auth

Overview ¶

Package auth provides authentication and authorization utilities for the krkn-operator ecosystem.

This package contains reusable authentication components that can be shared across all operators in the krkn-operator-ecosystem, including:

• JWT token generation and validation
• Password hashing and verification using bcrypt
• User authentication helpers

JWT Authentication ¶

The package provides a TokenGenerator for creating and validating JWT tokens:

secretKey := []byte("your-secret-key-at-least-32-bytes-long")
tokenGen := auth.NewTokenGenerator(secretKey, 24*time.Hour, "krkn-operator")

// Generate a token
token, err := tokenGen.GenerateToken("[email protected]", "admin", "John", "Doe", "Example Corp")
if err != nil {
    // handle error
}

// Validate a token
claims, err := tokenGen.ValidateToken(token)
if err != nil {
    // handle error
}

// Check if user is admin
isAdmin, err := tokenGen.IsAdmin(token)

Password Management ¶

The package provides secure password hashing using bcrypt:

// Hash a password
hash, err := auth.HashPassword("user-password-123")
if err != nil {
    // handle error
}

// Verify a password
if auth.VerifyPassword("user-password-123", hash) {
    // password is correct
}

// Validate password meets requirements
if err := auth.ValidatePassword(password); err != nil {
    // password doesn't meet requirements
}

All utilities in this package are thread-safe and can be used concurrently across multiple goroutines.

Package auth provides authentication utilities for the krkn-operator ecosystem. This includes JWT token generation, validation, and password hashing utilities that can be shared across all operators in the ecosystem.