authentication

type Authenticator ¶

type Authenticator[U any] interface {
	Authenticate(ctx context.Context, token string) (*authorization.Actor, *U, error)
	EnsureRoles(ctx context.Context, token string, actor *authorization.Actor) (*authorization.Actor, error)
}

Authenticator validates a bearer token and returns the resolved actor and the service's user entity. The user is nil for service-account actors.

EnsureRoles completes the actor's realm roles for routes that need them (admin routes), fetching from the identity provider only when the token omitted roles. It is a no-op when roles are already present or when the driver embeds them in the credential, so it is safe to call on any actor.

type UserInfo ¶

type UserInfo struct {
	ID          string  `json:"id"`
	Email       string  `json:"email"`
	PhoneNumber *string `json:"phone_number"`
	Username    string  `json:"username"`
	FirstName   *string `json:"first_name"`
	LastName    *string `json:"last_name"`
	CountryISO  string  `json:"country_iso"`
	Locale      string  `json:"locale"`
}

UserInfo holds the basic user information used by authentication services.

type UserResolver ¶

type UserResolver[U any] interface {
	Handle(ctx context.Context, info UserInfo) (*U, error)
}

UserResolver loads or creates user with given user info from token and returning a user instance. The generic type U represents the user model that will be resolved.