embedded

package

Go to main page

Versions in this module

v0

v0.99.2

Sep 7, 2026

v0.99.1

Sep 6, 2026

v0.99.0

Sep 5, 2026

v0.98.1

Sep 5, 2026

v0.98.0

Sep 5, 2026

Changes in this version

+ const AdminUserSortCreatedAt

+ const AdminUserSortEmail

+ const AdminUserSortLastLogin

+ const AdminUserSortUsername

+ const AdminUserStatusActive

+ const AdminUserStatusAny

+ const AdminUserStatusBanned

+ const AdminUserStatusDeleted

+ const DefaultServiceJWTLifetime

+ const ImportStatusInserted

+ const ImportStatusRejected

+ const ImportStatusSkipped

+ const ImportUnverifiedSolanaLinkInserted

+ const ImportUnverifiedSolanaLinkRejected

+ const ImportUnverifiedSolanaLinkSkipped

+ const PermRootUsersInvite

+ const RemoteAppModeJWKS

+ const RemoteAppModeStatic

+ const ServiceJWTTokenUse

+ var APIKeyMarker = authkit.APIKeyMarker

+ var Err2FAMethodUnavailable = authkit.ErrTwoFAMethodUnavailable

+ var ErrAccessTokenExpired = authkit.ErrAccessTokenExpired

+ var ErrAccessTokenRevoked = authkit.ErrAccessTokenRevoked

+ var ErrAccountAuthorityEscalation = authkit.ErrAccountAuthorityEscalation

+ var ErrAccountExistsLinkRequired = authkit.ErrAccountExistsLinkRequired

+ var ErrAccountRegistrationInviteConsumed = authkit.ErrAccountRegistrationInviteConsumed

+ var ErrAccountRegistrationInviteExpired = authkit.ErrAccountRegistrationInviteExpired

+ var ErrAccountRegistrationInviteNotFound = authkit.ErrAccountRegistrationInviteNotFound

+ var ErrAccountRegistrationInviteRevoked = authkit.ErrAccountRegistrationInviteRevoked

+ var ErrApplicationDocumentFetchFailed = authkit.ErrApplicationDocumentFetchFailed

+ var ErrApplicationDocumentInvalid = authkit.ErrApplicationDocumentInvalid

+ var ErrApplicationDomainConflict = authkit.ErrApplicationDomainConflict

+ var ErrApplicationDomainInvalid = authkit.ErrApplicationDomainInvalid

+ var ErrApplicationIssuerConflict = authkit.ErrApplicationIssuerConflict

+ var ErrApplicationNotDomainRooted = authkit.ErrApplicationNotDomainRooted

+ var ErrApplicationRegistrationDisabled = authkit.ErrApplicationRegistrationDisabled

+ var ErrApplicationSignatureInvalid = authkit.ErrApplicationSignatureInvalid

+ var ErrApplicationSignatureStale = authkit.ErrApplicationSignatureStale

+ var ErrApplicationSlugConflict = authkit.ErrApplicationSlugConflict

+ var ErrApplicationTierInvalid = authkit.ErrApplicationTierInvalid

+ var ErrAttributeDefNotFound = authkit.ErrAttributeDefNotFound

+ var ErrBootstrapDatabaseNotEmpty = authkit.ErrBootstrapDatabaseNotEmpty

+ var ErrCannotRemoveLastAdminRole = authkit.ErrCannotRemoveLastAdminRole

+ var ErrDeviceKeysDisabled = authkit.ErrDeviceKeysDisabled

+ var ErrEmailAlreadyVerified = authkit.ErrEmailAlreadyVerified

+ var ErrEmailDeliveryFailed = authkit.ErrEmailDeliveryFailed

+ var ErrEmailInUse = authkit.ErrEmailInUse

+ var ErrEmailSenderUnavailable = authkit.ErrEmailSenderUnavailable

+ var ErrEmailVerificationSendFailed = authkit.ErrEmailVerificationSendFailed

+ var ErrEntitlementFilterUnavailable = authkit.ErrEntitlementFilterUnavailable

+ var ErrExternalInvitesDisabled = authkit.ErrExternalInvitesDisabled

+ var ErrGroupCreationRefused = authkit.ErrGroupCreationRefused

+ var ErrGroupMembershipInviteNotFound = authkit.ErrGroupMembershipInviteNotFound

+ var ErrGroupNotFound = authkit.ErrGroupNotFound

+ var ErrGroupSlugApplicationManaged = authkit.ErrGroupSlugApplicationManaged

+ var ErrGroupSlugReserved = authkit.ErrGroupSlugReserved

+ var ErrGroupSlugTaken = authkit.ErrGroupSlugTaken

+ var ErrInsufficientRoleAuthority = authkit.ErrInsufficientRoleAuthority

+ var ErrInvalidAccessToken = authkit.ErrInvalidAccessToken

+ var ErrInvalidAttributeDef = authkit.ErrInvalidAttributeDef

+ var ErrInvalidBootstrapManifest = authkit.ErrInvalidBootstrapManifest

+ var ErrInvalidCode = authkit.ErrInvalidCode

+ var ErrInvalidCredentials = authkit.ErrInvalidCredentials

+ var ErrInvalidRemoteApplication = authkit.ErrInvalidRemoteApplication

+ var ErrInvalidServiceJWT = authkit.ErrInvalidServiceJWT

+ var ErrInvalidTwoFAMethod = authkit.ErrInvalidTwoFAMethod

+ var ErrInvalidUntil = authkit.ErrInvalidUntil

+ var ErrInviteLinkExpired = authkit.ErrInviteLinkExpired

+ var ErrInviteLinkNotFound = authkit.ErrInviteLinkNotFound

+ var ErrInviteLinkRevoked = authkit.ErrInviteLinkRevoked

+ var ErrMissingSigner = authkit.ErrMissingSigner

+ var ErrNotGroupMember = authkit.ErrNotGroupMember

+ var ErrOwnerSlugTaken = authkit.ErrOwnerSlugTaken

+ var ErrPasskeyCloneDetected = authkit.ErrPasskeyCloneDetected

+ var ErrPasskeyNotFound = authkit.ErrPasskeyNotFound

+ var ErrPasskeyUserVerificationRequired = authkit.ErrPasskeyUserVerificationRequired

+ var ErrPasswordResetRequired = authkit.ErrPasswordResetRequired

+ var ErrPasswordlessDisabled = authkit.ErrPasswordlessDisabled

+ var ErrPendingRegistrationNotFound = authkit.ErrPendingRegistrationNotFound

+ var ErrPhoneAlreadyVerified = authkit.ErrPhoneAlreadyVerified

+ var ErrPhoneInUse = authkit.ErrPhoneInUse

+ var ErrPhoneNumberMustBeE164 = authkit.ErrPhoneNumberMustBeE164

+ var ErrPhoneNumberRequired = authkit.ErrPhoneNumberRequired

+ var ErrPhoneTwoFAUnavailable = authkit.ErrPhoneTwoFAUnavailable

+ var ErrPhoneVerificationSendFailed = authkit.ErrPhoneVerificationSendFailed

+ var ErrProviderAlreadyLinked = authkit.ErrProviderAlreadyLinked

+ var ErrProviderChangeRequiresUnlink = authkit.ErrProviderChangeRequiresUnlink

+ var ErrProviderLinkFailed = authkit.ErrProviderLinkFailed

+ var ErrRegistrationDisabled = authkit.ErrRegistrationDisabled

+ var ErrRemoteApplicationIssuerConflict = authkit.ErrRemoteApplicationIssuerConflict

+ var ErrRemoteApplicationNotFound = authkit.ErrRemoteApplicationNotFound

+ var ErrRenameRateLimited = authkit.ErrRenameRateLimited

+ var ErrReservedIssuer = authkit.ErrReservedIssuer

+ var ErrRoleAssignmentEscalation = authkit.ErrRoleAssignmentEscalation

+ var ErrRoleNotAssignable = authkit.ErrRoleNotAssignable

+ var ErrSIWSAddressMismatch = authkit.ErrSIWSAddressMismatch

+ var ErrSIWSChallengeExpired = authkit.ErrSIWSChallengeExpired

+ var ErrSIWSChallengeMismatch = authkit.ErrSIWSChallengeMismatch

+ var ErrSIWSChallengeNotFound = authkit.ErrSIWSChallengeNotFound

+ var ErrSIWSDomainInvalid = authkit.ErrSIWSDomainInvalid

+ var ErrSIWSSignatureInvalid = authkit.ErrSIWSSignatureInvalid

+ var ErrSIWSTimestampInvalid = authkit.ErrSIWSTimestampInvalid

+ var ErrSMSDeliveryFailed = authkit.ErrSMSDeliveryFailed

+ var ErrSMSSenderUnavailable = authkit.ErrSMSSenderUnavailable

+ var ErrSessionIssueFailed = authkit.ErrSessionIssueFailed

+ var ErrStepUpRequired = authkit.ErrStepUpRequired

+ var ErrTwoFAChallengeFailed = authkit.ErrTwoFAChallengeFailed

+ var ErrTwoFAEnableFailed = authkit.ErrTwoFAEnableFailed

+ var ErrTwoFAEnrollmentRequired = authkit.ErrTwoFAEnrollmentRequired

+ var ErrTwoFAFactorExists = authkit.ErrTwoFAFactorExists

+ var ErrTwoFASendFailed = authkit.ErrTwoFASendFailed

+ var ErrTwoFASetupCodeSendFailed = authkit.ErrTwoFASetupCodeSendFailed

+ var ErrUserBanned = authkit.ErrUserBanned

+ var ErrUserCreationFailed = authkit.ErrUserCreationFailed

+ var ErrUserNotFound = authkit.ErrUserNotFound

+ var ErrUserReferenced = authkit.ErrUserReferenced

+ var ErrUsernameInUse = authkit.ErrUsernameInUse

+ var ErrVerificationLinkExpired = authkit.ErrVerificationLinkExpired

+ var ErrWalletAlreadyLinked = authkit.ErrWalletAlreadyLinked

+ var ErrWalletChangeRequiresUnlink = authkit.ErrWalletChangeRequiresUnlink

+ var FormatAPIKey = authkit.FormatAPIKey

+ var HasAPIKeyPrefix = authkit.HasAPIKeyPrefix

+ var ParseAPIKey = authkit.ParseAPIKey

+ func MaskDestination(value string) string

+ func RandB64(n int) string

+ func SecretEqual[T ~string | ~[]byte](a, b T) bool

+ func StepUpMethods(hasPassword bool, settings *TwoFactorSettings, providerSlugs []string, ...) []string

+ func StepUpTwoFactorOptions(settings *TwoFactorSettings, emailDestination string) *authkit.StepUpTwoFactorOptions

+ func ValidTwoFactorStepUpMethod(method string) bool

+ func WithAccountRegistrationInviteToken(ctx context.Context, token string) context.Context

+ func WithResolvedGroup(ctx context.Context, instance authkit.GroupInstance, reference string) context.Context

+ type APIKey = authkit.APIKey

+ type APIKeyMintOptions = authkit.APIKeyMintOptions

type APIKeysConfig

+ MaxTTL time.Duration

+ Prefix string

+ type AccountRegistrationInvite = authkit.AccountRegistrationInvite

+ type AccountRegistrationInviteCreated = authkit.AccountRegistrationInviteCreated

+ type AdminListUsersResult = authkit.AdminListUsersResult

+ type AdminUser = authkit.AdminUser

+ type AdminUserListOptions = authkit.AdminUserListOptions

+ type AdminUserSort = authkit.AdminUserSort

+ type AdminUserStatus = authkit.AdminUserStatus

+ type ApplicationDocument = authkit.ApplicationDocument

type ApplicationsConfig

+ AllowPrivateNetworkJWKS bool

+ OrgPersona authkit.Persona

+ SelfRegistration bool

type AuthSessionEvent

+ Event SessionEventType

+ IPAddr *string

+ Issuer string

+ Method *string

+ OccurredAt time.Time

+ Reason *string

+ SessionID string

+ UserAgent *string

+ UserID string

+ type BootstrapManifest = authkit.BootstrapManifest

+ type BootstrapManifestRemoteApplication = authkit.BootstrapManifestRemoteApplication

+ type BootstrapManifestResult = authkit.BootstrapManifestResult

+ type BootstrapManifestUser = authkit.BootstrapManifestUser

+ type BootstrapReconcileOptions = authkit.BootstrapReconcileOptions

+ type BootstrapUserPassword = authkit.BootstrapUserPassword

type Client

+ func NewWithKeys(cfg Config, keys Keyset, deps Deps) (*Client, error)

+ func (s *Client) AcceptGroupMembershipInvite(ctx context.Context, userID, inviteID string) error

+ func (s *Client) AdminDeleteUser(ctx context.Context, id string) error

+ func (s *Client) AdminRevokeUserSessionsAs(ctx context.Context, actorUserID, userID string) error

+ func (s *Client) AssignGroupRoleGenesis(ctx context.Context, group authkit.GroupRef, subject authkit.Subject, ...) error

+ func (s *Client) AssignRemoteApplicationRole(ctx context.Context, appID string, role authkit.Role) error

+ func (s *Client) AssignRemoteApplicationRoleAs(ctx context.Context, actorUserID string, group authkit.GroupRef, ...) error

+ func (s *Client) BeginDeviceKeyEnrollment(ctx context.Context, email, publicKey, label string) (DeviceKeyChallenge, error)

+ func (s *Client) BeginDeviceKeyLogin(ctx context.Context, deviceKeyID string) (DeviceKeyChallenge, error)

+ func (s *Client) BeginDiscoverablePasskeyVerification(ctx context.Context) (*protocol.CredentialAssertion, error)

+ func (s *Client) BeginPasskeyAccount(ctx context.Context) (PendingPasskeyAccount, error)

+ func (s *Client) BeginPasskeyLogin(ctx context.Context, identifier string) (*protocol.CredentialAssertion, error)

+ func (s *Client) BeginPasskeyRegistration(ctx context.Context, userID string) (*protocol.CredentialCreation, error)

+ func (s *Client) BeginTwoFactorEnrollment(ctx context.Context, userID string, enrollmentToken bool, sessionID string) (TwoFactorEnrollmentScope, error)

+ func (s *Client) CanOnGroup(ctx context.Context, subject authkit.Subject, groupID string, ...) (bool, error)

+ func (s *Client) CheckPendingRegistrationConflict(ctx context.Context, email, username string) (bool, bool, error)

+ func (s *Client) CheckPhoneRegistrationConflict(ctx context.Context, phone, username string) (bool, bool, error)

+ func (s *Client) CheckUserPassword(ctx context.Context, userID, pass string) error

+ func (s *Client) Clear2FAChallenge(ctx context.Context, userID string) error

+ func (s *Client) ClearEmailVerified(ctx context.Context, id string) error

+ func (s *Client) ClearEmailVerifyCodeAttempts(ctx context.Context, email string)

+ func (s *Client) ClearPhoneVerifyCodeAttempts(ctx context.Context, phone string)

+ func (s *Client) CompleteExternalLogin(ctx context.Context, in ExternalLoginInput) (ExternalLoginOutcome, error)

+ func (s *Client) ConfirmEmailChange(ctx context.Context, userID, email, code string, keepSessionID *string) error

+ func (s *Client) ConfirmEmailChangeByToken(ctx context.Context, token string) (string, error)

+ func (s *Client) ConfirmEmailVerification(ctx context.Context, email, code string) (userID string, err error)

+ func (s *Client) ConfirmEmailVerificationByToken(ctx context.Context, token string) (userID string, err error)

+ func (s *Client) ConfirmPasswordReset(ctx context.Context, token, newPassword string) (string, error)

+ func (s *Client) ConfirmPendingPhoneRegistration(ctx context.Context, phone, code string) (userID string, err error)

+ func (s *Client) ConfirmPendingPhoneRegistrationByToken(ctx context.Context, token string) (string, error)

+ func (s *Client) ConfirmPendingRegistration(ctx context.Context, email, code string) (userID string, err error)

+ func (s *Client) ConfirmPendingRegistrationByToken(ctx context.Context, token string) (userID string, err error)

+ func (s *Client) ConfirmPhoneChange(ctx context.Context, userID, phone, code string, keepSessionID *string) error

+ func (s *Client) ConfirmPhoneChangeByToken(ctx context.Context, token string) (string, error)

+ func (s *Client) ConfirmPhoneVerificationByTokenUserID(ctx context.Context, token string) (string, error)

+ func (s *Client) ConfirmPhoneVerificationUserID(ctx context.Context, phone, code string) (string, error)

+ func (s *Client) ConsumeAccountRegistrationInvite(ctx context.Context, email, userID, token string) error

+ func (s *Client) Create2FAChallenge(ctx context.Context, userID string) (string, error)

+ func (s *Client) CreateGroupMembershipInvite(ctx context.Context, actorUserID string, group authkit.GroupRef, ...) (GroupMembershipInvite, error)

+ func (s *Client) CreateInstanceForSubject(ctx context.Context, group authkit.GroupRef, displayName, ownerUserID string) (CreateInstanceResult, error)

+ func (s *Client) CreatePendingPhoneRegistrationWithLanguage(ctx context.Context, phone, username, passwordHash, preferredLanguage string) (string, error)

+ func (s *Client) CreatePendingRegistrationWithLanguage(ctx context.Context, email, username, passwordHash string, ttl time.Duration, ...) (string, error)

+ func (s *Client) DeclineGroupMembershipInvite(ctx context.Context, userID, inviteID string) error

+ func (s *Client) DefineGroupCustomRole(ctx context.Context, actorUserID string, group authkit.GroupRef, ...) error

+ func (s *Client) DelegationAuthorizer() DelegationAuthorizer

+ func (s *Client) DeleteGroupCustomRole(ctx context.Context, actorUserID string, group authkit.GroupRef, ...) error

+ func (s *Client) DeleteGroupInstanceByID(ctx context.Context, groupID string, opts DeletePermissionGroupOptions) error

+ func (s *Client) DeletePasskey(ctx context.Context, userID, id string) error

+ func (s *Client) DeletePendingPhoneRegistrationByPhone(ctx context.Context, phone string) error

+ func (s *Client) DeletePendingRegistrationByEmail(ctx context.Context, email string) error

+ func (s *Client) DeriveUsernameForOAuth(ctx context.Context, provider, preferred, email, displayName string) string

+ func (s *Client) Disable2FAFactorWithRemovedRoles(ctx context.Context, userID, factorID string) ([]RemovedMFARoleAssignment, error)

+ func (s *Client) Disable2FAWithRemovedRoles(ctx context.Context, userID string) ([]RemovedMFARoleAssignment, error)

+ func (s *Client) DocumentStore() documents.Store

+ func (s *Client) Enable2FA(ctx context.Context, userID, method string, phoneNumber *string, ...) ([]string, error)

+ func (s *Client) Enable2FADefault(ctx context.Context, userID, method string, phoneNumber *string, ...) ([]string, error)

+ func (s *Client) EnableTOTP2FA(ctx context.Context, in TOTPEnrollment) ([]string, error)

+ func (s *Client) EnrollTwoFactor(ctx context.Context, in TwoFactorEnrollInput) (TwoFactorEnrollOutcome, error)

+ func (s *Client) EphemeralBackend() string

+ func (s *Client) EphemeralRedisClient() *redis.Client

+ func (s *Client) FinishDeviceKeyEnrollment(ctx context.Context, enrollmentID, code, signature, secondFactor string) (DeviceKeyAuthResult, error)

+ func (s *Client) FinishDeviceKeyLogin(ctx context.Context, challengeID, signature string) (DeviceKeyAuthResult, error)

+ func (s *Client) FinishDiscoverablePasskeyVerification(ctx context.Context, response []byte) (VerifiedPasskey, error)

+ func (s *Client) FinishPasskeyAccount(ctx context.Context, response []byte) (*User, Passkey, error)

+ func (s *Client) FinishPasskeyLogin(ctx context.Context, response []byte, userAgent string, ip net.IP) (PasskeyLoginResult, error)

+ func (s *Client) FinishPasskeyRegistration(ctx context.Context, userID string, response []byte) (Passkey, error)

+ func (s *Client) FinishPasskeyReplacement(ctx context.Context, userID string, response []byte) (Passkey, error)

+ func (s *Client) GenerateAvailableUsername(ctx context.Context, base string) string

+ func (s *Client) GenerateSIWSChallenge(ctx context.Context, cache siws.ChallengeCache, ...) (siws.SignInInput, error)

+ func (s *Client) Get2FASettings(ctx context.Context, userID string) (*TwoFactorSettings, error)

+ func (s *Client) GetPendingPhoneRegistrationByPhone(ctx context.Context, phone string) (*PendingRegistration, error)

+ func (s *Client) GetPendingRegistrationByEmail(ctx context.Context, email string) (*PendingRegistration, error)

+ func (s *Client) GetPreferredLanguage(ctx context.Context, userID string) (PreferredLanguage, error)

+ func (s *Client) GetProviderLinkByIssuer(ctx context.Context, issuer, subject string) (string, *string, error)

+ func (s *Client) GetRemoteApplicationBySlug(ctx context.Context, slug string) (*RemoteApplication, error)

+ func (s *Client) GetSolanaAddress(ctx context.Context, userID string) (string, error)

+ func (s *Client) GetSolanaLinkedAccount(ctx context.Context, userID string) (*SolanaLinkedAccount, error)

+ func (s *Client) GroupInstanceByID(ctx context.Context, groupID string) (GroupInstance, error)

+ func (s *Client) GroupNamingState(ctx context.Context, id string) (authkit.NamingState, error)

+ func (s *Client) HardDeleteUserAs(ctx context.Context, actorUserID, userID string) error

+ func (s *Client) HasPassword(ctx context.Context, userID string) (bool, error)

+ func (s *Client) HasProviderLink(ctx context.Context, userID, issuer, providerSlug string) (bool, error)

+ func (s *Client) ImportUser(ctx context.Context, input ImportUserInput) (*User, error)

+ func (s *Client) IsUserReserved(ctx context.Context, userID string) (bool, error)

+ func (s *Client) IssueAuthenticatedSession(ctx context.Context, userID, userAgent string, ip net.IP, authMethods []string, ...) (sessionID, refreshToken, accessToken string, accessExpiresAt time.Time, ...)

+ func (s *Client) IssueLoginSession(ctx context.Context, in LoginSessionInput) (IssuedSession, error)

+ func (s *Client) IssueRefreshSession(ctx context.Context, userID, userAgent string, ip net.IP) (sessionID, refreshToken string, expiresAt *time.Time, err error)

+ func (s *Client) IssueRefreshSessionWithAuthMethods(ctx context.Context, userID, userAgent string, ip net.IP, authMethods []string) (sessionID, refreshToken string, expiresAt *time.Time, err error)

+ func (s *Client) LinkSolanaWallet(ctx context.Context, cache siws.ChallengeCache, userID string, ...) error

+ func (s *Client) List2FAFactors(ctx context.Context, userID string) ([]TwoFactorFactor, error)

+ func (s *Client) ListDeviceKeys(ctx context.Context, userID, currentID string) ([]DeviceKey, error)

+ func (s *Client) ListEnabledRemoteApplications(ctx context.Context) ([]RemoteApplication, error)

+ func (s *Client) ListPasskeys(ctx context.Context, userID string) ([]Passkey, error)

+ func (s *Client) ListPendingGroupMembershipInvites(ctx context.Context, userID string) ([]GroupMembershipInvite, error)

+ func (s *Client) ListRemoteApplicationsForGroup(ctx context.Context, group authkit.GroupRef) ([]RemoteApplication, error)

+ func (s *Client) ListSessionEvents(ctx context.Context, userID string, eventTypes ...SessionEventType) ([]AuthSessionEvent, error)

+ func (s *Client) LogPasswordChanged(ctx context.Context, userID string, sessionID string, ip *string, ua *string)

+ func (s *Client) LogPasswordRecovery(ctx context.Context, userID string, method, sessionID string, ip *string, ...)

+ func (s *Client) LogSessionCreated(ctx context.Context, userID string, method string, sessionID string, ...)

+ func (s *Client) LogSessionFailed(ctx context.Context, userID string, sessionID string, reason *string, ...)

+ func (s *Client) MFAStatus(ctx context.Context, userID string) (MFAStatus, error)

+ func (s *Client) MFAStatusWith(settings *TwoFactorSettings, settingsErr error) (MFAStatus, error)

+ func (s *Client) MarkEmailVerified(ctx context.Context, id string) error

+ func (s *Client) MarkSessionAuthenticated(ctx context.Context, userID, sessionID string) error

+ func (s *Client) MarkSessionAuthenticatedWithMethods(ctx context.Context, userID, sessionID string, authMethods []string) error

+ func (s *Client) MayCreateInstance(ctx context.Context, group authkit.GroupRef, subject string) error

+ func (s *Client) Mint2FAEnrollmentToken(ctx context.Context, userID string) (token string, expiresAt time.Time, err error)

+ func (s *Client) NamingPolicy() authkit.NamingPolicy

+ func (s *Client) PasskeysEnabled() bool

+ func (s *Client) PasswordLogin(ctx context.Context, in PasswordLoginInput) (LoginOutcome, error)

+ func (s *Client) PermissionGroupSchema() *GroupSchema

+ func (s *Client) ProviderSlugs(ctx context.Context, userID string) ([]string, error)

+ func (s *Client) PublicNativeUserRegistrationEnabled() bool

+ func (s *Client) RecordFailedDeviceKeyEnrollment(ctx context.Context, enrollmentID string)

+ func (s *Client) RecordFailedEmailVerifyCode(ctx context.Context, email string)

+ func (s *Client) RecordFailedPhoneVerifyCode(ctx context.Context, phone string)

+ func (s *Client) RedisKeyPrefix() string

+ func (s *Client) RegenerateBackupCodes(ctx context.Context, userID string) ([]string, error)

+ func (s *Client) Register(ctx context.Context, in RegisterInput) (RegisterOutcome, error)

+ func (s *Client) RegisterRemoteAppAttributeDef(ctx context.Context, appID, key string, version int32, ...) (*RemoteAppAttributeDef, error)

+ func (s *Client) RegistrationAllowedForEmailWithInvite(ctx context.Context, email, token string) (bool, error)

+ func (s *Client) RegistrationVerificationEnabled() bool

+ func (s *Client) RegistrationVerificationPolicy() RegistrationVerificationPolicy

+ func (s *Client) RegistrationVerificationRequired() bool

+ func (s *Client) RemoveGroupSubject(ctx context.Context, group authkit.GroupRef, subject authkit.Subject) error

+ func (s *Client) RenamePasskey(ctx context.Context, userID, id, label string) error

+ func (s *Client) RequestEmailChange(ctx context.Context, userID, newEmail string) error

+ func (s *Client) RequestEmailVerification(ctx context.Context, email string, ttl time.Duration) error

+ func (s *Client) RequestPasswordReset(ctx context.Context, email string, ttl time.Duration, ip *string, ua *string) error

+ func (s *Client) RequestPhoneChange(ctx context.Context, userID, newPhone string) error

+ func (s *Client) RequestPhonePasswordReset(ctx context.Context, phone string, ttl time.Duration, ip *string, ua *string) error

+ func (s *Client) RequestPhoneVerification(ctx context.Context, phone string, ttl time.Duration) error

+ func (s *Client) Require2FAForLoginFactor(ctx context.Context, userID, factorID string) (destination, method string, factor TwoFactorFactor, err error)

+ func (s *Client) Require2FAForStepUpMethod(ctx context.Context, userID, sessionID, method string) (destination, selectedMethod string, factor TwoFactorFactor, err error)

+ func (s *Client) ResolveExternalIdentity(ctx context.Context, in ExternalLoginInput) (userID string, created bool, err error)

+ func (s *Client) ResolveGroupSlug(ctx context.Context, group authkit.GroupRef) (authkit.NameResolution, error)

+ func (s *Client) ResolveUsername(ctx context.Context, name string) (authkit.NameResolution, error)

+ func (s *Client) RevokeDeviceKey(ctx context.Context, userID, currentID, targetID string) error

+ func (s *Client) RevokeOtherDeviceKeys(ctx context.Context, userID, currentID string) error

+ func (s *Client) RevokeSessionByIDForUser(ctx context.Context, userID, sessionID string) error

+ func (s *Client) SMSHealthy() bool

+ func (s *Client) SendPhone2FASetupCode(ctx context.Context, userID, phone, code string) error

+ func (s *Client) SendPhoneVerificationToUser(ctx context.Context, phone, userID string, ttl time.Duration) error

+ func (s *Client) SendWelcome(ctx context.Context, userID string)

+ func (s *Client) SessionFreshness(ctx context.Context, userID, sessionID string, now time.Time) (SessionFreshness, error)

+ func (s *Client) SetDefault2FAFactor(ctx context.Context, userID, factorID string) error

+ func (s *Client) SetPasswordAfterFreshAuth(ctx context.Context, userID, new string, keepSessionID *string) error

+ func (s *Client) SetPreferredLanguage(ctx context.Context, userID, language string) error

+ func (s *Client) SetProviderUsername(ctx context.Context, userID, provider, subject, username string) error

+ func (s *Client) SoftDeleteUserAs(ctx context.Context, actorUserID, userID string) error

+ func (s *Client) StartTOTPEnrollment(ctx context.Context, userID string) (secret, otpauthURI string, err error)

+ func (s *Client) TwoFactorAllowedMethods() []string

+ func (s *Client) TwoFactorEnabled() bool

+ func (s *Client) TwoFactorMethodAvailable(method string) bool

+ func (s *Client) UnassignGroupRole(ctx context.Context, group authkit.GroupRef, subject authkit.Subject, ...) error

+ func (s *Client) UnlinkProviderUnlessLast(ctx context.Context, userID, provider string) (bool, error)

+ func (s *Client) UpdateGroupInstanceAs(ctx context.Context, actorUserID, groupID string, ...) (authkit.GroupInstance, error)

+ func (s *Client) UserNamingState(ctx context.Context, id string) (authkit.NamingState, error)

+ func (s *Client) UserProfile(ctx context.Context, in ProfileInput) (authkit.UserProfile, error)

+ func (s *Client) UserProfileLinks(ctx context.Context, userID string) (providerSlugs []string, aliases []string, err error)

+ func (s *Client) ValidateUsernameForRegistration(ctx context.Context, username string) (string, error)

+ func (s *Client) Verify2FAChallenge(ctx context.Context, userID, challenge string) (bool, error)

+ func (s *Client) Verify2FACode(ctx context.Context, userID, code string) (bool, error)

+ func (s *Client) Verify2FAFactorCode(ctx context.Context, userID, factorID, code string) (bool, error)

+ func (s *Client) Verify2FAStepUpMethodCode(ctx context.Context, userID, sessionID, method, code string) (bool, error)

+ func (s *Client) VerifyBackupCode(ctx context.Context, userID, backupCode string) (bool, error)

+ func (s *Client) VerifyPendingPassword(ctx context.Context, email, pass string) bool

+ func (s *Client) VerifyPendingPhonePassword(ctx context.Context, phone, pass string) bool

+ func (s *Client) VerifyPhone2FASetupCode(ctx context.Context, userID, phone, code string) (bool, error)

+ func (s *Client) VerifySIWSAndLogin(ctx context.Context, cache siws.ChallengeCache, output siws.SignInOutput, ...) (accessToken string, expiresAt time.Time, refreshToken, userID string, ...)

type Config

+ APIKeys APIKeysConfig

+ Applications ApplicationsConfig

+ Delegated DelegatedConfig

+ DeviceKeys DeviceKeysConfig

+ Documents DocumentsConfig

+ Ephemeral EphemeralConfig

+ Frontend FrontendConfig

+ Identity IdentityConfig

+ Keys KeysConfig

+ Naming authkit.NamingConfig

+ Passkeys PasskeyConfig

+ RBAC []PersonaDef

+ Registration RegistrationConfig

+ Schema string

+ SessionEventRetention time.Duration

+ SolanaNetwork string

+ Token TokenConfig

+ TwoFactor TwoFactorConfig

+ type ContactChange struct

+ Field string

+ NewValue string

+ type CreateAccountRegistrationInviteRequest = authkit.CreateAccountRegistrationInviteRequest

+ type CreateGroupInviteLinkRequest = authkit.CreateGroupInviteLinkRequest

+ type CreateInstanceResult struct

+ Created bool

+ GroupID string

+ InstanceSlug string

+ type CreatePermissionGroupRequest = authkit.CreatePermissionGroupRequest

+ type DelegatedAccessParams = authkit.DelegatedAccessParams

type DelegatedConfig

+ Audiences []string

+ TTLCeiling time.Duration

+ TTLDefault time.Duration

+ TTLFloor time.Duration

+ type DelegationAuthorizer = authkit.DelegationAuthorizer

+ type DelegationGrant = authkit.DelegationGrant

+ type DelegationRequest = authkit.DelegationRequest

+ type DeletePermissionGroupOptions = authkit.DeletePermissionGroupOptions

+ type Deps struct

+ ApplicationAdmission func(ctx context.Context, domain string) error

+ Clock func() time.Time

+ DelegatedAuthorization DelegationAuthorizer

+ Email EmailSender

+ Entitlements EntitlementsProvider

+ EphemeralStore EphemeralStore

+ InstanceAdmission func(ctx context.Context, group authkit.GroupRef, subject string) error

+ NameAdmission func(context.Context, authkit.NameAdmissionRequest) error

+ OutboundHTTP *http.Client

+ Postgres *pgxpool.Pool

+ Redis *redis.Client

+ SMS SMSSender

+ SolanaSNSResolver SolanaSNSResolver

+ type DeviceKey struct

+ CreatedAt time.Time

+ ID string

+ Label string

+ LastUsedAt *time.Time

+ RevokedAt *time.Time

+ type DeviceKeyAuthResult struct

+ AccessToken string

+ DeviceKey DeviceKey

+ ExpiresAt time.Time

+ type DeviceKeyChallenge struct

+ Challenge string

+ ExpiresAt time.Time

+ ID string

+ type DeviceKeyNotice struct

+ CreatedAt time.Time

+ Label string

+ type DeviceKeySecondFactorRequired struct

+ Method string

+ func (e *DeviceKeySecondFactorRequired) Error() string

+ type DeviceKeysConfig struct

+ Enabled bool

+ type DocumentReader struct

+ Domain string

+ ID string

+ Issuer string

type DocumentsConfig

+ AllowRegisteredTier bool

+ Readers []DocumentReader

type EmailSender

+ SendAccountRegistrationInvite func(ctx context.Context, email, inviteURL string) error

+ SendContactChanged func(ctx context.Context, email, username string, change ContactChange) error

+ SendDeviceKeyEnrolled func(ctx context.Context, email, username string, notice DeviceKeyNotice) error

+ SendLoginCode func(ctx context.Context, email, username, code string) error

+ SendPasswordResetLink func(ctx context.Context, email, username, resetURL string) error

+ SendVerification func(ctx context.Context, email, username string, msg VerificationMessage) error

+ SendWelcome func(ctx context.Context, email, username string) error

type EntitlementFilterProvider

+ ListSubjectsWithEntitlement func(ctx context.Context, entitlement string) ([]string, error)

type EntitlementsProvider

+ ListEntitlements func(ctx context.Context, userIDs []string) (map[string][]string, error)

+ type EphemeralConfig struct

+ AllowMemory bool

+ KeyPrefix string

type EphemeralStore

+ Consume func(ctx context.Context, key string) ([]byte, bool, error)

+ Del func(ctx context.Context, key string) error

+ Get func(ctx context.Context, key string) ([]byte, bool, error)

+ Incr func(ctx context.Context, key string, ttl time.Duration) (int64, error)

+ Set func(ctx context.Context, key string, value []byte, ttl time.Duration) error

+ type ExternalIdentity struct

+ DisplayName string

+ Email string

+ EmailVerified bool

+ Issuer string

+ PreferredUsername string

+ Provider string

+ Subject string

+ type ExternalLoginInput struct

+ AccountInviteToken string

+ Event string

+ IP string

+ Identity ExternalIdentity

+ LinkUserID string

+ UserAgent string

+ type ExternalLoginOutcome struct

+ Created bool

+ Kind ExternalLoginOutcomeKind

+ Session *IssuedSession

+ UserID string

+ type ExternalLoginOutcomeKind string

+ const ExternalSessionIssued

+ const ExternalTwoFAEnrollmentRequired

+ type FactorEnrollmentMode string

+ const AllowAdditionalFactors

+ const FirstFactorOnly

type FrontendConfig

+ BaseURL string

+ InvitePath string

+ OIDCReturnPath string

+ PasswordResetPath string

+ PasswordlessPath string

+ VerifyPath string

type GeneratedRoute

+ Method string

+ Path string

+ Perm authkit.Perm

+ Persona authkit.Persona

type GenesisClient

+ func (g GenesisClient) AssignRemoteApplicationRole(ctx context.Context, appID string, role authkit.Role) error

type GroupAssignment

+ PermissionGroupID string

+ Persona authkit.Persona

+ Role authkit.Role

+ type GroupDirectory struct

+ func NewGroupDirectory(pool *pgxpool.Pool, schema string) (*GroupDirectory, error)

+ func (d *GroupDirectory) GroupInstanceByID(ctx context.Context, id string) (authkit.GroupInstance, error)

+ func (d *GroupDirectory) GroupInstanceForSlug(ctx context.Context, group authkit.GroupRef) (authkit.GroupInstance, error)

+ func (d *GroupDirectory) SearchGroupInstances(ctx context.Context, persona authkit.Persona, query, afterSlug, afterID string, ...) ([]authkit.GroupInstance, error)

+ type GroupInstance = authkit.GroupInstance

+ type GroupInviteLink = authkit.GroupInviteLink

+ type GroupInviteLinkCreated = authkit.GroupInviteLinkCreated

+ type GroupMember = authkit.GroupMember

+ type GroupMembershipInvite struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ ID string

+ InstanceSlug string

+ InvitedBy string

+ Persona authkit.Persona

+ Role authkit.Role

type GroupSchema

+ func (s *GroupSchema) Can(assignments []GroupAssignment, custom CustomRoleResolver, perm authkit.Perm) bool

+ func (s *GroupSchema) CreationDef(persona authkit.Persona) (InstanceCreationDef, bool)

+ func (s *GroupSchema) CreationEnabled(persona authkit.Persona) bool

+ func (s *GroupSchema) GeneratedRoutes() []GeneratedRoute

+ func (s *GroupSchema) GrantableUniverse(persona authkit.Persona) ([]string, bool)

+ func (s *GroupSchema) IsRoot(name authkit.Persona) bool

+ func (s *GroupSchema) Persona(name authkit.Persona) (PersonaDef, bool)

+ func (s *GroupSchema) Personas() []authkit.Persona

+ func (s *GroupSchema) RequireConsent(persona authkit.Persona) bool

+ func (s *GroupSchema) ResolveGrants(assignments []GroupAssignment, custom CustomRoleResolver) []string

+ func (s *GroupSchema) Role(persona authkit.Persona, role authkit.Role) (RoleDef, bool)

+ func (s *GroupSchema) Roles(persona authkit.Persona) ([]RoleDef, bool)

+ func (s *GroupSchema) ValidateParent(childPersona, parentPersona authkit.Persona) error

type IdentityConfig

+ Providers []authprovider.Provider

+ type ImportUnverifiedSolanaLinkInput = authkit.ImportUnverifiedSolanaLinkInput

+ type ImportUnverifiedSolanaLinkResult = authkit.ImportUnverifiedSolanaLinkResult

+ type ImportUnverifiedSolanaLinkStatus = authkit.ImportUnverifiedSolanaLinkStatus

+ type ImportUnverifiedSolanaLinksResult = authkit.ImportUnverifiedSolanaLinksResult

+ type ImportUserInput = authkit.ImportUserInput

+ type ImportUserResult = authkit.ImportUserResult

+ type ImportUserStatus = authkit.ImportUserStatus

+ type ImportUsersResult = authkit.ImportUsersResult

+ type IssuedSession struct

+ AccessExpiresAt time.Time

+ AccessToken string

+ RefreshToken string

+ SessionID string

+ func (s IssuedSession) TokenSet() authkit.TokenSet

type KeysConfig

+ AllowEphemeralDevKeys bool

+ Path string

+ Source jwtkit.KeySource

+ VerifyOnly bool

type Keyset

+ Active jwtkit.Signer

+ PublicKeys map[string]crypto.PublicKey

+ type LoginOutcome struct

+ Challenge *TwoFactorChallenge

+ Kind LoginOutcomeKind

+ Reason error

+ Session *IssuedSession

+ UserID string

+ Verification *VerificationRequired

+ type LoginOutcomeKind string

+ const LoginRejected

+ const LoginSessionIssued

+ const LoginTwoFAEnrollmentRequired

+ const LoginTwoFactorRequired

+ const LoginVerificationRequired

+ type LoginSessionInput struct

+ AuthMethods []string

+ Event string

+ Extra map[string]any

+ IP string

+ UserAgent string

+ UserID string

+ type MFAStatus = authkit.MFAStatus

type Passkey

+ AuthenticatorAttachment string

+ BackupEligible bool

+ BackupState bool

+ CreatedAt time.Time

+ ID string

+ Label *string

+ LastUsedAt *time.Time

+ Transports []string

+ UserID string

type PasskeyConfig

+ Origins []string

+ RPDisplayName string

+ RPID string

+ UserVerification string

type PasskeyLoginResult

+ AccessToken string

+ ExpiresAt time.Time

+ RefreshToken string

+ SessionID string

+ UserID string

+ type PasswordLoginInput struct

+ IP string

+ Identifier string

+ Password string

+ UserAgent string

+ type PasswordlessConfirmResult = authkit.PasswordlessConfirmResult

+ type PasswordlessStartRequest = authkit.PasswordlessStartRequest

+ type PasswordlessStartResult = authkit.PasswordlessStartResult

+ type PendingPasskeyAccount struct

+ Creation *protocol.CredentialCreation

+ UserID string

type PendingRegistration

+ Email string

+ PasswordHash string

+ PreferredLanguage string

+ Username string

type PermissionGroupStore

+ func (st *PermissionGroupStore) AssignRole(ctx context.Context, groupID string, subject authkit.Subject, ...) error

+ func (st *PermissionGroupStore) CanOnGroup(ctx context.Context, schema *GroupSchema, subject authkit.Subject, ...) (bool, error)

+ func (st *PermissionGroupStore) CreateGroup(ctx context.Context, g authkit.GroupRef, parentID string) (string, error)

+ func (st *PermissionGroupStore) CreateGroupNamed(ctx context.Context, g authkit.GroupRef, parentID, displayName string) (string, error)

+ func (st *PermissionGroupStore) CustomRole(ctx context.Context, groupID string, role authkit.Role) (permissions []string, requiresMFA bool, err error)

+ func (st *PermissionGroupStore) CustomRolesFor(ctx context.Context, groupIDs []string) (CustomRoleResolver, error)

+ func (st *PermissionGroupStore) DeleteCustomRole(ctx context.Context, groupID string, role authkit.Role) error

+ func (st *PermissionGroupStore) DeleteGroup(ctx context.Context, groupID string, opts authkit.DeletePermissionGroupOptions) error

+ func (st *PermissionGroupStore) GrantsOnGroup(ctx context.Context, schema *GroupSchema, subject authkit.Subject, ...) ([]string, error)

+ func (st *PermissionGroupStore) GroupByInstanceSlug(ctx context.Context, g authkit.GroupRef) (string, error)

+ func (st *PermissionGroupStore) GroupByLiveInstanceSlug(ctx context.Context, g authkit.GroupRef) (string, error)

+ func (st *PermissionGroupStore) GroupInstanceByID(ctx context.Context, groupID string) (GroupInstance, error)

+ func (st *PermissionGroupStore) GroupMembers(ctx context.Context, groupID string) ([]GroupMember, error)

+ func (st *PermissionGroupStore) InstanceSlugAvailable(ctx context.Context, g authkit.GroupRef) (bool, error)

+ func (st *PermissionGroupStore) OwnerCount(ctx context.Context, groupID string) (int, error)

+ func (st *PermissionGroupStore) ResolveGroupSlug(ctx context.Context, g authkit.GroupRef) (authkit.NameResolution, error)

+ func (st *PermissionGroupStore) RootGroupID(ctx context.Context) (string, error)

+ func (st *PermissionGroupStore) RootRolesForUsers(ctx context.Context, rootGID string, userIDs []string) (map[string][]string, error)

+ func (st *PermissionGroupStore) SearchGroupInstances(ctx context.Context, persona authkit.Persona, query, afterSlug, afterID string, ...) ([]GroupInstance, error)

+ func (st *PermissionGroupStore) SeedContainment(ctx context.Context, schema *GroupSchema) error

+ func (st *PermissionGroupStore) SetGroupDisplayName(ctx context.Context, groupID, displayName string) error

+ func (st *PermissionGroupStore) SubjectGroups(ctx context.Context, subject authkit.Subject) ([]SubjectGroupMembership, error)

+ func (st *PermissionGroupStore) UnassignRole(ctx context.Context, groupID string, subject authkit.Subject, ...) error

+ func (st *PermissionGroupStore) UnassignSubject(ctx context.Context, groupID string, subject authkit.Subject) error

+ func (st *PermissionGroupStore) UpsertCustomRole(ctx context.Context, groupID string, def authkit.CustomRoleDef) error

+ func (st *PermissionGroupStore) WalkAssignments(ctx context.Context, groupID string, subject authkit.Subject) ([]GroupAssignment, error)

type PersonaDef

+ Capabilities PersonaCapabilities

+ Catalog []string

+ Creation InstanceCreationDef

+ Name authkit.Persona

+ Parent authkit.Persona

+ RequireConsent bool

+ Roles []RoleDef

+ type PreferredLanguage = authkit.PreferredLanguage

+ type ProfileInput struct

+ AuthTime time.Time

+ ClaimsUsername string

+ EnabledProviders []string

+ ProviderSupportsStepUp func(provider string) bool

+ StepUpSatisfied bool

+ UserID string

+ type RBACDriftReport struct

+ APIKeys int

+ CustomRoles int

+ GroupUserRoles int

+ func (r RBACDriftReport) Total() int

+ type RedeemGroupInviteLinkResult = authkit.RedeemGroupInviteLinkResult

+ type RegisterInput struct

+ AccountInviteToken string

+ IP string

+ Identifier string

+ Password string

+ PreferredLanguage string

+ UserAgent string

+ Username string

+ type RegisterOutcome struct

+ Email *string

+ Kind RegisterOutcomeKind

+ Phone *string

+ Session *IssuedSession

+ Username string

+ type RegisterOutcomeKind string

+ const RegisterSessionIssued

+ const RegisterVerifyEmail

+ const RegisterVerifyPhone

+ type RegisteredApplication = authkit.RegisteredApplication

type RegistrationConfig

+ AllowMissingSenders bool

+ NativeUserMode RegistrationMode

+ PasswordlessAutoRegistration bool

+ PasswordlessLogin bool

+ Verification RegistrationVerificationPolicy

+ VerificationSendTimeout time.Duration

+ type RemoteAppAttributeDef = authkit.RemoteAppAttributeDef

+ type RemoteAppKey = authkit.RemoteAppKey

+ type RemoteApplication = authkit.RemoteApplication

+ type RemoteApplicationAccessParams = authkit.RemoteApplicationAccessParams

type RemovedMFARoleAssignment

+ InstanceSlug string

+ PermissionGroupID string

+ Persona authkit.Persona

+ RemovedAt time.Time

+ Role authkit.Role

+ type ResolvedAPIKey = authkit.ResolvedAPIKey

type RoleDef

+ Name authkit.Role

+ Permissions []string

+ RequiresMFA bool

type SMSHealthChecker

+ CheckHealth func(ctx context.Context) error

type SMSSender

+ SendContactChanged func(ctx context.Context, phone string, change ContactChange) error

+ SendLoginCode func(ctx context.Context, phone, code string) error

+ SendPasswordResetLink func(ctx context.Context, phone, resetURL string) error

+ SendVerification func(ctx context.Context, phone string, msg VerificationMessage) error

+ type ServiceJWTClaims = authkit.ServiceJWTClaims

+ type ServiceJWTMintOptions = authkit.ServiceJWTMintOptions

+ type Session = authkit.Session

type SessionFreshness

+ AuthMethods []string

+ LastAuthenticatedAt time.Time

+ StepUpRequiredForSensitiveOps bool

+ TimeUntilStepUpRequired time.Duration

+ func (f SessionFreshness) AssuranceClaims() (authTime int64, amr []string, acr string)

type SessionRevokeReason

+ const SessionRevokeReasonContactChange

+ const SessionRevokeReasonHardDeleted

type SolanaSNSResolver

+ ResolvePrimaryName func(ctx context.Context, address string) (string, error)

+ type SubjectGroupMembership = authkit.SubjectGroupMembership

+ type TOTPEnrollment struct

+ Code string

+ MakeDefault bool

+ Mode FactorEnrollmentMode

+ UserID string

type TokenConfig

+ AccessTokenDuration time.Duration

+ ExpectedAudiences []string

+ IssuedAudiences []string

+ Issuer string

+ RefreshRotationGrace time.Duration

+ RefreshTokenDuration time.Duration

+ SessionMaxPerUser int

+ type TrustSourcePolicy struct

+ AllowPrivateNetworkJWKS bool

+ type TwoFAEnrollmentRequiredError struct

+ UserID string

+ func (e *TwoFAEnrollmentRequiredError) Error() string

+ func (e *TwoFAEnrollmentRequiredError) Unwrap() error

+ type TwoFactorChallenge struct

+ Challenge string

+ Destination string

+ Factor TwoFactorFactor

+ Factors []TwoFactorFactor

+ Method string

type TwoFactorConfig

+ Methods []TwoFactorMethod

+ Mode TwoFactorMode

+ TOTPSecretKey []byte

+ type TwoFactorEnrollInput struct

+ Code string

+ FactorID string

+ MakeDefault bool

+ Method string

+ Mode FactorEnrollmentMode

+ PhoneNumber string

+ UserID string

+ type TwoFactorEnrollKind string

+ const TwoFactorEnrollCodeSent

+ const TwoFactorEnrollDefaultSet

+ const TwoFactorEnrollEnabled

+ const TwoFactorEnrollTOTPStarted

+ type TwoFactorEnrollOutcome struct

+ BackupCodes []string

+ Kind TwoFactorEnrollKind

+ Method string

+ OTPAuthURI string

+ Secret string

+ type TwoFactorEnrollmentScope struct

+ HasFactors bool

+ Mode FactorEnrollmentMode

type TwoFactorFactor

+ CreatedAt time.Time

+ Enabled bool

+ ID string

+ IsDefault bool

+ LastTOTPStep *int64

+ Method string

+ PhoneNumber *string

+ TOTPSecret []byte

+ UpdatedAt time.Time

+ UserID string

+ type TwoFactorMethod = authkit.TwoFactorMethod

+ type TwoFactorMode = authkit.TwoFactorMode

type TwoFactorSettings

+ BackupCodes []string

+ CreatedAt time.Time

+ Enabled bool

+ Factors []TwoFactorFactor

+ LastTOTPStep *int64

+ Method string

+ PhoneNumber *string

+ TOTPSecret []byte

+ UpdatedAt time.Time

+ UserID string

+ type User = authkit.User

type VerificationMessage

+ Code string

+ LinkURL string

+ Purpose string

+ func (m VerificationMessage) Validate() error

+ type VerificationRequired struct

+ Channel string

+ Identifier string

+ type VerifiedPasskey struct

+ BackupEligible bool

+ BackupState bool

+ CredentialID string

+ PasskeyID string

+ UserID string

v0.97.2

Aug 31, 2026

v0.97.1

Aug 26, 2026

Changes in this version

type Client

+ func (s *Client) ImportUnverifiedSolanaLinks(ctx context.Context, inputs []authkit.ImportUnverifiedSolanaLinkInput) (authkit.ImportUnverifiedSolanaLinksResult, error)

v0.97.0

Aug 12, 2026

v0.96.0

Aug 12, 2026

v0.95.0

Aug 11, 2026

v0.94.0

Aug 11, 2026

v0.93.0

Aug 11, 2026

Changes in this version

+ var PermSettingsRead = authcore.PermSettingsRead

type Client

+ func (s *Client) GroupInstanceForSlug(ctx context.Context, persona, instanceSlug string) (authkit.GroupInstance, error)

v0.92.0

Aug 11, 2026

Changes in this version

type Client

+ func (s *Client) PublicUsersByIDs(ctx context.Context, ids []string) (map[string]authkit.PublicUserRef, error)

+ func (s *Client) UserLivenessByIDs(ctx context.Context, ids []string) (map[string]authkit.UserLiveness, error)

v0.91.0

Aug 11, 2026

Changes in this version

+ const DefaultDelegatedTTLCeiling

+ const DefaultDelegatedTTLDefault

+ const DefaultDelegatedTTLFloor

+ var WithDelegatedAttributes = authcore.WithDelegatedAttributes

+ type DelegatedAttributeProvider = authcore.DelegatedAttributeProvider

+ type DelegatedConfig = authcore.DelegatedConfig

+ type DocumentsConfig = authcore.DocumentsConfig

v0.90.0

Aug 11, 2026

Changes in this version

+ var WithInstanceAdmission = authcore.WithInstanceAdmission

type Client

+ func (s *Client) UpdateAvatarURL(ctx context.Context, id string, avatarURL *string) error

+ type InstanceCreationDef = authcore.InstanceCreationDef

v0.89.0

Aug 11, 2026

v0.88.1

Aug 11, 2026

v0.88.0

Aug 11, 2026

Changes in this version

+ const ApplicationTierApproved

+ const ApplicationTierRegistered

+ const ApplicationTrustRootDomain

+ const ApplicationTrustRootManual

+ const ApplicationTrustRootUser

+ const ApplicationWellKnownPath

+ var PermSettingsManage = authcore.PermSettingsManage

+ var WithApplicationAdmission = authcore.WithApplicationAdmission

+ var WithApplicationsHTTPClient = authcore.WithApplicationsHTTPClient

+ type ApplicationsConfig = authcore.ApplicationsConfig

type Client

+ func (s *Client) DeletePermissionGroup(ctx context.Context, persona, instanceSlug string, ...) error

+ func (s *Client) RegisterApplicationFromDomain(ctx context.Context, domain string) (*authkit.RegisteredApplication, error)

+ func (s *Client) RenamePermissionGroupSlug(ctx context.Context, persona, instanceSlug, newSlug string) error

+ func (s *Client) RepointApplicationSigned(ctx context.Context, slug, compactJWS string) (*authkit.RegisteredApplication, error)

+ func (s *Client) RotateApplicationSigned(ctx context.Context, slug, compactJWS string) (*authkit.RemoteApplication, error)

+ func (s *Client) SetApplicationEnabled(ctx context.Context, slug string, enabled bool) (*authkit.RemoteApplication, error)

+ func (s *Client) SetApplicationTier(ctx context.Context, slug, tier string) (*authkit.RemoteApplication, error)

+ func (s *Client) SetPermissionGroupDisplayName(ctx context.Context, persona, instanceSlug, displayName string) error

v0.87.0

Jul 21, 2026

v0.86.1

Jul 15, 2026

v0.86.0

Jul 14, 2026

Changes in this version

type Client

+ func (s *Client) SignDocument(ctx context.Context, envelope authkit.DocumentEnvelope) (authkit.SignedDocument, error)

v0.85.0

Jul 13, 2026

v0.84.0

Jul 7, 2026

v0.83.1

Jul 7, 2026

v0.83.0

Jul 6, 2026

v0.82.0

Jul 5, 2026

v0.81.0

Jul 4, 2026

v0.80.0

Jul 4, 2026

Changes in this version

type Client

+ func (s *Client) AssignRolesBySlugAs(ctx context.Context, actorUserID string, userIDs []string, slug string) ([]authkit.OpResult, error)

+ func (s *Client) HardDeleteUsers(ctx context.Context, userIDs []string) ([]authkit.OpResult, error)

+ func (s *Client) MintAccessToken(ctx context.Context, userID string, extra map[string]any) (string, time.Time, error)

+ func (s *Client) ProviderUsernames(ctx context.Context, userIDs []string, provider string) (map[string]string, error)

+ func (s *Client) RemoveRolesBySlugAs(ctx context.Context, actorUserID string, userIDs []string, slug string) ([]authkit.OpResult, error)

+ func (s *Client) RestoreUsers(ctx context.Context, userIDs []string) ([]authkit.OpResult, error)

+ func (s *Client) RoleSlugsByUsers(ctx context.Context, userIDs []string) (map[string][]string, error)

+ func (s *Client) SoftDeleteUsers(ctx context.Context, userIDs []string) ([]authkit.OpResult, error)

v0.79.0

Jul 4, 2026

Changes in this version

type Client

+ func (s *Client) Genesis() GenesisClient

+ type GenesisClient struct

+ func (g GenesisClient) AssignGroupRole(ctx context.Context, ...) error

+ func (g GenesisClient) AssignRoleBySlug(ctx context.Context, userID, slug string) error

+ func (g GenesisClient) RemoveGroupSubject(ctx context.Context, persona, instanceSlug, subjectID, subjectKind string) error

+ func (g GenesisClient) RemoveRoleBySlug(ctx context.Context, userID, slug string) error

v0.78.0

Jul 3, 2026

v0.77.0

Jul 3, 2026

Changes in this version

type Client

+ func (s *Client) Config() Config

v0.76.0

Jul 2, 2026

v0.75.0

Jun 29, 2026

v0.74.1

Jun 29, 2026

v0.74.0

Jun 29, 2026

v0.73.0

Jun 26, 2026

Changes in this version

type Client

+ func (s *Client) LeaveGroup(ctx context.Context, userID, persona, instanceSlug string) error

v0.72.0

Jun 26, 2026

Changes in this version

+ const TwoFactorDisabled

+ const TwoFactorEmail

+ const TwoFactorOptional

+ const TwoFactorRequired

+ const TwoFactorSMS

+ const TwoFactorTOTP

+ var WithClickHouse = authcore.WithClickHouse

type Client

+ func (s *Client) CreateAccountRegistrationInvite(ctx context.Context, req authkit.CreateAccountRegistrationInviteRequest) (authkit.AccountRegistrationInviteCreated, error)

+ func (s *Client) RBACDriftReport(ctx context.Context) (authkit.RBACDriftReport, error)

+ func (s *Client) ResolveAPIKeyDetailed(ctx context.Context, keyID, secret string) (authkit.ResolvedAPIKey, error)

+ func (s *Client) RevokeAccountRegistrationInvite(ctx context.Context, inviteID, actorUserID string) error

+ type PersonaCapabilities = authcore.PersonaCapabilities

v0.71.0

Jun 26, 2026

v0.70.0

Jun 26, 2026

v0.69.0

Jun 26, 2026

v0.68.0

Jun 26, 2026

Changes in this version

+ func Unwrap(c *Client) *authcore.Service

type Option

+ func WithRedis(rd *redis.Client) Option

v0.67.0

Jun 26, 2026

v0.66.0

Jun 26, 2026

Changes in this version

type Client

+ func (s *Client) UsersByIDs(ctx context.Context, ids []string) ([]authkit.UserRef, error)

v0.65.0

Jun 26, 2026

Changes in this version

+ const AssuranceLevelMFA

+ const AssuranceLevelPassword

+ const DefaultBootstrapManifestPath

+ const DelegatedAccessTokenType

+ const EphemeralMemory

+ const EphemeralRedis

+ const ErrCodeInvalidEmail

+ const ErrCodeInvalidPhoneNumber

+ const ErrCodeOwnerSlugTaken

+ const ErrCodePasswordTooShort

+ const ErrCodeRenameRateLimited

+ const ErrCodeUsernameCannotContainAt

+ const ErrCodeUsernameCannotStartWithPlus

+ const ErrCodeUsernameInvalidCharacters

+ const ErrCodeUsernameMustStartWithLetter

+ const ErrCodeUsernameNotAllowed

+ const ErrCodeUsernameTooLong

+ const ErrCodeUsernameTooShort

+ const HashAlgoLegacyResetRequired

+ const KindChangeEmail

+ const KindChangePhone

+ const KindRegisterEmail

+ const KindRegisterPhone

+ const MaxCustomJWTLifetime

+ const OwnerRoleName

+ const PasswordlessChannelEmail

+ const PasswordlessChannelSMS

+ const PasswordlessModeBoth

+ const PasswordlessModeCode

+ const PasswordlessModeLink

+ const PermRootCredentialsManage

+ const PermRootResourcesRead

+ const PermRootRolesManage

+ const PermRootUsersBan

+ const PermRootUsersDelete

+ const PermRootUsersRecover

+ const RegistrationModeAdminBootstrapOnly

+ const RegistrationModeAdminOnly

+ const RegistrationModeClosed

+ const RegistrationModeInviteOnly

+ const RegistrationModeManifestOnly

+ const RegistrationModeOpen

+ const RegistrationVerificationNone

+ const RegistrationVerificationOptional

+ const RegistrationVerificationRequired

+ const RemoteApplicationAccessTokenType

+ const RootPersona

+ const SensitiveActionFreshAuthWindow

+ const ServiceJWTType

+ const SessionEventCreated

+ const SessionEventFailed

+ const SessionEventPasswordChange

+ const SessionEventPasswordRecovery

+ const SessionEventRevoked

+ const SessionRevokeReasonAdminRevoke

+ const SessionRevokeReasonAdminRevokeAll

+ const SessionRevokeReasonAdminSetPassword

+ const SessionRevokeReasonBanned

+ const SessionRevokeReasonEvicted

+ const SessionRevokeReasonLogout

+ const SessionRevokeReasonPasswordChange

+ const SessionRevokeReasonRefreshReuseDetected

+ const SessionRevokeReasonSoftDeleted

+ const SessionRevokeReasonUnknown

+ const SessionRevokeReasonUserDisabled

+ const SessionRevokeReasonUserRevoke

+ const SessionRevokeReasonUserRevokeAll

+ const SolanaProviderSlug

+ const SolanaSNSStatusDisabled

+ const SolanaSNSStatusError

+ const SolanaSNSStatusNotFound

+ const SolanaSNSStatusPending

+ const SolanaSNSStatusResolved

+ const SolanaSNSStatusStale

+ const SubjectKindRemoteApp

+ const SubjectKindUser

+ var BuildSchema = authcore.BuildSchema

+ var IntrinsicRootPermissions = authcore.IntrinsicRootPermissions

+ var IntrinsicRootPersona = authcore.IntrinsicRootPersona

+ var IsDevEnvironment = authcore.IsDevEnvironment

+ var LoadBootstrapManifestFile = authcore.LoadBootstrapManifestFile

+ var MintDelegatedAccessToken = authcore.MintDelegatedAccessToken

+ var MintRemoteApplicationAccessToken = authcore.MintRemoteApplicationAccessToken

+ var MintServiceJWT = authcore.MintServiceJWT

+ var NewGroupSchema = authcore.NewGroupSchema

+ var NewPermissionGroupStore = authcore.NewPermissionGroupStore

+ var NormalizeEmail = authcore.NormalizeEmail

+ var NormalizePhone = authcore.NormalizePhone

+ var NormalizePreferredLanguage = authcore.NormalizePreferredLanguage

+ var NormalizeRemoteAppTrustSource = authcore.NormalizeRemoteAppTrustSource

+ var OwnerGrant = authcore.OwnerGrant

+ var ParseBootstrapManifestYAML = authcore.ParseBootstrapManifestYAML

+ var PermCredentialsManage = authcore.PermCredentialsManage

+ var PermCredentialsRead = authcore.PermCredentialsRead

+ var PermMembersManage = authcore.PermMembersManage

+ var PermMembersRead = authcore.PermMembersRead

+ var PermRolesManage = authcore.PermRolesManage

+ var PermRolesRead = authcore.PermRolesRead

+ var PermissionPersona = authcore.PermissionPersona

+ var ValidateEmail = authcore.ValidateEmail

+ var ValidateGrantPattern = authcore.ValidateGrantPattern

+ var ValidatePassword = authcore.ValidatePassword

+ var ValidatePermission = authcore.ValidatePermission

+ var ValidatePhone = authcore.ValidatePhone

+ var ValidateUsername = authcore.ValidateUsername

+ var ValidationErrorCode = authcore.ValidationErrorCode

+ var WithAPIKeyResourceAuthorizer = authcore.WithAPIKeyResourceAuthorizer

+ var WithAuthLogger = authcore.WithAuthLogger

+ var WithDBTXWrapper = authcore.WithDBTXWrapper

+ var WithEmailSender = authcore.WithEmailSender

+ var WithEntitlements = authcore.WithEntitlements

+ var WithEphemeralStore = authcore.WithEphemeralStore

+ var WithPostgres = authcore.WithPostgres

+ var WithSMSSender = authcore.WithSMSSender

+ var WithSessionRevokeReason = authcore.WithSessionRevokeReason

+ var WithSolanaSNSResolver = authcore.WithSolanaSNSResolver

+ type APIKeyResourceAuthorizationRequest = authcore.APIKeyResourceAuthorizationRequest

+ type APIKeyResourceAuthorizer = authcore.APIKeyResourceAuthorizer

+ type APIKeyResourceAuthorizerFunc = authcore.APIKeyResourceAuthorizerFunc

+ type APIKeysConfig = authcore.APIKeysConfig

+ type AdminRecoverUserInput = authcore.AdminRecoverUserInput

+ type AuthEventLogReader = authcore.AuthEventLogReader

+ type AuthEventLogger = authcore.AuthEventLogger

+ type AuthSessionEvent = authcore.AuthSessionEvent

+ type BatchEntitlementsProvider = authcore.BatchEntitlementsProvider

+ type Client struct

+ func New(cfg Config, pg *pgxpool.Pool, extraOpts ...Option) (*Client, error)

+ func Wrap(impl *authcore.Service) *Client

+ func (s *Client) AdminCountUsers(ctx context.Context, opts authkit.AdminUserListOptions) (int64, error)

+ func (s *Client) AdminGetUser(ctx context.Context, id string) (*authkit.AdminUser, error)

+ func (s *Client) AdminListUserSessions(ctx context.Context, userID string) ([]authkit.Session, error)

+ func (s *Client) AdminListUsers(ctx context.Context, opts authkit.AdminUserListOptions) (*authkit.AdminListUsersResult, error)

+ func (s *Client) AdminRevokeUserSessions(ctx context.Context, userID string) error

+ func (s *Client) AdminSetPassword(ctx context.Context, userID, new string) error

+ func (s *Client) ApplyBootstrapManifest(ctx context.Context, manifest authkit.BootstrapManifest, ...) (authkit.BootstrapManifestResult, error)

+ func (s *Client) ApplyBootstrapManifestFile(ctx context.Context, path string, opts authkit.BootstrapReconcileOptions) (authkit.BootstrapManifestResult, error)

+ func (s *Client) AssignGroupRole(ctx context.Context, ...) error

+ func (s *Client) AssignGroupRoleAs(ctx context.Context, ...) error

+ func (s *Client) AssignRoleBySlug(ctx context.Context, userID, slug string) error

+ func (s *Client) AssignRoleBySlugAs(ctx context.Context, actorUserID, userID, slug string) error

+ func (s *Client) BanUser(ctx context.Context, userID string, reason *string, until *time.Time, ...) error

+ func (s *Client) Can(ctx context.Context, ...) (bool, error)

+ func (s *Client) ChangePassword(ctx context.Context, userID, current, new string, keepSessionID *string) error

+ func (s *Client) CheckSMSHealth(ctx context.Context) error

+ func (s *Client) CleanupExpiredAuthState(ctx context.Context) error

+ func (s *Client) ClearPasswordlessCodeAttempts(ctx context.Context, identifier string)

+ func (s *Client) ConfirmPasswordlessCode(ctx context.Context, identifier, code string) (authkit.PasswordlessConfirmResult, error)

+ func (s *Client) ConfirmPasswordlessToken(ctx context.Context, token string) (authkit.PasswordlessConfirmResult, error)

+ func (s *Client) CreateGroupInviteLink(ctx context.Context, req authkit.CreateGroupInviteLinkRequest) (authkit.GroupInviteLinkCreated, error)

+ func (s *Client) CreatePermissionGroup(ctx context.Context, req authkit.CreatePermissionGroupRequest) (string, error)

+ func (s *Client) CreateUser(ctx context.Context, email, username string) (*authkit.User, error)

+ func (s *Client) DeleteRemoteApplication(ctx context.Context, issuer string) error

+ func (s *Client) EnsureRootGroup(ctx context.Context) (string, error)

+ func (s *Client) EntitlementsProvider() EntitlementsProvider

+ func (s *Client) EphemeralMode() EphemeralMode

+ func (s *Client) ExchangeRefreshToken(ctx context.Context, refreshToken string, ua string, ip net.IP) (string, time.Time, string, error)

+ func (s *Client) ExternalInvitesEnabled() bool

+ func (s *Client) GetEmailByUserID(ctx context.Context, id string) (string, error)

+ func (s *Client) GetProviderUsername(ctx context.Context, userID, provider string) (string, error)

+ func (s *Client) GetRemoteApplication(ctx context.Context, issuer string) (*authkit.RemoteApplication, error)

+ func (s *Client) GetUserByEmail(ctx context.Context, email string) (*authkit.User, error)

+ func (s *Client) GetUserByPhone(ctx context.Context, phone string) (*authkit.User, error)

+ func (s *Client) GetUserBySolanaAddress(ctx context.Context, address string) (*authkit.User, error)

+ func (s *Client) GetUserByUsername(ctx context.Context, username string) (*authkit.User, error)

+ func (s *Client) GetUserMetadata(ctx context.Context, userID string) (map[string]any, error)

+ func (s *Client) HardDeleteUser(ctx context.Context, userID string) error

+ func (s *Client) HasEmailSender() bool

+ func (s *Client) HasSMSSender() bool

+ func (s *Client) ImportUsers(ctx context.Context, inputs []authkit.ImportUserInput) (authkit.ImportUsersResult, error)

+ func (s *Client) IsUserAllowed(ctx context.Context, userID string) (bool, error)

+ func (s *Client) IssueAccessToken(ctx context.Context, userID, email string, extra map[string]any) (string, time.Time, error)

+ func (s *Client) JWKS() jwtkit.JWKS

+ func (s *Client) Keyfunc() func(token *jwt.Token) (any, error)

+ func (s *Client) LinkProvider(ctx context.Context, userID, provider, subject string, email *string) error

+ func (s *Client) LinkProviderByIssuer(ctx context.Context, userID, issuer, providerSlug, subject string, ...) error

+ func (s *Client) ListAPIKeys(ctx context.Context, persona, instanceSlug string) ([]authkit.APIKey, error)

+ func (s *Client) ListEffectivePermissions(ctx context.Context, subjectID, subjectKind, persona, instanceSlug string) ([]string, error)

+ func (s *Client) ListEntitlements(ctx context.Context, userID string) []string

+ func (s *Client) ListGroupInviteLinks(ctx context.Context, persona, instanceSlug string) ([]authkit.GroupInviteLink, error)

+ func (s *Client) ListGroupMembers(ctx context.Context, persona, instanceSlug string) ([]authkit.GroupMember, error)

+ func (s *Client) ListRemoteApplications(ctx context.Context, activeOnly bool) ([]authkit.RemoteApplication, error)

+ func (s *Client) ListRoleSlugsByUser(ctx context.Context, userID string) []string

+ func (s *Client) ListRoleSlugsByUserErr(ctx context.Context, userID string) ([]string, error)

+ func (s *Client) ListSubjectGroups(ctx context.Context, subjectID, subjectKind string) ([]authkit.SubjectGroupMembership, error)

+ func (s *Client) ListUserSessions(ctx context.Context, userID string) ([]authkit.Session, error)

+ func (s *Client) ListUsersDeletedBefore(ctx context.Context, cutoff time.Time, limit int) ([]string, error)

+ func (s *Client) MintAPIKey(ctx context.Context, persona, instanceSlug, name, role, createdBy string, ...) (authkit.APIKey, string, error)

+ func (s *Client) MintAPIKeyWithOptions(ctx context.Context, persona, instanceSlug string, ...) (authkit.APIKey, string, error)

+ func (s *Client) MintCustomJWT(ctx context.Context, opts authkit.CustomJWTMintOptions) (string, error)

+ func (s *Client) MintDelegatedAccessToken(ctx context.Context, p authkit.DelegatedAccessParams) (string, error)

+ func (s *Client) MintRemoteApplicationAccessToken(ctx context.Context, p authkit.RemoteApplicationAccessParams) (string, error)

+ func (s *Client) MintServiceJWT(ctx context.Context, opts authkit.ServiceJWTMintOptions) (string, authkit.ServiceJWTClaims, error)

+ func (s *Client) Options() Options

+ func (s *Client) PatchUserMetadata(ctx context.Context, userID string, patch map[string]any) error

+ func (s *Client) Postgres() *pgxpool.Pool

+ func (s *Client) PublicKeysByKID() map[string]crypto.PublicKey

+ func (s *Client) RecordFailedPasswordlessCode(ctx context.Context, identifier string)

+ func (s *Client) RedeemGroupInviteLink(ctx context.Context, code, redeemerUserID string) (authkit.RedeemGroupInviteLinkResult, error)

+ func (s *Client) RemoveGroupSubjectAs(ctx context.Context, ...) error

+ func (s *Client) RemoveRoleBySlug(ctx context.Context, userID, slug string) error

+ func (s *Client) RemoveRoleBySlugAs(ctx context.Context, actorUserID, userID, slug string) error

+ func (s *Client) ResolveAPIKey(ctx context.Context, keyID, secret string) (string, []string, error)

+ func (s *Client) ResolveAPIKeyWithResources(ctx context.Context, keyID, secret string) (authkit.ResolvedAPIKey, error)

+ func (s *Client) ResolveGroupIDForSlug(ctx context.Context, persona, instanceSlug string) (string, error)

+ func (s *Client) ResolveRemoteAppAttributeDef(ctx context.Context, appID, key string, version int32) (*authkit.RemoteAppAttributeDef, error)

+ func (s *Client) ResolveRemoteApplicationAuthority(ctx context.Context, appID string) ([]string, error)

+ func (s *Client) RestoreUser(ctx context.Context, id string) error

+ func (s *Client) RevokeAPIKey(ctx context.Context, persona, instanceSlug, tokenID string) (bool, error)

+ func (s *Client) RevokeAllSessions(ctx context.Context, userID string, keepSessionID *string) error

+ func (s *Client) RevokeGroupInviteLink(ctx context.Context, persona, instanceSlug, linkID string) error

+ func (s *Client) SMSAvailable() bool

+ func (s *Client) Schema() string

+ func (s *Client) SeedPermissionGroupContainment(ctx context.Context) error

+ func (s *Client) SetEmailVerified(ctx context.Context, id string, v bool) error

+ func (s *Client) SetEntitlementsProvider(p EntitlementsProvider)

+ func (s *Client) SoftDeleteUser(ctx context.Context, id string) error

+ func (s *Client) StartPasswordless(ctx context.Context, req authkit.PasswordlessStartRequest) (authkit.PasswordlessStartResult, error)

+ func (s *Client) TimeUntilUsernameRenameAvailable(ctx context.Context, userID string, now time.Time) (int64, error)

+ func (s *Client) UnassignGroupRoleAs(ctx context.Context, ...) error

+ func (s *Client) UnbanUser(ctx context.Context, userID string) error

+ func (s *Client) UnlinkProvider(ctx context.Context, userID, provider string) error

+ func (s *Client) UpdateBiography(ctx context.Context, id string, bio *string) error

+ func (s *Client) UpdateEmail(ctx context.Context, id, email string) error

+ func (s *Client) UpdateImportedUser(ctx context.Context, userID string, input authkit.ImportUserInput) (*authkit.User, error)

+ func (s *Client) UpdateUsername(ctx context.Context, id, username string) error

+ func (s *Client) UpsertPasswordHash(ctx context.Context, userID, hash, algo string, params []byte) error

+ func (s *Client) UpsertRemoteApplication(ctx context.Context, in authkit.RemoteApplication) (*authkit.RemoteApplication, error)

+ func (s *Client) UpsertRoleBySlug(ctx context.Context, name, slug string, description *string) error

+ func (s *Client) ValidateVerificationConfiguration() error

+ func (s *Client) VerifyUserPassword(ctx context.Context, userID, pass string) bool

+ type Config = authcore.Config

+ type CustomRoleResolver = authcore.CustomRoleResolver

+ type EmailSender = authcore.EmailSender

+ type EntitlementFilterProvider = authcore.EntitlementFilterProvider

+ type EntitlementsProvider = authcore.EntitlementsProvider

+ type EphemeralMode = authcore.EphemeralMode

+ type EphemeralStore = authcore.EphemeralStore

+ type FrontendConfig = authcore.FrontendConfig

+ type GeneratedRoute = authcore.GeneratedRoute

+ type GroupAssignment = authcore.GroupAssignment

+ type GroupInviteEmailSender = authcore.GroupInviteEmailSender

+ type GroupInviteMessage = authcore.GroupInviteMessage

+ type GroupSchema = authcore.GroupSchema

+ type IdentityConfig = authcore.IdentityConfig

+ type KeysConfig = authcore.KeysConfig

+ type Keyset = authcore.Keyset

+ type ManagementProfile = authcore.ManagementProfile

+ type Option = authcore.Option

+ type Options = authcore.Options

+ type Passkey = authcore.Passkey

+ type PasskeyConfig = authcore.PasskeyConfig

+ type PasskeyLoginResult = authcore.PasskeyLoginResult

+ type PendingChangeKind = authcore.PendingChangeKind

+ type PendingRegistration = authcore.PendingRegistration

+ type PermissionDef = authcore.PermissionDef

+ type PermissionGroupStore = authcore.PermissionGroupStore

+ type PersonaDef = authcore.PersonaDef

+ type RBACConfig = authcore.RBACConfig

+ type RegistrationConfig = authcore.RegistrationConfig

+ type RegistrationMode = authcore.RegistrationMode

+ type RegistrationVerificationPolicy = authcore.RegistrationVerificationPolicy

+ type RemovedMFARoleAssignment = authcore.RemovedMFARoleAssignment

+ type RoleDef = authcore.RoleDef

+ type SMSHealthChecker = authcore.SMSHealthChecker

+ type SMSSender = authcore.SMSSender

+ type SessionEventType = authcore.SessionEventType

+ type SessionFreshness = authcore.SessionFreshness

+ type SessionRevokeReason = authcore.SessionRevokeReason

+ type SolanaConfig = authcore.SolanaConfig

+ type SolanaLinkedAccount = authcore.SolanaLinkedAccount

+ type SolanaSNSResolver = authcore.SolanaSNSResolver

+ type TokenConfig = authcore.TokenConfig

+ type TwoFactorConfig = authcore.TwoFactorConfig

+ type TwoFactorFactor = authcore.TwoFactorFactor

+ type TwoFactorSettings = authcore.TwoFactorSettings

+ type ValidationError = authcore.ValidationError

+ type VerificationMessage = authcore.VerificationMessage

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL