auth

package

Go to main page

Versions in this module

v1

v1.3.7

Oct 29, 2025

Changes in this version

+ type CryptoAlgorithm string

+ const AlgorithmECDSAP384

+ const AlgorithmEd25519

+ type PublicKeyInfo struct

+ Algorithm CryptoAlgorithm

+ Key any

+ func ParsePublicKey(algorithm, publicKey string) (*PublicKeyInfo, error)

+ func (pki *PublicKeyInfo) VerifySignature(message, signature []byte) error

v1.3.5

Oct 24, 2025

v1.3.4

Oct 24, 2025

v1.3.3

Oct 16, 2025

v1.3.0

Oct 14, 2025

v1.2.2

Sep 30, 2025

v1.2.1

Sep 30, 2025

Changes in this version

+ const MaxKeyResponseSize

+ func BuildPermissions(domain string, includeSubdomains bool) []auth.Permission

+ func DecodeAndValidateSignature(signedTimestamp string) ([]byte, error)

+ func IsValidDomain(domain string) bool

+ func ParseMCPKeysFromStrings(inputs []string) []ed25519.PublicKey

+ func ReverseString(domain string) string

+ func ValidateDomainAndTimestamp(domain, timestamp string) (*time.Time, error)

+ func VerifySignatureWithKeys(publicKeys []ed25519.PublicKey, messageBytes []byte, signature []byte) bool

+ type CoreAuthHandler struct

+ func NewCoreAuthHandler(cfg *config.Config) *CoreAuthHandler

+ func (h *CoreAuthHandler) CreateJWTClaimsAndToken(ctx context.Context, authMethod auth.Method, domain string, ...) (*auth.TokenResponse, error)

+ func (h *CoreAuthHandler) ExchangeToken(ctx context.Context, domain, timestamp, signedTimestamp string, ...) (*auth.TokenResponse, error)

type DefaultHTTPKeyFetcher

+ func NewDefaultHTTPKeyFetcherWithClient(client *http.Client) *DefaultHTTPKeyFetcher

+ type KeyFetcher func(ctx context.Context, domain string) ([]string, error)

+ type SignatureTokenExchangeInput struct

+ Domain string

+ SignedTimestamp string

+ Timestamp string

v1.1.0

Sep 23, 2025

v1.0.0

Sep 8, 2025

v0

v0.0.2

Sep 8, 2025

Changes in this version

+ func RegisterAuthEndpoints(api huma.API, cfg *config.Config)

+ func RegisterDNSEndpoint(api huma.API, cfg *config.Config)

+ func RegisterGitHubATEndpoint(api huma.API, cfg *config.Config)

+ func RegisterGitHubOIDCEndpoint(api huma.API, cfg *config.Config)

+ func RegisterHTTPEndpoint(api huma.API, cfg *config.Config)

+ func RegisterNoneEndpoint(api huma.API, cfg *config.Config)

+ func RegisterOIDCEndpoints(api huma.API, cfg *config.Config)

+ type DNSAuthHandler struct

+ func NewDNSAuthHandler(cfg *config.Config) *DNSAuthHandler

+ func (h *DNSAuthHandler) ExchangeToken(ctx context.Context, domain, timestamp, signedTimestamp string) (*auth.TokenResponse, error)

+ func (h *DNSAuthHandler) SetResolver(resolver DNSResolver)

+ type DNSResolver interface

+ LookupTXT func(ctx context.Context, name string) ([]string, error)

+ type DNSTokenExchangeInput struct

+ Body struct{ ... }

+ type DefaultDNSResolver struct

+ func (r *DefaultDNSResolver) LookupTXT(ctx context.Context, name string) ([]string, error)

+ type DefaultHTTPKeyFetcher struct

+ func NewDefaultHTTPKeyFetcher() *DefaultHTTPKeyFetcher

+ func (f *DefaultHTTPKeyFetcher) FetchKey(ctx context.Context, domain string) (string, error)

+ type GenericOIDCValidator interface

+ ExchangeCodeForToken func(ctx context.Context, code string, redirectURI string) (string, error)

+ GetAuthorizationURL func(state, nonce string, redirectURI string) string

+ ValidateToken func(ctx context.Context, token string) (*OIDCClaims, error)

+ type GitHubHandler struct

+ func NewGitHubHandler(cfg *config.Config) *GitHubHandler

+ func (h *GitHubHandler) ExchangeToken(ctx context.Context, githubToken string) (*auth.TokenResponse, error)

+ func (h *GitHubHandler) SetBaseURL(url string)

+ type GitHubOIDCClaims struct

+ RepositoryOwner string

+ type GitHubOIDCHandler struct

+ func NewGitHubOIDCHandler(cfg *config.Config) *GitHubOIDCHandler

+ func (h *GitHubOIDCHandler) ExchangeToken(ctx context.Context, oidcToken string) (*auth.TokenResponse, error)

+ func (h *GitHubOIDCHandler) SetValidator(validator OIDCValidator)

+ type GitHubOIDCTokenExchangeInput struct

+ Body struct{ ... }

+ type GitHubOIDCValidator struct

+ func NewGitHubOIDCValidator() *GitHubOIDCValidator

+ func NewMockOIDCValidator(jwksURL, issuer string) *GitHubOIDCValidator

+ func (v *GitHubOIDCValidator) ValidateToken(ctx context.Context, tokenString string, audience string) (*GitHubOIDCClaims, error)

+ type GitHubTokenExchangeInput struct

+ Body struct{ ... }

+ type GitHubUserOrOrg struct

+ ID int

+ Login string

+ type HTTPAuthHandler struct

+ func NewHTTPAuthHandler(cfg *config.Config) *HTTPAuthHandler

+ func (h *HTTPAuthHandler) ExchangeToken(ctx context.Context, domain, timestamp, signedTimestamp string) (*auth.TokenResponse, error)

+ func (h *HTTPAuthHandler) SetFetcher(fetcher HTTPKeyFetcher)

+ type HTTPKeyFetcher interface

+ FetchKey func(ctx context.Context, domain string) (string, error)

+ type HTTPTokenExchangeInput struct

+ Body struct{ ... }

+ type JWK struct

+ E string

+ KID string

+ KTY string

+ N string

+ Use string

+ type JWKS struct

+ Keys []JWK

+ type NoneHandler struct

+ func NewNoneHandler(cfg *config.Config) *NoneHandler

+ func (h *NoneHandler) GetAnonymousToken(ctx context.Context) (*auth.TokenResponse, error)

+ type OIDCCallbackInput struct

+ Code string

+ State string

+ type OIDCClaims struct

+ Audience []string

+ ExtraClaims map[string]any

+ Issuer string

+ Subject string

+ type OIDCHandler struct

+ func NewOIDCHandler(cfg *config.Config) *OIDCHandler

+ func (h *OIDCHandler) ExchangeToken(ctx context.Context, oidcToken string) (*auth.TokenResponse, error)

+ func (h *OIDCHandler) HandleCallback(ctx context.Context, code, state string) (*auth.TokenResponse, error)

+ func (h *OIDCHandler) SetValidator(validator GenericOIDCValidator)

+ func (h *OIDCHandler) StartAuth(_ context.Context, redirectURI string) (string, error)

+ type OIDCSession struct

+ CreatedAt time.Time

+ Nonce string

+ RedirectURI string

+ State string

+ type OIDCStartInput struct

+ RedirectURI string

+ type OIDCTokenExchangeInput struct

+ Body struct{ ... }

+ type OIDCValidator interface

+ ValidateToken func(ctx context.Context, token string, audience string) (*GitHubOIDCClaims, error)

+ type StandardOIDCValidator struct

+ func NewStandardOIDCValidator(issuer, clientID, clientSecret string) (*StandardOIDCValidator, error)

+ func (v *StandardOIDCValidator) ExchangeCodeForToken(ctx context.Context, code string, redirectURI string) (string, error)

+ func (v *StandardOIDCValidator) GetAuthorizationURL(state, nonce string, redirectURI string) string

+ func (v *StandardOIDCValidator) ValidateToken(ctx context.Context, tokenString string) (*OIDCClaims, error)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL