auth

Jan 2, 2026

Changes in this version

+ var ErrAlreadyConfigured = errors.New("passphrase already configured")

+ var ErrInvalidPassword = errors.New("invalid passphrase")

+ var ErrNotConfigured = errors.New("passphrase not configured")

+ func Decrypt(ciphertext []byte, key []byte) ([]byte, error)

+ func DeriveKey(passphrase string, salt []byte) []byte

+ func Encrypt(plaintext []byte, key []byte) ([]byte, error)

+ func GenerateSalt() ([]byte, error)

+ func HashPassphrase(passphrase string, salt []byte) string

+ func IsAuthenticated(ctx context.Context) bool

+ func VerifyPassphrase(passphrase string, salt []byte, storedHash string) bool

+ type Service struct

+ func New(db *database.DB, cfg *config.Config) *Service

+ func (s *Service) CheckAuthentication(r *http.Request) bool

+ func (s *Service) DecryptCredentials(ciphertext []byte) ([]byte, error)

+ func (s *Service) EncryptCredentials(plaintext []byte) ([]byte, error)

+ func (s *Service) IsConfigured() bool

+ func (s *Service) Login(w http.ResponseWriter, passphrase string) error

+ func (s *Service) Logout(w http.ResponseWriter)

+ func (s *Service) Middleware(next http.Handler) http.Handler

+ func (s *Service) OnCredentialsReady(callback func())

+ func (s *Service) Setup(passphrase string) error

+ func (s *Service) Validate(passphrase string) bool