auth

Jul 8, 2026

Changes in this version

+ func LoadOrGenerateServerKey(path string) (ed25519.PrivateKey, error)

+ func RequireAuth(pubKey ed25519.PublicKey, next http.HandlerFunc) http.HandlerFunc

+ func RequireAuthHandler(pubKey ed25519.PublicKey, next http.Handler) http.Handler

+ func RequireCapability(pubKey ed25519.PublicKey, perms config.PermissionsConfig, capability string, ...) http.HandlerFunc

+ func SignToken(key ed25519.PrivateKey, claims Claims) (string, error)

+ func WithUser(ctx context.Context, u UserIdentity) context.Context

+ type AuthorizedKeys struct

+ func LoadAuthorizedKeys(path string) (*AuthorizedKeys, error)

+ func LoadOrCreateAuthorizedKeys(path string) (*AuthorizedKeys, error)

+ func (ak *AuthorizedKeys) Len() int

+ func (ak *AuthorizedKeys) Lookup(pubKey ssh.PublicKey) (UserIdentity, bool)

+ type Claims struct

+ Exp int64

+ Iat int64

+ Sub string

+ func VerifyToken(pubKey ed25519.PublicKey, tokenStr string) (Claims, error)

+ type NonceStore struct

+ func NewNonceStore(ttl time.Duration) *NonceStore

+ func (ns *NonceStore) Generate() (string, error)

+ func (ns *NonceStore) Validate(nonce string) bool

+ type SSHKey struct

+ Comment string

+ Path string

+ Signer ssh.Signer

+ func DiscoverSSHKeys() ([]SSHKey, error)

+ func FindKeyByType(keys []SSHKey, keyType string) *SSHKey

+ func PreferEd25519(keys []SSHKey) *SSHKey

+ func (k SSHKey) Label() string

+ type UserIdentity struct

+ Email string

+ Name string

+ Raw string

+ func ParseIdentity(raw string) UserIdentity

+ func UserFromContext(ctx context.Context) (UserIdentity, bool)