Documentation
¶
Index ¶
Constants ¶
const APIVersion = "stackkit.address-plan/v1"
Variables ¶
This section is empty.
Functions ¶
func BindPrefix ¶
BindPrefix returns a StackSpec candidate whose public route hosts exactly match the allocated prefix. The caller must pass the result through CUE validation before persisting or generating artifacts.
func BindSessionZone ¶ added in v0.53.9
BindSessionZone changes only the two session consumers of an installed core-only Cloud kit. It never changes the issuer, network domain or prefix. As with BindZone, the caller must CUE-validate before persisting the candidate.
func BindZone ¶
BindZone returns a StackSpec candidate served from the allocated install zone <zone>.<domain>: the zone becomes the stack's domain and every public route host is <service>.<zone>.<domain>. Cloud identity, TinyAuth and the renderer then derive their hosts and cookie scope from that domain exactly as for an own domain (decision D-72). The caller must pass the result through CUE validation before persisting or generating artifacts.
Types ¶
type Plan ¶
type Plan struct {
APIVersion string `json:"api_version"`
Provider string `json:"provider"`
StackName string `json:"stack_name"`
Domain string `json:"domain"`
SubdomainPrefix string `json:"subdomain_prefix,omitempty"`
Services []Service `json:"services"`
}
func FromCanonicalStackSpec ¶
FromCanonicalStackSpec projects the secret-free address-registration input from CUE-validated StackSpec intent. It performs no network or account work.
type SessionTopology ¶ added in v0.53.9
type SessionTopology struct {
PocketIDHost string `json:"pocketIdHost"`
TinyAuthHost string `json:"tinyAuthHost"`
HubHost string `json:"hubHost"`
}
SessionTopology is a projection of canonical public routes. PocketID can retain its enrolled WebAuthn origin when the session consumers move together.
func SessionTopologyFromCanonical ¶ added in v0.53.9
func SessionTopologyFromCanonical(canonical []byte) (SessionTopology, error)
func (SessionTopology) CallbackURL ¶ added in v0.53.9
func (t SessionTopology) CallbackURL() string
func (SessionTopology) Validate ¶ added in v0.53.9
func (t SessionTopology) Validate() error
func (SessionTopology) ValidateTransitionFrom ¶ added in v0.53.9
func (t SessionTopology) ValidateTransitionFrom(before SessionTopology) error
ValidateTransitionFrom admits only a sibling session pair in one private kombify.me installation zone, with the exact enrolled issuer retained.
Source Files