Documentation
¶
Index ¶
Constants ¶
View Source
const ( CavConfineUser = macaroon.CavAuthConfineUser CavConfineOrganization = macaroon.CavAuthConfineOrganization CavConfineGoogleHD = macaroon.CavAuthConfineGoogleHD CavConfineGitHubOrg = macaroon.CavAuthConfineGitHubOrg CavMaxValidity = macaroon.CavAuthMaxValidity )
Variables ¶
This section is empty.
Functions ¶
Types ¶
type ConfineGitHubOrg ¶
type ConfineGitHubOrg uint64
Implements macaroon.Caveat and error. Requires that the user is authenticated to GitHub with an account that has access the specified org.
func RequireGitHubOrg ¶
func RequireGitHubOrg(id uint64) *ConfineGitHubOrg
func (*ConfineGitHubOrg) CaveatType ¶
func (c *ConfineGitHubOrg) CaveatType() macaroon.CaveatType
func (*ConfineGitHubOrg) Name ¶
func (c *ConfineGitHubOrg) Name() string
type ConfineGoogleHD ¶
type ConfineGoogleHD string
Implements macaroon.Caveat and error. Requires that the user is authenticated to Google with an account in the specified HD.
func RequireGoogleHD ¶
func RequireGoogleHD(hd string) *ConfineGoogleHD
func (*ConfineGoogleHD) CaveatType ¶
func (c *ConfineGoogleHD) CaveatType() macaroon.CaveatType
func (*ConfineGoogleHD) Name ¶
func (c *ConfineGoogleHD) Name() string
type ConfineOrganization ¶
type ConfineOrganization struct {
ID uint64 `json:"id"`
}
ConfineOrganization is a requirement placed on 3P caveats, requiring that the authenticated used be associated with OrgID. It has no meaning in a 1P setting.
func RequireOrganization ¶
func RequireOrganization(id uint64) *ConfineOrganization
func (*ConfineOrganization) CaveatType ¶
func (c *ConfineOrganization) CaveatType() macaroon.CaveatType
func (*ConfineOrganization) Name ¶
func (c *ConfineOrganization) Name() string
type ConfineUser ¶
type ConfineUser struct {
ID uint64 `json:"id"`
}
ConfineUser is a caveat limiting this token to a specific user ID.
func RequireUser ¶
func RequireUser(id uint64) *ConfineUser
func (*ConfineUser) CaveatType ¶
func (c *ConfineUser) CaveatType() macaroon.CaveatType
func (*ConfineUser) Name ¶
func (c *ConfineUser) Name() string
type DischargeRequest ¶
type DischargeRequest struct {
User *UserAuth
Organization *OrganizationAuth
Google *GoogleAuth
GitHub *GitHubAuth
Expiry time.Time
}
implements macaroon.Access
func (*DischargeRequest) Now ¶
func (a *DischargeRequest) Now() time.Time
func (*DischargeRequest) Validate ¶
func (a *DischargeRequest) Validate() error
type GitHubAuth ¶
type GitHubAuth struct {
OrgIDs []uint64
}
type GoogleAuth ¶
type GoogleAuth struct {
HD string
}
type MaxValidity ¶
type MaxValidity uint64
Implements macaroon.Caveat. Limits the validity window length (seconds) of discharges issued by 3ps.
func (*MaxValidity) CaveatType ¶
func (c *MaxValidity) CaveatType() macaroon.CaveatType
func (*MaxValidity) Name ¶
func (c *MaxValidity) Name() string
type OrganizationAuth ¶
type OrganizationAuth struct {
IDs []uint64
}
Source Files
Click to show internal directories.
Click to hide internal directories.