auth

Jul 23, 2026

Changes in this version

type AgentBond

+ func EvictBonds(bonds []AgentBond, keep uint16) []AgentBond

May 18, 2026

Changes in this version

+ type AgentBond struct

+ Device uuid.UUID

+ Hash [32]byte

+ UpdatedAt time.Time

+ type AuthError struct

+ Err error

+ RedirectPath string

+ StatusCode int

+ type BondingAuthProvider interface

+ Cache func() *otter.Cache[string, []AgentBond]

+ MaxBondsPerSubject func() uint16

+ MaxDevices func() uint16

+ MinDeviceEvictionInterval func() time.Duration

+ type BondingData struct

+ Bonds []AgentBond

+ Device uuid.UUID

+ Hash [32]byte

+ Key string

+ func (b *BondingData) Evict(keep uint16)

+ type BondingEvictionProvider interface

+ Evict func(excess uint16) error

+ type ContextKey string

+ const BondingRecordContextKey

+ const ContextPathKey

+ type JWKSBondingAuthProvider struct

+ func NewJWKSBondingAuthProvider(ctx context.Context, client *http.Client, jwksUrl string, bondingSecret []byte, ...) (*JWKSBondingAuthProvider, error)

+ func (b JWKSBondingAuthProvider) Cache() *otter.Cache[string, []AgentBond]

+ func (b JWKSBondingAuthProvider) MaxBondsPerSubject() uint16

+ func (b JWKSBondingAuthProvider) MaxDevices() uint16

+ func (b JWKSBondingAuthProvider) MinDeviceEvictionInterval() time.Duration

+ func (j *JWKSBondingAuthProvider) Validate(w http.ResponseWriter, r *http.Request, token string) (*http.Request, *AuthError)

+ type JWTBondingAuthProvider struct

+ func NewJWTBondingAuthProvider(sharedSecret []byte, bondingSecret []byte, defaultMaxDevices uint16, ...) (*JWTBondingAuthProvider, error)

+ func (b JWTBondingAuthProvider) Cache() *otter.Cache[string, []AgentBond]

+ func (b JWTBondingAuthProvider) MaxBondsPerSubject() uint16

+ func (b JWTBondingAuthProvider) MaxDevices() uint16

+ func (b JWTBondingAuthProvider) MinDeviceEvictionInterval() time.Duration

+ func (j *JWTBondingAuthProvider) Validate(w http.ResponseWriter, r *http.Request, token string) (*http.Request, *AuthError)

Nov 3, 2025

Changes in this version

+ type AuthProvider interface

+ Validate func(token string) (string, int, error)

+ type B64EncodedAuthProvider struct

+ func NewB64EncodedAuthProvider() *B64EncodedAuthProvider

+ func (n *B64EncodedAuthProvider) Validate(token string) (string, int, error)

+ type JWKSAuthProvider struct

+ func NewJWKSAuthProvider(context context.Context, client *http.Client, jwksUrl string) (*JWKSAuthProvider, error)

+ func (j *JWKSAuthProvider) Validate(token string) (string, int, error)

+ type JWTAuthProvider struct

+ func NewJWTAuthProvider(sharedSecret []byte) (*JWTAuthProvider, error)

+ func (j *JWTAuthProvider) Validate(token string) (string, int, error)