auth

package
v0.8.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 6, 2026 License: MIT Imports: 10 Imported by: 0

Documentation

Index

Constants

View Source
const PeerUser = "peer"

PeerUser is the reserved username peer nodes authenticate with. Certificates presented for this user are checked against the peer certificate authorities instead of the user-facing ones, so inter-node trust can be layered on top of existing deployments without touching their user certificate authority.

Variables

View Source
var (
	ErrInvalidCredentials = errors.New("auth: invalid credentials")
)

Functions

func NewConfig

func NewConfig(database db.Database, settings *Settings) (*ssh.ServerConfig, error)

Types

type Settings added in v0.5.0

type Settings struct {
	// certificate authorities trusted for regular user certificates
	CAPublicKeys []ssh.PublicKey

	// certificate authorities trusted for peer node certificates, empty
	// disables inbound peer connections
	PeerCAPublicKeys []ssh.PublicKey

	// id of this node, recorded on users at auth time for mesh tunneling
	NodeID string

	// path to the geoip database file
	GeoipDatabase string
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL