user

Aug 24, 2026

Changes in this version

+ type Subject struct

+ Avatar string

+ Email string

+ ID SubjectID

+ Name string

+ func (s *Subject) DecodeFields(r model.FieldReader)

+ func (s Subject) EncodeFields(w model.FieldWriter)

+ func (s Subject) IsNil() bool

+ type SubjectID string

Aug 23, 2026

Changes in this version

+ const PathOAuthPrefix

+ func PathOAuthCallback(provider string) string

+ func PathOAuthStart(provider string) string

Jul 31, 2026

Changes in this version

type IdentityStore

+ UpdateUserAvatar func(userID, avatar string) error

type OAuthUserInfo

+ Avatar string

type ProfileDTO

+ RoleNames []string

+ func (p ProfileDTO) Shell() ShellProfile

+ type ShellProfile struct

+ Avatar string

+ Name string

+ Roles []string

+ func (p ShellProfile) UserAvatar() string

+ func (p ShellProfile) UserName() string

+ func (p ShellProfile) UserRoles() []string

type User

+ Avatar string

Jul 22, 2026

Changes in this version

+ func ClientIP(ctx router.Context, trustProxy bool) string

+ type IdentityStore interface

+ CreateUser func(email, name, phone string) (User, error)

+ IdentityByProvider func(provider, providerID string) (Identity, error)

+ IdentityFor func(userID, provider string) (Identity, error)

+ UpsertIdentity func(userID, provider, providerID, email string) error

+ UserByEmail func(email string) (User, error)

+ UserByID func(id string) (User, error)

+ type SecurityNotifier interface

+ Notify func(e SecurityEvent)

+ type SessionIssuer interface

+ IssueSession func(ctx router.Context, userID string) error

+ type SessionRepo interface

+ CreateSession func(userID, ip, userAgent string) (Session, error)

+ DeleteSession func(id string) error

+ GetSession func(id string) (Session, error)

+ type SessionStrategy interface

+ Identify func(ctx router.Context) (userID string, err error)

+ Issue func(ctx router.Context, userID string) error

+ Revoke func(ctx router.Context) error

+ type StateStore interface

+ ConsumeState func(state, provider string) error

+ CreateState func(provider string) (state string, err error)

+ type TrustedIPStore interface

+ IsTrustedIP func(userID, ip string) bool

Jul 20, 2026

Changes in this version

+ const OpDeleteUser

+ const OpListUsers

+ const OpMe

+ const OpUpsertUser

+ const TopicSecurity

+ func NewView(caller router.Caller) view.Presenter

+ type Authenticator interface

+ Mount func(r router.Router, module any)

+ Name func() string

type Config

+ Authenticators []Authenticator

+ Events events.Publisher

+ IDs model.IDGenerator

+ type ModuleContext interface

+ BeginOAuth func(providerName string) (string, error)

+ CompleteOAuth func(providerName string, ctx router.Context, ip, ua string) (User, bool, error)

+ Config func() Config

+ CreateSession func(userID, ip, userAgent string) (Session, error)

+ DB func() *orm.DB

+ DeleteSession func(id string) error

+ ExtractClientIP func(ctx router.Context) string

+ GetSession func(id string) (Session, error)

+ IDs func() model.IDGenerator

+ IssueToken func(userID string, ttl int) (string, error)

+ Login func(email, password string) (User, error)

+ Notify func(e SecurityEvent)

+ RegisterProvider func(p OAuthProvider)

type SecurityEvent

+ func (e *SecurityEvent) EncodeFields(w model.FieldWriter)

+ func (e *SecurityEvent) IsNil() bool

type User

+ func (m *User) Item() view.Item

Jul 14, 2026

Changes in this version

+ type OAuthConfig struct

+ AuthURL string

+ ClientID string

+ ClientSecret string

+ RedirectURL string

+ Scopes []string

+ TokenURL string

+ type OAuthToken struct

+ AccessToken string

+ ExpiresIn int

+ TokenType string

+ func (t *OAuthToken) DecodeFields(r model.FieldReader)

+ func (t OAuthToken) IsNil() bool

type SecurityEventType

+ const EventRateLimited

Jul 14, 2026

Changes in this version

type Config

+ RateLimit func(remoteAddr string) error

type Identity

+ Id string

+ ProviderId string

+ UserId string

type LANIP

+ Id string

+ Ip string

+ UserId string

type Permission

+ Id string

type ProfileDTO

+ Id string

type Role

+ Id string

type RolePermission

+ PermissionId string

+ RoleId string

type SecurityEventType

+ const EventPermissionCorrupt

type Session

+ Id string

+ Ip string

+ UserId string

type User

+ Id string

type UserRole

+ RoleId string

+ UserId string

Jul 13, 2026

Changes in this version

+ const ActionAll

+ const PathAfterLogin

+ const PathLogin

+ const PathLogout

+ const ResourceAll

+ const RoleCodeAdmin

+ var IdentityModel = model.Definition

+ var LANIPModel = model.Definition

+ var LoginDataModel = model.Definition

+ var OAuthStateModel = model.Definition

+ var PasswordDataModel = model.Definition

+ var PermissionModel = model.Definition

+ var ProfileDataModel = model.Definition

+ var RegisterDataModel = model.Definition

+ var RoleModel = model.Definition

+ var RolePermissionModel = model.Definition

+ var SessionModel = model.Definition

+ var UserModel = model.Definition

+ var UserRoleModel = model.Definition

type Config

+ AfterLoginPath string

type Identity

+ func (m *Identity) Validate(action byte) error

type LANIP

+ func (m *LANIP) Validate(action byte) error

type LoginData

+ func (m *LoginData) Validate(action byte) error

type OAuthState

+ func (m *OAuthState) Validate(action byte) error

type PasswordData

+ func (m *PasswordData) Validate(action byte) error

type Permission

+ func (m *Permission) Validate(action byte) error

type ProfileDTO

+ Permissions []string

type ProfileData

+ func (m *ProfileData) Validate(action byte) error

type RegisterData

+ func (m *RegisterData) Validate(action byte) error

type Role

+ func (m *Role) Validate(action byte) error

type RolePermission

+ func (m *RolePermission) Validate(action byte) error

type Session

+ func (m *Session) Validate(action byte) error

type User

+ func (m *User) Validate(action byte) error

type UserRole

+ func (m *UserRole) Validate(action byte) error

Jul 6, 2026

Changes in this version

type Identity

+ func (m *Identity) SchemaExt() []orm.FieldExt

type LANIP

+ func (m *LANIP) SchemaExt() []orm.FieldExt

+ type ProfileDTO struct

+ Avatar string

+ Email string

+ ID string

+ Locale string

+ Name string

+ Roles []string

+ func (p *ProfileDTO) DecodeFields(r model.FieldReader)

+ func (p ProfileDTO) EncodeFields(w model.FieldWriter)

+ func (p ProfileDTO) IsNil() bool

type RolePermission

+ func (m *RolePermission) SchemaExt() []orm.FieldExt

type Session

+ func (m *Session) SchemaExt() []orm.FieldExt

type UserRole

+ func (m *UserRole) SchemaExt() []orm.FieldExt

Jun 27, 2026

Changes in this version

type Identity

+ func (m *Identity) DecodeFields(r fmt.FieldReader)

+ func (m *Identity) EncodeFields(w fmt.FieldWriter)

+ func (m *Identity) IsNil() bool

+ func (m *Identity) ModelName() string

+ type IdentityList []*Identity

+ func (s *IdentityList) Append() fmt.Fielder

+ func (s *IdentityList) At(i int) fmt.Fielder

+ func (s *IdentityList) DecodeFields(_ fmt.FieldReader)

+ func (s *IdentityList) EncodeFields(_ fmt.FieldWriter)

+ func (s *IdentityList) IsNil() bool

+ func (s *IdentityList) Len() int

+ func (s *IdentityList) Pointers() []any

+ func (s *IdentityList) Schema() []fmt.Field

type LANIP

+ func (m *LANIP) DecodeFields(r fmt.FieldReader)

+ func (m *LANIP) EncodeFields(w fmt.FieldWriter)

+ func (m *LANIP) IsNil() bool

+ func (m *LANIP) ModelName() string

+ type LANIPList []*LANIP

+ func (s *LANIPList) Append() fmt.Fielder

+ func (s *LANIPList) At(i int) fmt.Fielder

+ func (s *LANIPList) DecodeFields(_ fmt.FieldReader)

+ func (s *LANIPList) EncodeFields(_ fmt.FieldWriter)

+ func (s *LANIPList) IsNil() bool

+ func (s *LANIPList) Len() int

+ func (s *LANIPList) Pointers() []any

+ func (s *LANIPList) Schema() []fmt.Field

type LoginData

+ func (m *LoginData) DecodeFields(r fmt.FieldReader)

+ func (m *LoginData) EncodeFields(w fmt.FieldWriter)

+ func (m *LoginData) IsNil() bool

+ func (m *LoginData) ModelName() string

+ type LoginDataList []*LoginData

+ func (s *LoginDataList) Append() fmt.Fielder

+ func (s *LoginDataList) At(i int) fmt.Fielder

+ func (s *LoginDataList) DecodeFields(_ fmt.FieldReader)

+ func (s *LoginDataList) EncodeFields(_ fmt.FieldWriter)

+ func (s *LoginDataList) IsNil() bool

+ func (s *LoginDataList) Len() int

+ func (s *LoginDataList) Pointers() []any

+ func (s *LoginDataList) Schema() []fmt.Field

type OAuthState

+ func (m *OAuthState) DecodeFields(r fmt.FieldReader)

+ func (m *OAuthState) EncodeFields(w fmt.FieldWriter)

+ func (m *OAuthState) IsNil() bool

+ func (m *OAuthState) ModelName() string

+ type OAuthStateList []*OAuthState

+ func (s *OAuthStateList) Append() fmt.Fielder

+ func (s *OAuthStateList) At(i int) fmt.Fielder

+ func (s *OAuthStateList) DecodeFields(_ fmt.FieldReader)

+ func (s *OAuthStateList) EncodeFields(_ fmt.FieldWriter)

+ func (s *OAuthStateList) IsNil() bool

+ func (s *OAuthStateList) Len() int

+ func (s *OAuthStateList) Pointers() []any

+ func (s *OAuthStateList) Schema() []fmt.Field

type PasswordData

+ func (m *PasswordData) DecodeFields(r fmt.FieldReader)

+ func (m *PasswordData) EncodeFields(w fmt.FieldWriter)

+ func (m *PasswordData) IsNil() bool

+ func (m *PasswordData) ModelName() string

+ type PasswordDataList []*PasswordData

+ func (s *PasswordDataList) Append() fmt.Fielder

+ func (s *PasswordDataList) At(i int) fmt.Fielder

+ func (s *PasswordDataList) DecodeFields(_ fmt.FieldReader)

+ func (s *PasswordDataList) EncodeFields(_ fmt.FieldWriter)

+ func (s *PasswordDataList) IsNil() bool

+ func (s *PasswordDataList) Len() int

+ func (s *PasswordDataList) Pointers() []any

+ func (s *PasswordDataList) Schema() []fmt.Field

type Permission

+ func (m *Permission) DecodeFields(r fmt.FieldReader)

+ func (m *Permission) EncodeFields(w fmt.FieldWriter)

+ func (m *Permission) IsNil() bool

+ func (m *Permission) ModelName() string

+ type PermissionList []*Permission

+ func (s *PermissionList) Append() fmt.Fielder

+ func (s *PermissionList) At(i int) fmt.Fielder

+ func (s *PermissionList) DecodeFields(_ fmt.FieldReader)

+ func (s *PermissionList) EncodeFields(_ fmt.FieldWriter)

+ func (s *PermissionList) IsNil() bool

+ func (s *PermissionList) Len() int

+ func (s *PermissionList) Pointers() []any

+ func (s *PermissionList) Schema() []fmt.Field

type ProfileData

+ func (m *ProfileData) DecodeFields(r fmt.FieldReader)

+ func (m *ProfileData) EncodeFields(w fmt.FieldWriter)

+ func (m *ProfileData) IsNil() bool

+ func (m *ProfileData) ModelName() string

+ type ProfileDataList []*ProfileData

+ func (s *ProfileDataList) Append() fmt.Fielder

+ func (s *ProfileDataList) At(i int) fmt.Fielder

+ func (s *ProfileDataList) DecodeFields(_ fmt.FieldReader)

+ func (s *ProfileDataList) EncodeFields(_ fmt.FieldWriter)

+ func (s *ProfileDataList) IsNil() bool

+ func (s *ProfileDataList) Len() int

+ func (s *ProfileDataList) Pointers() []any

+ func (s *ProfileDataList) Schema() []fmt.Field

type RegisterData

+ func (m *RegisterData) DecodeFields(r fmt.FieldReader)

+ func (m *RegisterData) EncodeFields(w fmt.FieldWriter)

+ func (m *RegisterData) IsNil() bool

+ func (m *RegisterData) ModelName() string

+ type RegisterDataList []*RegisterData

+ func (s *RegisterDataList) Append() fmt.Fielder

+ func (s *RegisterDataList) At(i int) fmt.Fielder

+ func (s *RegisterDataList) DecodeFields(_ fmt.FieldReader)

+ func (s *RegisterDataList) EncodeFields(_ fmt.FieldWriter)

+ func (s *RegisterDataList) IsNil() bool

+ func (s *RegisterDataList) Len() int

+ func (s *RegisterDataList) Pointers() []any

+ func (s *RegisterDataList) Schema() []fmt.Field

type Role

+ func (m *Role) DecodeFields(r fmt.FieldReader)

+ func (m *Role) EncodeFields(w fmt.FieldWriter)

+ func (m *Role) IsNil() bool

+ func (m *Role) ModelName() string

+ type RoleList []*Role

+ func (s *RoleList) Append() fmt.Fielder

+ func (s *RoleList) At(i int) fmt.Fielder

+ func (s *RoleList) DecodeFields(_ fmt.FieldReader)

+ func (s *RoleList) EncodeFields(_ fmt.FieldWriter)

+ func (s *RoleList) IsNil() bool

+ func (s *RoleList) Len() int

+ func (s *RoleList) Pointers() []any

+ func (s *RoleList) Schema() []fmt.Field

type RolePermission

+ func (m *RolePermission) DecodeFields(r fmt.FieldReader)

+ func (m *RolePermission) EncodeFields(w fmt.FieldWriter)

+ func (m *RolePermission) IsNil() bool

+ func (m *RolePermission) ModelName() string

+ type RolePermissionList []*RolePermission

+ func (s *RolePermissionList) Append() fmt.Fielder

+ func (s *RolePermissionList) At(i int) fmt.Fielder

+ func (s *RolePermissionList) DecodeFields(_ fmt.FieldReader)

+ func (s *RolePermissionList) EncodeFields(_ fmt.FieldWriter)

+ func (s *RolePermissionList) IsNil() bool

+ func (s *RolePermissionList) Len() int

+ func (s *RolePermissionList) Pointers() []any

+ func (s *RolePermissionList) Schema() []fmt.Field

type Session

+ func (m *Session) DecodeFields(r fmt.FieldReader)

+ func (m *Session) EncodeFields(w fmt.FieldWriter)

+ func (m *Session) IsNil() bool

+ func (m *Session) ModelName() string

+ type SessionList []*Session

+ func (s *SessionList) Append() fmt.Fielder

+ func (s *SessionList) At(i int) fmt.Fielder

+ func (s *SessionList) DecodeFields(_ fmt.FieldReader)

+ func (s *SessionList) EncodeFields(_ fmt.FieldWriter)

+ func (s *SessionList) IsNil() bool

+ func (s *SessionList) Len() int

+ func (s *SessionList) Pointers() []any

+ func (s *SessionList) Schema() []fmt.Field

type User

+ func (m *User) DecodeFields(r fmt.FieldReader)

+ func (m *User) EncodeFields(w fmt.FieldWriter)

+ func (m *User) IsNil() bool

+ func (m *User) ModelName() string

+ type UserList []*User

+ func (s *UserList) Append() fmt.Fielder

+ func (s *UserList) At(i int) fmt.Fielder

+ func (s *UserList) DecodeFields(_ fmt.FieldReader)

+ func (s *UserList) EncodeFields(_ fmt.FieldWriter)

+ func (s *UserList) IsNil() bool

+ func (s *UserList) Len() int

+ func (s *UserList) Pointers() []any

+ func (s *UserList) Schema() []fmt.Field

type UserRole

+ func (m *UserRole) DecodeFields(r fmt.FieldReader)

+ func (m *UserRole) EncodeFields(w fmt.FieldWriter)

+ func (m *UserRole) IsNil() bool

+ func (m *UserRole) ModelName() string

+ type UserRoleList []*UserRole

+ func (s *UserRoleList) Append() fmt.Fielder

+ func (s *UserRoleList) At(i int) fmt.Fielder

+ func (s *UserRoleList) DecodeFields(_ fmt.FieldReader)

+ func (s *UserRoleList) EncodeFields(_ fmt.FieldWriter)

+ func (s *UserRoleList) IsNil() bool

+ func (s *UserRoleList) Len() int

+ func (s *UserRoleList) Pointers() []any

+ func (s *UserRoleList) Schema() []fmt.Field

Mar 15, 2026

Changes in this version

+ var Identity_ = struct{ ... } — js/wasm

+ var LANIP_ = struct{ ... } — js/wasm

+ var OAuthState_ = struct{ ... } — js/wasm

+ var Permission_ = struct{ ... } — js/wasm

+ var RolePermission_ = struct{ ... } — js/wasm

+ var Role_ = struct{ ... } — js/wasm

+ var Session_ = struct{ ... } — js/wasm

+ var UserRole_ = struct{ ... } — js/wasm

+ var User_ = struct{ ... } — js/wasm

type Identity

+ func (m *Identity) FormName() string

type LANIP

+ func (m *LANIP) FormName() string

type LoginData

+ func (m *LoginData) Pointers() []any

+ func (m *LoginData) Schema() []fmt.Field

type OAuthState

+ func (m *OAuthState) FormName() string

type PasswordData

+ func (m *PasswordData) Pointers() []any

+ func (m *PasswordData) Schema() []fmt.Field

type Permission

+ func (m *Permission) FormName() string

type ProfileData

+ func (m *ProfileData) Pointers() []any

+ func (m *ProfileData) Schema() []fmt.Field

type RegisterData

+ func (m *RegisterData) Pointers() []any

+ func (m *RegisterData) Schema() []fmt.Field

type Role

+ func (m *Role) FormName() string

type RolePermission

+ func (m *RolePermission) FormName() string

type Session

+ func (m *Session) FormName() string

type User

+ func (m *User) FormName() string

type UserRole

+ func (m *UserRole) FormName() string

Mar 7, 2026

Changes in this version

type AuthMode

+ const AuthModeBearer

type Module — darwin/amd64, linux/amd64, windows/amd64

+ func (m *Module) CanExecute(ctx context.Context, resource string, action byte) bool

+ func (m *Module) GenerateAPIToken(userID string, ttl int) (string, error)

+ func (m *Module) InjectIdentity(ctx context.Context, r *http.Request) context.Context

Mar 7, 2026

Changes in this version

type Config

+ OnPasswordValidate func(password string) error

+ OnSecurityEvent func(SecurityEvent)

type Module — darwin/amd64, linux/amd64, windows/amd64

+ func (m *Module) PurgeSessionsByUser(userID string) error

+ func (m *Module) ReactivateUser(id string) error

+ func (m *Module) RotateSession(oldID, ip, userAgent string) (Session, error)

+ func (m *Module) SuspendUser(id string) error

+ type SecurityEvent struct

+ IP string

+ Provider string

+ Resource string

+ Timestamp int64

+ Type SecurityEventType

+ UserID string

+ type SecurityEventType uint8

+ const EventAccessDenied

+ const EventIPMismatch

+ const EventJWTTampered

+ const EventNonActiveAccess

+ const EventOAuthCrossProvider

+ const EventOAuthExpiredState

+ const EventOAuthReplay

+ const EventUnauthorizedAccess

Mar 5, 2026

Changes in this version

+ var Identity_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var LANIP_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var OAuthState_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var Permission_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var RolePermission_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var Role_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var Session_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var UserRole_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var User_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

Mar 5, 2026

Changes in this version

+ var ErrInvalidToken = fmt.Err("token", "invalid") — darwin/amd64, linux/amd64, windows/amd64

+ func GenerateJWT(secret []byte, userID string, ttl int) (string, error) — darwin/amd64, linux/amd64, windows/amd64

+ func ValidateJWT(secret []byte, token string) (string, error) — darwin/amd64, linux/amd64, windows/amd64

+ type AuthMode uint8

+ const AuthModeCookie

+ const AuthModeJWT

type Config

+ AuthMode AuthMode

+ CookieName string

+ JWTSecret []byte

+ TokenTTL int

+ type Module struct — js/wasm

Mar 5, 2026

Changes in this version

+ func UIModules() []any

+ type Module struct — darwin/amd64, linux/amd64, windows/amd64

+ func (m *Module) AccessCheck(resource string, action byte, data ...any) bool

+ func (m *Module) Add() []any

+ func (m *Module) AssignLANIP(userID, ip, label string) error

+ func (m *Module) AssignPermission(roleID, permissionID string) error

+ func (m *Module) AssignRole(userID, roleID string) error

+ func (m *Module) BeginOAuth(providerName string) (string, error)

+ func (m *Module) CompleteOAuth(providerName string, r *http.Request, ip, ua string) (User, bool, error)

+ func (m *Module) CreatePermission(id, name, resource string, action string) error

+ func (m *Module) CreateRole(id string, code string, name, description string) error

+ func (m *Module) CreateSession(userID, ip, userAgent string) (Session, error)

+ func (m *Module) DeletePermission(id string) error

+ func (m *Module) DeleteRole(id string) error

+ func (m *Module) DeleteSession(id string) error

+ func (m *Module) FromContext(ctx context.Context) (*User, bool)

+ func (m *Module) GetLANIPs(userID string) ([]LANIP, error)

+ func (m *Module) GetPermission(id string) (*Permission, error)

+ func (m *Module) GetRole(id string) (*Role, error)

+ func (m *Module) GetRoleByCode(code string) (*Role, error)

+ func (m *Module) GetSession(id string) (Session, error)

+ func (m *Module) GetUser(id string) (User, error)

+ func (m *Module) GetUserIdentities(userID string) ([]Identity, error)

+ func (m *Module) GetUserRoles(userID string) ([]Role, error)

+ func (m *Module) HasPermission(userID, resource string, action byte) (bool, error)

+ func (m *Module) Login(email, password string) (User, error)

+ func (m *Module) LoginLAN(rut string, r *http.Request) (User, error)

+ func (m *Module) Middleware(next http.Handler) http.Handler

+ func (m *Module) PurgeExpiredOAuthStates() error

+ func (m *Module) PurgeExpiredSessions() error

+ func (m *Module) Register(handlers ...RBACObject) error

+ func (m *Module) RegisterLAN(userID, rut string) error

+ func (m *Module) RegisterMCP(next http.Handler) http.Handler

+ func (m *Module) RevokeLANIP(userID, ip string) error

+ func (m *Module) RevokeRole(userID, roleID string) error

+ func (m *Module) SetLog(fn func(...any))

+ func (m *Module) SetPassword(userID, password string) error

+ func (m *Module) UIModules() []any

+ func (m *Module) UnlinkIdentity(userID, provider string) error

+ func (m *Module) UnregisterLAN(userID string) error

+ func (m *Module) VerifyPassword(userID, password string) error

Mar 2, 2026

Changes in this version

+ var IdentityMeta = struct{ ... }

+ var LANIPMeta = struct{ ... }

+ var OAuthStateMeta = struct{ ... }

+ var PermissionMeta = struct{ ... }

+ var RoleMeta = struct{ ... }

+ var RolePermissionMeta = struct{ ... }

+ var SessionMeta = struct{ ... }

+ var UserMeta = struct{ ... }

+ var UserRoleMeta = struct{ ... }

+ func AssignPermission(roleID, permissionID string) error — darwin/amd64, linux/amd64, windows/amd64

+ func AssignRole(userID, roleID string) error — darwin/amd64, linux/amd64, windows/amd64

+ func CreatePermission(id, name, resource string, action string) error — darwin/amd64, linux/amd64, windows/amd64

+ func CreateRole(id string, code string, name, description string) error — darwin/amd64, linux/amd64, windows/amd64

+ func DeletePermission(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func DeleteRole(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func HasPermission(userID, resource string, action byte) (bool, error) — darwin/amd64, linux/amd64, windows/amd64

+ func Register(handlers ...RBACObject) error — darwin/amd64, linux/amd64, windows/amd64

+ func RevokeRole(userID, roleID string) error — darwin/amd64, linux/amd64, windows/amd64

type Identity

+ func ReadAllIdentity(qb *orm.QB) ([]*Identity, error)

+ func ReadOneIdentity(qb *orm.QB, model *Identity) (*Identity, error)

+ func (Identity) TableName() string

+ func (m *Identity) Pointers() []any

+ func (m *Identity) Schema() []orm.Field

+ func (m *Identity) Values() []any

+ type LANIP struct — js/wasm

+ CreatedAt int64

+ ID string

+ IP string

+ Label string

+ UserID string

+ func ReadAllLANIP(qb *orm.QB) ([]*LANIP, error)

+ func ReadOneLANIP(qb *orm.QB, model *LANIP) (*LANIP, error)

+ func (LANIP) TableName() string

+ func (m *LANIP) Pointers() []any

+ func (m *LANIP) Schema() []orm.Field

+ func (m *LANIP) Values() []any

+ type OAuthState struct

+ CreatedAt int64

+ ExpiresAt int64

+ Provider string

+ State string

+ func ReadAllOAuthState(qb *orm.QB) ([]*OAuthState, error)

+ func ReadOneOAuthState(qb *orm.QB, model *OAuthState) (*OAuthState, error)

+ func (OAuthState) TableName() string

+ func (m *OAuthState) Pointers() []any

+ func (m *OAuthState) Schema() []orm.Field

+ func (m *OAuthState) Values() []any

+ type Permission struct

+ Action string

+ ID string

+ Name string

+ Resource string

+ func GetPermission(id string) (*Permission, error)

+ func ReadAllPermission(qb *orm.QB) ([]*Permission, error)

+ func ReadOnePermission(qb *orm.QB, model *Permission) (*Permission, error)

+ func (Permission) TableName() string

+ func (m *Permission) Pointers() []any

+ func (m *Permission) Schema() []orm.Field

+ func (m *Permission) Values() []any

+ type RBACObject interface — darwin/amd64, linux/amd64, windows/amd64

+ AllowedRoles func(action byte) []byte

+ HandlerName func() string

+ type Role struct

+ Code string

+ Description string

+ ID string

+ Name string

+ func GetRole(id string) (*Role, error)

+ func GetRoleByCode(code string) (*Role, error)

+ func GetUserRoles(userID string) ([]Role, error)

+ func ReadAllRole(qb *orm.QB) ([]*Role, error)

+ func ReadOneRole(qb *orm.QB, model *Role) (*Role, error)

+ func (Role) TableName() string

+ func (m *Role) Pointers() []any

+ func (m *Role) Schema() []orm.Field

+ func (m *Role) Values() []any

+ type RolePermission struct

+ PermissionID string

+ RoleID string

+ func ReadAllRolePermission(qb *orm.QB) ([]*RolePermission, error)

+ func ReadOneRolePermission(qb *orm.QB, model *RolePermission) (*RolePermission, error)

+ func (RolePermission) TableName() string

+ func (m *RolePermission) Pointers() []any

+ func (m *RolePermission) Schema() []orm.Field

+ func (m *RolePermission) Values() []any

type Session

+ func ReadAllSession(qb *orm.QB) ([]*Session, error)

+ func ReadOneSession(qb *orm.QB, model *Session) (*Session, error)

+ func (Session) TableName() string

+ func (m *Session) Pointers() []any

+ func (m *Session) Schema() []orm.Field

+ func (m *Session) Values() []any

type User

+ Permissions []Permission

+ Roles []Role

+ func ReadAllUser(qb *orm.QB) ([]*User, error)

+ func ReadOneUser(qb *orm.QB, model *User) (*User, error)

+ func (User) TableName() string

+ func (m *User) Pointers() []any

+ func (m *User) Schema() []orm.Field

+ func (m *User) Values() []any

+ type UserRole struct

+ RoleID string

+ UserID string

+ func ReadAllUserRole(qb *orm.QB) ([]*UserRole, error)

+ func ReadOneUserRole(qb *orm.QB, model *UserRole) (*UserRole, error)

+ func (UserRole) TableName() string

+ func (m *UserRole) Pointers() []any

+ func (m *UserRole) Schema() []orm.Field

+ func (m *UserRole) Values() []any

Feb 20, 2026

Changes in this version

+ var PasswordHashCost = bcrypt.DefaultCost — darwin/amd64, linux/amd64, windows/amd64

Feb 20, 2026

Changes in this version

+ var ErrCannotUnlink = fmt.Err("identity", "cannot", "unlink")

+ var ErrEmailTaken = fmt.Err("email", "registered")

+ var ErrIPTaken = fmt.Err("ip", "registered")

+ var ErrInvalidCredentials = fmt.Err("access", "denied")

+ var ErrInvalidOAuthState = fmt.Err("state", "invalid")

+ var ErrInvalidRUT = fmt.Err("rut", "invalid")

+ var ErrNotFound = fmt.Err("user", "not", "found")

+ var ErrProviderNotFound = fmt.Err("provider", "not", "found")

+ var ErrRUTTaken = fmt.Err("rut", "registered")

+ var ErrSessionExpired = fmt.Err("token", "expired")

+ var ErrSuspended = fmt.Err("user", "suspended")

+ var ErrWeakPassword = fmt.Err("password", "weak")

+ var LANModule *lanModule

+ var LoginModule *loginModule

+ var OAuthCallback *oauthModule

+ var ProfileModule *profileModule

+ var RegisterModule *registerModule

+ func AssignLANIP(userID, ip, label string) error — darwin/amd64, linux/amd64, windows/amd64

+ func BeginOAuth(providerName string) (string, error) — darwin/amd64, linux/amd64, windows/amd64

+ func CreateIdentity(userID, provider, providerID, email string) error — darwin/amd64, linux/amd64, windows/amd64

+ func DeleteSession(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func Init(exec Executor, cfg Config) error — darwin/amd64, linux/amd64, windows/amd64

+ func PurgeExpiredOAuthStates() error — darwin/amd64, linux/amd64, windows/amd64

+ func PurgeExpiredSessions() error — darwin/amd64, linux/amd64, windows/amd64

+ func ReactivateUser(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func RegisterLAN(userID, rut string) error — darwin/amd64, linux/amd64, windows/amd64

+ func RevokeLANIP(userID, ip string) error — darwin/amd64, linux/amd64, windows/amd64

+ func SessionCookieName() string

+ func SetPassword(userID, password string) error — darwin/amd64, linux/amd64, windows/amd64

+ func SuspendUser(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func UnlinkIdentity(userID, provider string) error — darwin/amd64, linux/amd64, windows/amd64

+ func UnregisterLAN(userID string) error — darwin/amd64, linux/amd64, windows/amd64

+ func UpdateUser(id, name, phone string) error — darwin/amd64, linux/amd64, windows/amd64

+ func VerifyPassword(userID, password string) error — darwin/amd64, linux/amd64, windows/amd64

+ type Config struct

+ OAuthProviders []OAuthProvider

+ SessionCookieName string

+ SessionTTL int

+ TrustProxy bool

+ type Executor interface — darwin/amd64, linux/amd64, windows/amd64

+ Begin func() (*sql.Tx, error)

+ Exec func(query string, args ...any) error

+ Prepare func(query string) (*sql.Stmt, error)

+ Query func(query string, args ...any) (Rows, error)

+ QueryRow func(query string, args ...any) Scanner

+ type GoogleProvider struct — darwin/amd64, linux/amd64, windows/amd64

+ ClientID string

+ ClientSecret string

+ RedirectURL string

+ func (p *GoogleProvider) AuthCodeURL(state string) string

+ func (p *GoogleProvider) ExchangeCode(ctx context.Context, code string) (*oauth2.Token, error)

+ func (p *GoogleProvider) GetUserInfo(ctx context.Context, token *oauth2.Token) (OAuthUserInfo, error)

+ func (p *GoogleProvider) Name() string

+ type Identity struct

+ CreatedAt int64

+ Email string

+ ID string

+ Provider string

+ ProviderID string

+ UserID string

+ func GetIdentityByProvider(provider, providerID string) (Identity, error)

+ func GetUserIdentities(userID string) ([]Identity, error)

+ type LANIP struct — darwin/amd64, linux/amd64, windows/amd64

+ CreatedAt int64

+ ID string

+ IP string

+ Label string

+ UserID string

+ func GetLANIPs(userID string) ([]LANIP, error)

+ type LoginData struct

+ Email string

+ Password string

+ type MicrosoftProvider struct — darwin/amd64, linux/amd64, windows/amd64

+ ClientID string

+ ClientSecret string

+ RedirectURL string

+ func (p *MicrosoftProvider) AuthCodeURL(state string) string

+ func (p *MicrosoftProvider) ExchangeCode(ctx context.Context, code string) (*oauth2.Token, error)

+ func (p *MicrosoftProvider) GetUserInfo(ctx context.Context, token *oauth2.Token) (OAuthUserInfo, error)

+ func (p *MicrosoftProvider) Name() string

+ type OAuthProvider interface

+ AuthCodeURL func(state string) string

+ ExchangeCode func(ctx context.Context, code string) (*oauth2.Token, error)

+ GetUserInfo func(ctx context.Context, token *oauth2.Token) (OAuthUserInfo, error)

+ Name func() string

+ type OAuthUserInfo struct

+ Email string

+ ID string

+ Name string

+ type PasswordData struct

+ Confirm string

+ Current string

+ New string

+ type ProfileData struct

+ Name string

+ Phone string

+ type RegisterData struct

+ Email string

+ Name string

+ Password string

+ Phone string

+ type Rows interface — darwin/amd64, linux/amd64, windows/amd64

+ Close func() error

+ Err func() error

+ Next func() bool

+ Scan func(dest ...any) error

+ type Scanner interface — darwin/amd64, linux/amd64, windows/amd64

+ Scan func(dest ...any) error

+ type Session struct

+ CreatedAt int64

+ ExpiresAt int64

+ ID string

+ IP string

+ UserAgent string

+ UserID string

+ func CreateSession(userID, ip, userAgent string) (Session, error)

+ func GetSession(id string) (Session, error)

+ type Store struct — darwin/amd64, linux/amd64, windows/amd64

type User

+ CreatedAt int64

+ Email string

+ ID string

+ Name string

+ Phone string

+ Status string

+ func CompleteOAuth(providerName string, r *http.Request, ip, ua string) (User, bool, error)

+ func CreateUser(email, name, phone string) (User, error)

+ func GetUser(id string) (User, error)

+ func GetUserByEmail(email string) (User, error)

+ func Login(email, password string) (User, error)

+ func LoginLAN(rut string, r *http.Request) (User, error)

Feb 19, 2026

Changes in this version

+ type User struct

+ func New() *User