authentication

type Authentication ¶

type Authentication struct {
	ClientFactory    client.FactoryInterface
	Logger           logger.Interface
	Clock            clock.Interface
	AuthCodeBrowser  *authcode.Browser
	AuthCodeKeyboard *authcode.Keyboard
	ROPC             *ropc.ROPC
}

Authentication provides the internal use-case of authentication.

If the IDToken is not set, it performs the authentication flow. If the IDToken is valid, it does nothing. If the IDtoken has expired and the RefreshToken is set, it refreshes the token. If the RefreshToken has expired, it performs the authentication flow.

The authentication flow is determined as:

If the Username is not set, it performs the authorization code flow. Otherwise, it performs the resource owner password credentials flow. If the Password is not set, it asks a password by the prompt.

func (u *Authentication) Do(ctx context.Context, in Input) (*Output, error)

type GrantOptionSet ¶

type GrantOptionSet struct {
	AuthCodeBrowserOption  *authcode.BrowserOption
	AuthCodeKeyboardOption *authcode.KeyboardOption
	ROPCOption             *ropc.Option
}

type Input ¶

type Input struct {
	Provider        oidc.Provider
	GrantOptionSet  GrantOptionSet
	CachedTokenSet  *oidc.TokenSet // optional
	TLSClientConfig tlsclientconfig.Config
}

Input represents an input DTO of the Authentication use-case.

type Interface ¶

type Interface interface {
	Do(ctx context.Context, in Input) (*Output, error)
}

type Output ¶

type Output struct {
	AlreadyHasValidIDToken bool
	TokenSet               oidc.TokenSet
}

Output represents an output DTO of the Authentication use-case.