auth

package

Go to main page

Versions in this module

v1

v1.3.10

Nov 18, 2025

v1.3.9

Nov 17, 2025

v1.3.8

Nov 3, 2025

v1.3.7

Oct 29, 2025

v1.3.6

Oct 29, 2025

Changes in this version

+ type CryptoAlgorithm string

+ const AlgorithmECDSAP384

+ const AlgorithmEd25519

+ type PublicKeyInfo struct

+ Algorithm CryptoAlgorithm

+ Key any

+ func ParsePublicKey(algorithm, publicKey string) (*PublicKeyInfo, error)

+ func (pki *PublicKeyInfo) VerifySignature(message, signature []byte) error

v1.3.5

Oct 24, 2025

v1.3.4

Oct 24, 2025

v1.3.3

Oct 16, 2025

v1.3.2

Oct 16, 2025

v1.3.1

Oct 15, 2025

v1.3.0

Oct 14, 2025

v1.2.3

Sep 30, 2025

v1.2.2

Sep 30, 2025

v1.2.1

Sep 30, 2025

v1.2.0

Sep 29, 2025

Changes in this version

+ const MaxKeyResponseSize

+ func BuildPermissions(domain string, includeSubdomains bool) []auth.Permission

+ func DecodeAndValidateSignature(signedTimestamp string) ([]byte, error)

+ func IsValidDomain(domain string) bool

+ func ParseMCPKeysFromStrings(inputs []string) []ed25519.PublicKey

+ func ReverseString(domain string) string

+ func ValidateDomainAndTimestamp(domain, timestamp string) (*time.Time, error)

+ func VerifySignatureWithKeys(publicKeys []ed25519.PublicKey, messageBytes []byte, signature []byte) bool

+ type CoreAuthHandler struct

+ func NewCoreAuthHandler(cfg *config.Config) *CoreAuthHandler

+ func (h *CoreAuthHandler) CreateJWTClaimsAndToken(ctx context.Context, authMethod auth.Method, domain string, ...) (*auth.TokenResponse, error)

+ func (h *CoreAuthHandler) ExchangeToken(ctx context.Context, domain, timestamp, signedTimestamp string, ...) (*auth.TokenResponse, error)

type DefaultHTTPKeyFetcher

+ func NewDefaultHTTPKeyFetcherWithClient(client *http.Client) *DefaultHTTPKeyFetcher

+ type KeyFetcher func(ctx context.Context, domain string) ([]string, error)

+ type SignatureTokenExchangeInput struct

+ Domain string

+ SignedTimestamp string

+ Timestamp string

v1.1.0

Sep 23, 2025

v1.0.0

Sep 8, 2025

v0

v0.0.3

Sep 8, 2025

v0.0.2

Sep 8, 2025

v0.0.1

Sep 8, 2025

Changes in this version

+ func RegisterAuthEndpoints(api huma.API, cfg *config.Config)

+ func RegisterDNSEndpoint(api huma.API, cfg *config.Config)

+ func RegisterGitHubATEndpoint(api huma.API, cfg *config.Config)

+ func RegisterGitHubOIDCEndpoint(api huma.API, cfg *config.Config)

+ func RegisterHTTPEndpoint(api huma.API, cfg *config.Config)

+ func RegisterNoneEndpoint(api huma.API, cfg *config.Config)

+ func RegisterOIDCEndpoints(api huma.API, cfg *config.Config)

+ type DNSAuthHandler struct

+ func NewDNSAuthHandler(cfg *config.Config) *DNSAuthHandler

+ func (h *DNSAuthHandler) ExchangeToken(ctx context.Context, domain, timestamp, signedTimestamp string) (*auth.TokenResponse, error)

+ func (h *DNSAuthHandler) SetResolver(resolver DNSResolver)

+ type DNSResolver interface

+ LookupTXT func(ctx context.Context, name string) ([]string, error)

+ type DNSTokenExchangeInput struct

+ Body struct{ ... }

+ type DefaultDNSResolver struct

+ func (r *DefaultDNSResolver) LookupTXT(ctx context.Context, name string) ([]string, error)

+ type DefaultHTTPKeyFetcher struct

+ func NewDefaultHTTPKeyFetcher() *DefaultHTTPKeyFetcher

+ func (f *DefaultHTTPKeyFetcher) FetchKey(ctx context.Context, domain string) (string, error)

+ type GenericOIDCValidator interface

+ ExchangeCodeForToken func(ctx context.Context, code string, redirectURI string) (string, error)

+ GetAuthorizationURL func(state, nonce string, redirectURI string) string

+ ValidateToken func(ctx context.Context, token string) (*OIDCClaims, error)

+ type GitHubHandler struct

+ func NewGitHubHandler(cfg *config.Config) *GitHubHandler

+ func (h *GitHubHandler) ExchangeToken(ctx context.Context, githubToken string) (*auth.TokenResponse, error)

+ func (h *GitHubHandler) SetBaseURL(url string)

+ type GitHubOIDCClaims struct

+ RepositoryOwner string

+ type GitHubOIDCHandler struct

+ func NewGitHubOIDCHandler(cfg *config.Config) *GitHubOIDCHandler

+ func (h *GitHubOIDCHandler) ExchangeToken(ctx context.Context, oidcToken string) (*auth.TokenResponse, error)

+ func (h *GitHubOIDCHandler) SetValidator(validator OIDCValidator)

+ type GitHubOIDCTokenExchangeInput struct

+ Body struct{ ... }

+ type GitHubOIDCValidator struct

+ func NewGitHubOIDCValidator() *GitHubOIDCValidator

+ func NewMockOIDCValidator(jwksURL, issuer string) *GitHubOIDCValidator

+ func (v *GitHubOIDCValidator) ValidateToken(ctx context.Context, tokenString string, audience string) (*GitHubOIDCClaims, error)

+ type GitHubTokenExchangeInput struct

+ Body struct{ ... }

+ type GitHubUserOrOrg struct

+ ID int

+ Login string

+ type HTTPAuthHandler struct

+ func NewHTTPAuthHandler(cfg *config.Config) *HTTPAuthHandler

+ func (h *HTTPAuthHandler) ExchangeToken(ctx context.Context, domain, timestamp, signedTimestamp string) (*auth.TokenResponse, error)

+ func (h *HTTPAuthHandler) SetFetcher(fetcher HTTPKeyFetcher)

+ type HTTPKeyFetcher interface

+ FetchKey func(ctx context.Context, domain string) (string, error)

+ type HTTPTokenExchangeInput struct

+ Body struct{ ... }

+ type JWK struct

+ E string

+ KID string

+ KTY string

+ N string

+ Use string

+ type JWKS struct

+ Keys []JWK

+ type NoneHandler struct

+ func NewNoneHandler(cfg *config.Config) *NoneHandler

+ func (h *NoneHandler) GetAnonymousToken(ctx context.Context) (*auth.TokenResponse, error)

+ type OIDCCallbackInput struct

+ Code string

+ State string

+ type OIDCClaims struct

+ Audience []string

+ ExtraClaims map[string]any

+ Issuer string

+ Subject string

+ type OIDCHandler struct

+ func NewOIDCHandler(cfg *config.Config) *OIDCHandler

+ func (h *OIDCHandler) ExchangeToken(ctx context.Context, oidcToken string) (*auth.TokenResponse, error)

+ func (h *OIDCHandler) HandleCallback(ctx context.Context, code, state string) (*auth.TokenResponse, error)

+ func (h *OIDCHandler) SetValidator(validator GenericOIDCValidator)

+ func (h *OIDCHandler) StartAuth(_ context.Context, redirectURI string) (string, error)

+ type OIDCSession struct

+ CreatedAt time.Time

+ Nonce string

+ RedirectURI string

+ State string

+ type OIDCStartInput struct

+ RedirectURI string

+ type OIDCTokenExchangeInput struct

+ Body struct{ ... }

+ type OIDCValidator interface

+ ValidateToken func(ctx context.Context, token string, audience string) (*GitHubOIDCClaims, error)

+ type StandardOIDCValidator struct

+ func NewStandardOIDCValidator(issuer, clientID, clientSecret string) (*StandardOIDCValidator, error)

+ func (v *StandardOIDCValidator) ExchangeCodeForToken(ctx context.Context, code string, redirectURI string) (string, error)

+ func (v *StandardOIDCValidator) GetAuthorizationURL(state, nonce string, redirectURI string) string

+ func (v *StandardOIDCValidator) ValidateToken(ctx context.Context, tokenString string) (*OIDCClaims, error)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL