auth

func GetIDPSyncStatus ¶

func GetIDPSyncStatus(ctx context.Context) models.IDPSyncStatus

func GetMatchingUser ¶

func GetMatchingUser(ctx context.Context, oauthUser *OAuthUser) (*schema.User, error)

GetMatchingUser looks up an Azure AD user by UPN or external provider ID.

func HandleAuthCallback ¶

func HandleAuthCallback(w http.ResponseWriter, r *http.Request)

HandleAuthCallback handles oauth callback. Note: not included in API reference as part of the OAuth process itself.

func HandleAuthLogin ¶

func HandleAuthLogin(w http.ResponseWriter, r *http.Request)

swagger:route GET /api/oauth/login nodes HandleAuthLogin

Handles OAuth login.

		Schemes: https

		Security:
  		oauth
		Responses:
		200:  okResponse

func HandleHeadlessSSO ¶

func HandleHeadlessSSO(w http.ResponseWriter, r *http.Request)

HandleHeadlessSSO handles the OAuth login flow for headless interfaces such as Netmaker CLI via websocket.

func HandleHeadlessSSOCallback ¶

func HandleHeadlessSSOCallback(w http.ResponseWriter, r *http.Request)

HandleHeadlessSSOCallback - handle OAuth callback for headless logins such as Netmaker CLI

func HandleHostSSOCallback ¶

func HandleHostSSOCallback(w http.ResponseWriter, r *http.Request)

HandleHostSSOCallback handles the callback from the sso endpoint It is the analogue of auth.handleNodeSSOCallback but takes care of the end point flow Retrieves the mkey from the state cache and adds the machine to the users email namespace TODO: A confirmation page for new machines should be added to avoid phishing vulnerabilities TODO: Add groups information from OIDC tokens into machine HostInfo Listens in /oidc/callback.

func IsOAuthConfigured ¶

func IsOAuthConfigured(ctx context.Context) bool

IsOAuthConfigured reports whether an OAuth provider is configured for the scope in ctx.

func RegisterHostSSO ¶

func RegisterHostSSO(w http.ResponseWriter, r *http.Request)

RegisterHostSSO redirects to the IDP for authentication Puts machine key in cache so the callback can retrieve it using the oidc state param Listens in /oidc/register/:regKey.

func ResetAuthProvider ¶

func ResetAuthProvider(ctx context.Context)

ResetAuthProvider resets the auth provider for the scope in ctx.

func ResetIDPSyncHook ¶

func ResetIDPSyncHook(ctx context.Context)

ResetIDPSyncHook re-reads the settings for the tenant carried in ctx and either (re)registers or stops that tenant's idp sync hook accordingly.

func StartIDPSyncHookForTenant ¶ added in v1.7.0

func StartIDPSyncHookForTenant(ctx context.Context)

func SyncFromIDP ¶

func SyncFromIDP(ctx context.Context) error

func ValidateEmail ¶ added in v1.7.0

func ValidateEmail(w http.ResponseWriter, r *http.Request)

ValidateEmail - handles a user clicking the email-validation link sent to them on MSP deployments: marks their email validated and consumes the invite. @Summary Validate a user's email @Router /api/v1/users/validate-email [get] @Tags Users @Produce html @Param invite_code query string true "Validation invite code" @Param email query string true "User email"