Level SecurityLevel

+ Password PasswordConfig

+ RateLimit RateLimitConfig

+ Session SessionConfig

+ func DefaultSecurityConfig(level SecurityLevel) SecurityConfig

+ func GetSecurityConfig() SecurityConfig

+ type SecurityLevel int

+ const LevelBasic

+ const LevelCustom

+ const LevelIntermediate

+ const LevelStrict

+ func GetSecurityLevel() SecurityLevel

+ type SessionConfig struct

+ AccessTokenExpiry time.Duration

+ AccessTokenHeader string

+ Domain string

+ Enabled bool

+ HttpOnly bool

+ MaxAge time.Duration

+ Path string

+ RefreshTokenExpiry time.Duration

+ RefreshTokenHeader string

+ SameSite http.SameSite

+ Secure bool

+ TokenHeader string

Jun 18, 2024

Changes in this version

type Claims

+ SessionID string

+ UserID int64

Jun 18, 2024

Changes in this version

+ func ClearToken(ctx *mist.Context) error

type Provider

+ ClearToken func(ctx *mist.Context) error

Jun 17, 2024

Changes in this version

type Builder

+ func InitSessionBuilder(ctx *mist.Context, uid int64) *Builder

type MiddlewareBuilder

+ func InitMiddlewareBuilder(sp Provider, paths ...string) *MiddlewareBuilder

type Provider

+ InitSession func(ctx *mist.Context, uid int64, jwtData map[string]any, sessData map[string]any) (Session, error)

type Session

+ func InitSession(ctx *mist.Context, uid int64, jwtData map[string]any, sessData map[string]any) (Session, error)

Jun 16, 2024

Changes in this version

+ const CtxSessionKey

+ func CheckLoginMiddleware() mist.Middleware

+ func RenewAccessToken(ctx *mist.Context) error

+ func SetDefaultProvider(sp Provider)

+ func UpdateClaims(ctx *mist.Context, claims Claims) error

+ type Builder struct

+ func NewSessionBuilder(ctx *mist.Context, uid int64) *Builder

+ func (b *Builder) Build() (Session, error)

+ func (b *Builder) SetJwtData(data map[string]string) *Builder

+ func (b *Builder) SetProvider(p Provider) *Builder

+ func (b *Builder) SetSessData(data map[string]any) *Builder

+ type Claims struct

+ Data map[string]string

+ SSID string

+ Uid int64

+ func (c Claims) Get(key string) mist.AnyValue

+ type MiddlewareBuilder struct

+ func (b *MiddlewareBuilder) Build() mist.Middleware

+ type Provider interface

+ Get func(ctx *mist.Context) (Session, error)

+ NewSession func(ctx *mist.Context, uid int64, jwtData map[string]string, ...) (Session, error)

+ RenewAccessToken func(ctx *mist.Context) error

+ UpdateClaims func(ctx *mist.Context, claims Claims) error

+ func DefaultProvider() Provider

+ type Session interface

+ Claims func() Claims

+ Del func(ctx context.Context, key string) error

+ Destroy func(ctx context.Context) error

+ Get func(ctx context.Context, key string) mist.AnyValue

+ Set func(ctx context.Context, key string, val any) error

+ func Get(ctx *mist.Context) (Session, error)

+ func NewSession(ctx *mist.Context, uid int64, jwtData map[string]string, ...) (Session, error)