authtest

func (*MemStore) APIKeyByHash ¶

func (m *MemStore) APIKeyByHash(_ context.Context, hash string) (auth.APIKey, error)

func (*MemStore) AddRoles ¶

func (m *MemStore) AddRoles(_ context.Context, userID string, roles []string, now time.Time) error

func (*MemStore) AppendAudit ¶

func (m *MemStore) AppendAudit(_ context.Context, rec auth.AuditRecord) error

func (*MemStore) AuditRecords ¶

func (m *MemStore) AuditRecords() []auth.AuditRecord

AuditRecords returns every stored audit record, oldest first.

func (*MemStore) ClaimIdempotency ¶

func (m *MemStore) ClaimIdempotency(_ context.Context, rec auth.IdempotencyRecord) (auth.IdempotencyRecord, bool, error)

ClaimIdempotency inserts rec if its id isn't already used, mirroring the MongoDB store's insert-or-fetch-existing atomicity (a single mutex makes this trivially atomic here).

func (*MemStore) ClaimInvitation ¶

func (m *MemStore) ClaimInvitation(_ context.Context, hash string, now time.Time) (auth.Invitation, error)

func (*MemStore) ClaimJob ¶

func (m *MemStore) ClaimJob(_ context.Context, workerID string, at time.Time, margin time.Duration) (auth.Job, bool, error)

ClaimJob picks the oldest job that's never been claimed, or whose lease has expired, the same rule the MongoDB store's query applies.

func (*MemStore) ClearLoginAttempts ¶

func (m *MemStore) ClearLoginAttempts(_ context.Context, key string) error

func (*MemStore) CompleteIdempotency ¶

func (m *MemStore) CompleteIdempotency(_ context.Context, id string, result *auth.JobResult, jobID string, completedAt, expiresAt time.Time) error

func (*MemStore) CompleteJob ¶

func (m *MemStore) CompleteJob(_ context.Context, id string, result auth.JobResult, completedAt, expiresAt time.Time) error

func (*MemStore) CreateAPIKey ¶

func (m *MemStore) CreateAPIKey(_ context.Context, k auth.APIKey) error

func (*MemStore) CreateInvitation ¶

func (m *MemStore) CreateInvitation(_ context.Context, inv auth.Invitation) error

func (*MemStore) CreateSession ¶

func (m *MemStore) CreateSession(_ context.Context, s auth.Session) error

func (*MemStore) CreateUser ¶

func (m *MemStore) CreateUser(_ context.Context, u auth.User) error

func (*MemStore) DeleteAPIKey ¶

func (m *MemStore) DeleteAPIKey(_ context.Context, name string) error

func (*MemStore) DeleteInvitation ¶

func (m *MemStore) DeleteInvitation(_ context.Context, id string) error

func (*MemStore) DeleteOtherSessions ¶

func (m *MemStore) DeleteOtherSessions(_ context.Context, userID, keepID string) error

func (*MemStore) DeleteSecret ¶

func (m *MemStore) DeleteSecret(_ context.Context, database, name string) error

func (*MemStore) DeleteSession ¶

func (m *MemStore) DeleteSession(_ context.Context, userID, id string) error

func (*MemStore) DeleteSessions ¶

func (m *MemStore) DeleteSessions(_ context.Context, userID string) error

func (*MemStore) DeleteUser ¶

func (m *MemStore) DeleteUser(_ context.Context, id string) error

func (*MemStore) EnqueueJob ¶

func (m *MemStore) EnqueueJob(_ context.Context, j auth.Job) error

func (*MemStore) GetJob ¶

func (m *MemStore) GetJob(_ context.Context, id string) (auth.Job, bool, error)

func (*MemStore) Identity ¶

func (m *MemStore) Identity(_ context.Context, provider, subject string) (auth.Identity, error)

func (*MemStore) IncrementCounter ¶

func (m *MemStore) IncrementCounter(_ context.Context, key string, at, expires time.Time) (int, time.Time, error)

IncrementCounter is a fixed window, unlike RecordLoginFailure's sliding cleanup deadline: expires (and so the reset) only moves once the current window has actually ended, or a steady stream of calls would push the deadline forward forever and never reset the count.

func (*MemStore) ListAPIKeys ¶

func (m *MemStore) ListAPIKeys(context.Context) ([]auth.APIKey, error)

func (*MemStore) ListAudit ¶

func (m *MemStore) ListAudit(_ context.Context, f auth.AuditFilter) ([]auth.AuditRecord, bool, error)

ListAudit filters like the MongoDB store, newest first. Expired records are kept, as before MongoDB's TTL monitor removes them.

func (*MemStore) ListInvitations ¶

func (m *MemStore) ListInvitations(context.Context) ([]auth.Invitation, error)

func (*MemStore) ListInvocations ¶

func (m *MemStore) ListInvocations(_ context.Context, f auth.InvocationFilter) ([]auth.InvocationRecord, bool, error)

ListInvocations filters like the MongoDB store, newest first. Expired records are kept, as before MongoDB's TTL monitor removes them.

func (*MemStore) ListJobs ¶

func (m *MemStore) ListJobs(_ context.Context, f auth.JobFilter) ([]auth.Job, bool, error)

ListJobs filters like the MongoDB store, newest first.

func (*MemStore) ListSecrets ¶

func (m *MemStore) ListSecrets(context.Context) ([]auth.Secret, error)

func (*MemStore) ListSessions ¶

func (m *MemStore) ListSessions(_ context.Context, userID string) ([]auth.Session, error)

func (*MemStore) ListUsers ¶

func (m *MemStore) ListUsers(context.Context) ([]auth.User, error)

func (*MemStore) LoginAttempts ¶

func (m *MemStore) LoginAttempts(_ context.Context, key string) (auth.Attempts, error)

LoginAttempts returns the counter even past its expiry, like MongoDB before its TTL monitor deletes it; a failure after expiry restarts it.

func (*MemStore) PutIdentity ¶

func (m *MemStore) PutIdentity(_ context.Context, id auth.Identity) error

func (*MemStore) RecordInvocation ¶

func (m *MemStore) RecordInvocation(_ context.Context, r auth.InvocationRecord) error

func (*MemStore) RecordLoginFailure ¶

func (m *MemStore) RecordLoginFailure(_ context.Context, key string, at, expires time.Time) error

func (*MemStore) ReleaseIdempotency ¶

func (m *MemStore) ReleaseIdempotency(_ context.Context, id string) error

func (*MemStore) RemoveRole ¶

func (m *MemStore) RemoveRole(_ context.Context, userID, role string, now time.Time) error

func (*MemStore) SecretByScope ¶

func (m *MemStore) SecretByScope(_ context.Context, database, name string) (auth.Secret, error)

func (*MemStore) Session ¶

func (m *MemStore) Session(id string) (auth.Session, bool)

Session returns a stored session by id.

func (*MemStore) SessionByTokenHash ¶

func (m *MemStore) SessionByTokenHash(_ context.Context, hash string) (auth.Session, auth.User, error)

func (*MemStore) SessionCount ¶

func (m *MemStore) SessionCount(userID string) int

SessionCount returns how many sessions the user has, expired or not.

func (*MemStore) TouchAPIKey ¶

func (m *MemStore) TouchAPIKey(_ context.Context, hash string, at time.Time) error

func (*MemStore) TouchSession ¶

func (m *MemStore) TouchSession(_ context.Context, id string, lastUsed, expires time.Time) error

func (*MemStore) UpdateUser ¶

func (m *MemStore) UpdateUser(_ context.Context, id string, upd auth.UserUpdate, now time.Time) error

func (*MemStore) UpsertSecret ¶

func (m *MemStore) UpsertSecret(_ context.Context, s auth.Secret) error

func (*MemStore) UserByEmail ¶

func (m *MemStore) UserByEmail(_ context.Context, email string) (auth.User, error)

func (*MemStore) UserByID ¶

func (m *MemStore) UserByID(_ context.Context, id string) (auth.User, error)