authentication

package

v0.22.0 Latest Latest Go to latest Published: May 25, 2026 License: Apache-2.0 Imports: 28 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/superplanehq/superplane

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func ClearAccountCookie(w http.ResponseWriter, r *http.Request)
func GetOrganizationIdFromMetadata(ctx context.Context) (string, bool)
func GetScopedTokenScopesFromMetadata(ctx context.Context) ([]string, bool)
func GetUserIdFromMetadata(ctx context.Context) (string, bool)
func SetAccountCookie(w http.ResponseWriter, r *http.Request, token string, ttl time.Duration)
func SetUserIdInMetadata(ctx context.Context, userId string) context.Context
type Handler
- func NewHandler(jwtSigner *jwt.Signer, encryptor crypto.Encryptor, ...) *Handler
type ProviderConfig

Constants ¶

View Source

const SignupDisabledError = "signup is currently disabled"

View Source

const TokenScopesMetadataKey = "x-token-scopes"

Variables ¶

This section is empty.

Functions ¶

func ClearAccountCookie ¶

func ClearAccountCookie(w http.ResponseWriter, r *http.Request)

func GetOrganizationIdFromMetadata ¶

func GetOrganizationIdFromMetadata(ctx context.Context) (string, bool)

func GetScopedTokenScopesFromMetadata ¶ added in v0.14.0

func GetScopedTokenScopesFromMetadata(ctx context.Context) ([]string, bool)

func GetUserIdFromMetadata ¶

func GetUserIdFromMetadata(ctx context.Context) (string, bool)

func SetAccountCookie ¶ added in v0.21.0

func SetAccountCookie(w http.ResponseWriter, r *http.Request, token string, ttl time.Duration)

SetAccountCookie writes the account_token cookie with the same flags used by every login path. Centralized so callers (login, signup, magic code, change-password reissue) cannot drift on cookie attributes.

func SetUserIdInMetadata ¶

func SetUserIdInMetadata(ctx context.Context, userId string) context.Context

Types ¶

type Handler ¶

type Handler struct {
	// contains filtered or unexported fields
}

func NewHandler ¶

func NewHandler(jwtSigner *jwt.Signer, encryptor crypto.Encryptor, authService authorization.Authorization, appEnv string, templateDir string, blockSignup bool, passwordLoginEnabled bool, magicCodeEnabled bool) *Handler

func (*Handler) FindOrCreateAccountForProvider ¶

func (a *Handler) FindOrCreateAccountForProvider(gothUser goth.User) (*models.Account, error)

func (*Handler) InitializeProviders ¶

func (a *Handler) InitializeProviders(providers map[string]ProviderConfig)

func (*Handler) PasswordLoginEnabled ¶ added in v0.21.0

func (a *Handler) PasswordLoginEnabled() bool

PasswordLoginEnabled reports whether email/password authentication is currently enabled for this installation. Used by handlers outside this package (e.g. the change-password endpoint) that should refuse work when the feature is disabled.

func (*Handler) RegisterRoutes ¶

func (a *Handler) RegisterRoutes(router *mux.Router)

type ProviderConfig ¶

type ProviderConfig struct {
	Key         string
	Secret      string
	CallbackURL string
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL