auth

package

v1.54.0 Latest Latest Go to latest Published: Sep 11, 2026 License: MIT Imports: 34 Imported by: 0

Documentation ¶

Index ¶

func NewComponents(ctx context.Context, cfg config.RuntimeConfig[authConfig.Config], ...) (boot.Components, error)
type AuthService
- func NewAuthService(ctx context.Context, cfg authConfig.Config, db storage.Database) (*AuthService, error)
- func (i *AuthService) Health(ctx context.Context, in *proto.HealthRequest) (*proto.HealthResponse, error)
- func (i *AuthService) SetupRoutes(mux *http.ServeMux)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func NewComponents ¶ added in v1.54.0

func NewComponents(ctx context.Context, cfg config.RuntimeConfig[authConfig.Config], _ *metrics.Metrics, _ *trace.Tracer) (boot.Components, error)

NewComponents builds auth's gRPC and HTTP registrations for pkg/boot.Boot. The two registrations get their own AuthService and DB connection each, not a shared one, since gRPC and HTTP may run in separate processes (see .ai/components.md). m and tracer are unused: auth isn't instrumented yet.

Types ¶

type AuthService ¶

type AuthService struct {
	proto.UnimplementedAuthServiceServer
	// contains filtered or unexported fields
}

func NewAuthService ¶

func NewAuthService(ctx context.Context, cfg authConfig.Config, db storage.Database) (*AuthService, error)

func (*AuthService) Health ¶

func (i *AuthService) Health(ctx context.Context, in *proto.HealthRequest) (*proto.HealthResponse, error)

func (*AuthService) SetupRoutes ¶

func (i *AuthService) SetupRoutes(mux *http.ServeMux)

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
config
federation
identity
internal
hashers
middlewares
utils
internaloauthsessions
oauth
client
client/providers
core
server
server/accesstokens Package accesstokens is the public API for access-token persistence.	Package accesstokens is the public API for access-token persistence.
server/accesstokens/sqlcgen
server/authcodes Package authcodes is the public API for authorization-code persistence.	Package authcodes is the public API for authorization-code persistence.
server/authcodes/sqlcgen
server/clients Package clients serves the OAuth client management API (gRPC and internal HTTP).	Package clients serves the OAuth client management API (gRPC and internal HTTP).
server/clients/sqlcgen
server/consent Package consent persists consent challenges and verifiers.	Package consent persists consent challenges and verifiers.
server/consent/sqlcgen
server/internal/csrf Package csrf provides the CSRF cookie and token helpers shared by the OAuth login and consent flows.	Package csrf provides the CSRF cookie and token helpers shared by the OAuth login and consent flows.
server/jwk
server/login Package login persists login challenges and verifiers.	Package login persists login challenges and verifiers.
server/login/sqlcgen
server/oidc Package oidc is the public API for OpenID Connect session persistence.	Package oidc is the public API for OpenID Connect session persistence.
server/oidc/sqlcgen
server/pkce Package pkce is the public API for PKCE-request persistence.	Package pkce is the public API for PKCE-request persistence.
server/pkce/sqlcgen
server/refreshtokens Package refreshtokens is the public API for refresh-token persistence.	Package refreshtokens is the public API for refresh-token persistence.
server/refreshtokens/sqlcgen
server/revocation Package revocation implements the OAuth 2.0 token revocation endpoint per RFC 7009.	Package revocation implements the OAuth 2.0 token revocation endpoint per RFC 7009.
server/revokedtokens Package revokedtokens is the public API for the revoked-token denylist.	Package revokedtokens is the public API for the revoked-token denylist.
server/revokedtokens/sqlcgen
server/storage
server/userinfo Package userinfo calls GitLab Rails' `/api/v4/iam/userinfo` endpoint, authenticated with the access token minted for the same token exchange as a bearer credential.	Package userinfo calls GitLab Rails' `/api/v4/iam/userinfo` endpoint, authenticated with the access token minted for the same token exchange as a bearer credential.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL