providers

type APIKeyOption ¶

type APIKeyOption func(*APIKeyProvider)

func WithAPIKeyContainer(container forge.Container) APIKeyOption

func WithAPIKeyCookie(name string) APIKeyOption

func WithAPIKeyDescription(desc string) APIKeyOption

func WithAPIKeyHeader(name string) APIKeyOption

func WithAPIKeyQuery(param string) APIKeyOption

func WithAPIKeyValidator(validator APIKeyValidator) APIKeyOption

type APIKeyProvider ¶

type APIKeyProvider struct {
	// contains filtered or unexported fields
}

APIKeyProvider implements API key authentication. API keys can be provided in headers, query parameters, or cookies.

func (p *APIKeyProvider) Authenticate(ctx context.Context, r *http.Request) (*auth.AuthContext, error)

func (p *APIKeyProvider) Middleware() forge.Middleware

func (p *APIKeyProvider) Name() string

func (p *APIKeyProvider) OpenAPIScheme() auth.SecurityScheme

func (p *APIKeyProvider) Type() auth.SecuritySchemeType

type APIKeyValidator ¶

type APIKeyValidator func(ctx context.Context, apiKey string) (*auth.AuthContext, error)

APIKeyValidator validates an API key and returns the auth context. The validator has access to the DI container via the provider and can retrieve services like databases, caches, etc. for validation.

type BasicAuthOption ¶

type BasicAuthOption func(*BasicAuthProvider)

func WithBasicAuthContainer(container forge.Container) BasicAuthOption

func WithBasicAuthDescription(desc string) BasicAuthOption

func WithBasicAuthValidator(validator BasicAuthValidator) BasicAuthOption

type BasicAuthProvider ¶

type BasicAuthProvider struct {
	// contains filtered or unexported fields
}

BasicAuthProvider implements HTTP Basic Authentication. It extracts username and password from the Authorization header.

func (p *BasicAuthProvider) Authenticate(ctx context.Context, r *http.Request) (*auth.AuthContext, error)

func (p *BasicAuthProvider) Middleware() forge.Middleware

func (p *BasicAuthProvider) Name() string

func (p *BasicAuthProvider) OpenAPIScheme() auth.SecurityScheme

func (p *BasicAuthProvider) Type() auth.SecuritySchemeType

type BasicAuthValidator ¶

type BasicAuthValidator func(ctx context.Context, username, password string) (*auth.AuthContext, error)

BasicAuthValidator validates username and password and returns the auth context. The validator can access services from the DI container to verify credentials against a database, LDAP, etc.

type BearerTokenOption ¶

type BearerTokenOption func(*BearerTokenProvider)

func WithBearerContainer(container forge.Container) BearerTokenOption

func WithBearerDescription(desc string) BearerTokenOption

func WithBearerFormat(format string) BearerTokenOption

func WithBearerValidator(validator BearerTokenValidator) BearerTokenOption

type BearerTokenProvider ¶

type BearerTokenProvider struct {
	// contains filtered or unexported fields
}

BearerTokenProvider implements Bearer token authentication (JWT, OAuth2, etc.). It extracts tokens from the Authorization header using the "Bearer" scheme.

func (p *BearerTokenProvider) Authenticate(ctx context.Context, r *http.Request) (*auth.AuthContext, error)

func (p *BearerTokenProvider) Middleware() forge.Middleware

func (p *BearerTokenProvider) Name() string

func (p *BearerTokenProvider) OpenAPIScheme() auth.SecurityScheme

func (p *BearerTokenProvider) Type() auth.SecuritySchemeType

type BearerTokenValidator ¶

type BearerTokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

BearerTokenValidator validates a bearer token and returns the auth context. The validator can access services from the DI container for JWT verification, token introspection, etc.

type OAuth2Option ¶

type OAuth2Option func(*OAuth2Provider)

func WithOAuth2Container(container forge.Container) OAuth2Option

func WithOAuth2Description(desc string) OAuth2Option

func WithOAuth2Validator(validator OAuth2TokenValidator) OAuth2Option

type OAuth2Provider ¶

type OAuth2Provider struct {
	// contains filtered or unexported fields
}

OAuth2Provider implements OAuth 2.0 authentication. It validates OAuth2 access tokens and extracts scopes and permissions.

func (p *OAuth2Provider) Authenticate(ctx context.Context, r *http.Request) (*auth.AuthContext, error)

func (p *OAuth2Provider) Middleware() forge.Middleware

func (p *OAuth2Provider) Name() string

func (p *OAuth2Provider) OpenAPIScheme() auth.SecurityScheme

func (p *OAuth2Provider) Type() auth.SecuritySchemeType

type OAuth2TokenValidator ¶

type OAuth2TokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

OAuth2TokenValidator validates an OAuth2 token and returns the auth context. The validator should verify the token with the OAuth2 authorization server and extract claims, scopes, etc.

type OIDCOption ¶

type OIDCOption func(*OIDCProvider)

func WithOIDCContainer(container forge.Container) OIDCOption

func WithOIDCDescription(desc string) OIDCOption

func WithOIDCValidator(validator OIDCTokenValidator) OIDCOption

type OIDCProvider ¶

type OIDCProvider struct {
	// contains filtered or unexported fields
}

OIDCProvider implements OpenID Connect authentication. It validates OIDC ID tokens and access tokens.

func (p *OIDCProvider) Authenticate(ctx context.Context, r *http.Request) (*auth.AuthContext, error)

func (p *OIDCProvider) Middleware() forge.Middleware

func (p *OIDCProvider) Name() string

func (p *OIDCProvider) OpenAPIScheme() auth.SecurityScheme

func (p *OIDCProvider) Type() auth.SecuritySchemeType

type OIDCTokenValidator ¶

type OIDCTokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

OIDCTokenValidator validates an OIDC token and returns the auth context. The validator should verify the token with the OIDC provider and extract claims (sub, email, name, etc.).