Directories
¶
| Path | Synopsis |
|---|---|
|
auth
|
|
|
oidc
Package oidc performs OIDC/OAuth2 authentication and returns an ID token.
|
Package oidc performs OIDC/OAuth2 authentication and returns an ID token. |
|
Package breakerpool provides a generic circuit breaker pool with priority-based failover.
|
Package breakerpool provides a generic circuit breaker pool with priority-based failover. |
|
Package controlplane separates public authentication from backend mutations.
|
Package controlplane separates public authentication from backend mutations. |
|
Package directory owns managed identities, administration, and the user and group facts supplied to authorization.
|
Package directory owns managed identities, administration, and the user and group facts supplied to authorization. |
|
scim
Package scim adapts SCIM provisioning to the directory storage contract.
|
Package scim adapts SCIM provisioning to the directory storage contract. |
|
sqlitestore
Package sqlitestore implements the managed directory using embedded SQLite.
|
Package sqlitestore implements the managed directory using embedded SQLite. |
|
Package factservice defines the small issuance lookup contract.
|
Package factservice defines the small issuance lookup contract. |
|
Package hostpattern implements the hostname-pattern language shared by inventory resolution and Writ host selectors.
|
Package hostpattern implements the hostname-pattern language shared by inventory resolution and Writ host selectors. |
|
identity
|
|
|
Package inventory owns host facts and static loading.
|
Package inventory owns host facts and static loading. |
|
Package inventoryapi defines the inventory and directory administration control API: the JSON operations an administrator or enrolling host sends to the advertised inventory endpoint, and the records it returns.
|
Package inventoryapi defines the inventory and directory administration control API: the JSON operations an administrator or enrolling host sends to the advertised inventory endpoint, and the records it returns. |
|
Package inventoryclient implements public inventory management requests.
|
Package inventoryclient implements public inventory management requests. |
|
Package oidctest provides a minimal in-process OIDC provider for tests.
|
Package oidctest provides a minimal in-process OIDC provider for tests. |
|
Package policyserver defines the in-process evaluator contract and defaults.
|
Package policyserver defines the in-process evaluator contract and defaults. |
|
writpolicy
Package writpolicy implements the policy server's PolicyEvaluator over a compiled writ policy, an inventory, and registries of requirement handlers, flag sources, and notify targets.
|
Package writpolicy implements the policy server's PolicyEvaluator over a compiled writ policy, an inventory, and registries of requirement handlers, flag sources, and notify targets. |
|
Package principal implements Epithet's deterministic SSH certificate principal schemes.
|
Package principal implements Epithet's deterministic SSH certificate principal schemes. |
|
Package serviceauth mints and verifies short-lived, request-bound JWTs that authenticate CA requests to private services.
|
Package serviceauth mints and verifies short-lived, request-bound JWTs that authenticate CA requests to private services. |
|
Package tlsconfig provides shared TLS configuration for HTTP clients.
|
Package tlsconfig provides shared TLS configuration for HTTP clients. |
|
Package wire contains shared certificate, discovery, host, and evaluation types.
|
Package wire contains shared certificate, discovery, host, and evaluation types. |
|
Package writ is the facade over the writ policy language frontend: parse, check, and lower to the IL in one call.
|
Package writ is the facade over the writ policy language frontend: parse, check, and lower to the IL in one call. |
|
ast
Package ast is the parsed form of a writ policy file, a direct port of the retired Rust spike's ast.rs (the porting reference named by SPEC §12.11).
|
Package ast is the parsed form of a writ policy file, a direct port of the retired Rust spike's ast.rs (the porting reference named by SPEC §12.11). |
|
compile
Package compile checks a parsed writ file for well-formedness and lowers it to the IL.
|
Package compile checks a parsed writ file for well-formedness and lowers it to the IL. |
|
diag
Package diag holds source positions and diagnostics for the writ policy language.
|
Package diag holds source positions and diagnostics for the writ policy language. |
|
eval
Package eval is SPEC §8 as a pure function: order-independent evaluation of a compiled policy against one (user, host, account) request.
|
Package eval is SPEC §8 as a pure function: order-independent evaluation of a compiled policy against one (user, host, account) request. |
|
il
Package il is writ's intermediate language: the compiled rule format per SPEC §10–11.
|
Package il is writ's intermediate language: the compiled rule format per SPEC §10–11. |
|
parser
Package parser turns writ policy source into the AST.
|
Package parser turns writ policy source into the AST. |
Click to show internal directories.
Click to hide internal directories.