Directories
¶
| Path | Synopsis |
|---|---|
|
Package auth defines the provider-agnostic federated-identity surface for osctrl-api.
|
Package auth defines the provider-agnostic federated-identity surface for osctrl-api. |
|
oidc
Package oidc is the OpenID Connect (RFC 6749 + OIDC Core 1.0) implementation of the auth.Provider interface defined in pkg/auth.
|
Package oidc is the OpenID Connect (RFC 6749 + OIDC Core 1.0) implementation of the auth.Provider interface defined in pkg/auth. |
|
saml
Package saml is the SAML 2.0 Web Browser SSO Profile implementation of the auth.Provider interface defined in pkg/auth.
|
Package saml is the SAML 2.0 Web Browser SSO Profile implementation of the auth.Provider interface defined in pkg/auth. |
|
Package mfa implements the second authentication factor for password (`db`) logins: TOTP authenticator apps, WebAuthn credentials (passkeys and hardware security keys) and single-use recovery codes.
|
Package mfa implements the second authentication factor for password (`db`) logins: TOTP authenticator apps, WebAuthn credentials (passkeys and hardware security keys) and single-use recovery codes. |
|
Package osquery provides shared helpers for working with the osquery schema.
|
Package osquery provides shared helpers for working with the osquery schema. |
|
Package ratelimit provides a small token-bucket rate-limit middleware used to protect anonymous attack surfaces (login, enroll) from brute-force / password-spray.
|
Package ratelimit provides a small token-bucket rate-limit middleware used to protect anonymous attack surfaces (login, enroll) from brute-force / password-spray. |
|
Package servicecommands stores small, allowlisted service control requests.
|
Package servicecommands stores small, allowlisted service control requests. |
|
Package serviceconfig persists the structured YAML configuration sections (logger, carver, SAML, OIDC, metrics, TLS, etc.) per service into the database.
|
Package serviceconfig persists the structured YAML configuration sections (logger, carver, SAML, OIDC, metrics, TLS, etc.) per service into the database. |
Click to show internal directories.
Click to hide internal directories.