Versions in this module Expand all Collapse all v0 v0.11.0 Oct 25, 2026 v0.10.0 Oct 20, 2026 Changes in this version + const Audience + const Issuer + const MaxLifetime + const QGAAudience + const QGAIssuer + const QGAMaxLifetime + const TransportQGAPodExec + var ErrBinding = errors.New("management grant binding mismatch") + var ErrCapacity = errors.New("management grant replay cache at capacity") + var ErrExpired = errors.New("management grant expired or not yet valid") + var ErrInvalid = errors.New("invalid management grant") + var ErrReplay = errors.New("management grant already consumed") + func Digest(data []byte) string + func KeyID(public ed25519.PublicKey) string + func NewChallenge() (string, error) + type Binding struct + ActorUID string + Challenge string + Elevated bool + ExecutionID string + Namespace string + OSIdentity string + Operation string + PeerCertificateSHA256 string + PolicyVersion string + ProvisioningGeneration string + RecordingID string + RequestSHA256 string + RevocationEpoch uint64 + WorkspaceName string + WorkspaceUID string + type BindingQGA struct + ActorUID string + Challenge string + Elevated bool + ExecutionID string + Namespace string + OSIdentity string + Operation string + PolicyVersion string + ProvisioningGeneration string + RecordingID string + RequestSHA256 string + RevocationEpoch uint64 + Transport string + TransportTargetSHA256 string + WorkspaceName string + WorkspaceUID string + type Claims struct + Audience string + Binding Binding + ExpiresAt int64 + ID string + IssuedAt int64 + Issuer string + Version int + type ClaimsQGA struct + Audience string + Binding BindingQGA + ExpiresAt int64 + ID string + IssuedAt int64 + Issuer string + Version int + type Signer struct + func NewSigner(private ed25519.PrivateKey) (*Signer, error) + func (s *Signer) Issue(binding Binding, now time.Time, lifetime time.Duration) (string, error) + func (s *Signer) IssueQGA(binding BindingQGA, now time.Time, lifetime time.Duration) (string, error) + func (s *Signer) KeyID() string + func (s *Signer) PublicKey() ed25519.PublicKey + func (s *Signer) String() string + type Verifier struct + func NewVerifier(keys map[string]ed25519.PublicKey, capacity int) (*Verifier, error) + func (v *Verifier) Consume(token string, expected Binding, now time.Time) (Claims, error) + func (v *Verifier) ConsumeQGA(token string, expected BindingQGA, now time.Time) (ClaimsQGA, error)
Go to main page