authenticators

Documentation

Index

• Variables
• type AppSSHResponse
• type CFAuthenticator
  • func NewCFAuthenticator(logger lager.Logger, httpClient *http.Client, ccURL string, uaaTokenURL string, ...) *CFAuthenticator
  • func (cfa *CFAuthenticator) Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)
  • func (cfa *CFAuthenticator) UserRegexp() *regexp.Regexp
• type CompositeAuthenticator
  • func NewCompositeAuthenticator(passwordAuthenticators ...PasswordAuthenticator) *CompositeAuthenticator
  • func (a *CompositeAuthenticator) Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)
• type DiegoProxyAuthenticator
  • func NewDiegoProxyAuthenticator(logger lager.Logger, credentials []byte, permissionsBuilder PermissionsBuilder) *DiegoProxyAuthenticator
  • func (dpa *DiegoProxyAuthenticator) Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)
  • func (dpa *DiegoProxyAuthenticator) UserRegexp() *regexp.Regexp
• type PasswordAuthenticator
• type PermissionsBuilder
  • func NewPermissionsBuilder(bbsClient bbs.InternalClient, useDirectInstanceAddr bool) PermissionsBuilder
• type PublicKeyAuthenticator
  • func NewPublicKeyAuthenticator(publicKey ssh.PublicKey) PublicKeyAuthenticator
• type UAAAuthTokenResponse

Variables

var AuthenticationFailedErr = errors.New("Authentication failed")

var CFUserRegex *regexp.Regexp = regexp.MustCompile(`cf:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})/(\d+)`)

var DiegoUserRegex *regexp.Regexp = regexp.MustCompile(`diego:([a-zA-Z0-9_-]+)/(\d+)`)

var FetchAppFailedErr = errors.New("Fetching application data failed")

var InvalidCCResponse = errors.New("Invalid response from Cloud Controller")

var InvalidCredentialsErr error = errors.New("Invalid credentials")

var InvalidDomainErr error = errors.New("Invalid authentication domain")

var InvalidRequestErr = errors.New("CloudController URL Invalid")

var InvalidUserFormatErr = errors.New("Invalid user format")

var NotDiegoErr = errors.New("Diego Not Enabled")

var RouteNotFoundErr error = errors.New("SSH routing info not found")

var SSHDisabledErr = errors.New("SSH Disabled")

Types

type AppSSHResponse

type AppSSHResponse struct {
	ProcessGuid string `json:"process_guid"`
}

type CFAuthenticator

type CFAuthenticator struct {
	// contains filtered or unexported fields
}

func NewCFAuthenticator

func NewCFAuthenticator(
	logger lager.Logger,
	httpClient *http.Client,
	ccURL string,
	uaaTokenURL string,
	uaaUsername string,
	uaaPassword string,
	permissionsBuilder PermissionsBuilder,
) *CFAuthenticator

func (*CFAuthenticator) Authenticate

func (cfa *CFAuthenticator) Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)

func (*CFAuthenticator) UserRegexp

func (cfa *CFAuthenticator) UserRegexp() *regexp.Regexp

type CompositeAuthenticator

type CompositeAuthenticator struct {
	// contains filtered or unexported fields
}

func NewCompositeAuthenticator

func NewCompositeAuthenticator(passwordAuthenticators ...PasswordAuthenticator) *CompositeAuthenticator

func (*CompositeAuthenticator) Authenticate

func (a *CompositeAuthenticator) Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)

type DiegoProxyAuthenticator

type DiegoProxyAuthenticator struct {
	// contains filtered or unexported fields
}

func NewDiegoProxyAuthenticator

func NewDiegoProxyAuthenticator(
	logger lager.Logger,
	credentials []byte,
	permissionsBuilder PermissionsBuilder,
) *DiegoProxyAuthenticator

func (*DiegoProxyAuthenticator) Authenticate

func (dpa *DiegoProxyAuthenticator) Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)

func (*DiegoProxyAuthenticator) UserRegexp

func (dpa *DiegoProxyAuthenticator) UserRegexp() *regexp.Regexp

type PasswordAuthenticator

type PasswordAuthenticator interface {
	UserRegexp() *regexp.Regexp
	Authenticate(metadata ssh.ConnMetadata, password []byte) (*ssh.Permissions, error)
}

type PermissionsBuilder

type PermissionsBuilder interface {
	Build(logger lager.Logger, processGuid string, index int, metadata ssh.ConnMetadata) (*ssh.Permissions, error)
}

func NewPermissionsBuilder

func NewPermissionsBuilder(bbsClient bbs.InternalClient, useDirectInstanceAddr bool) PermissionsBuilder

type PublicKeyAuthenticator

type PublicKeyAuthenticator interface {
	Authenticate(metadata ssh.ConnMetadata, publicKey ssh.PublicKey) (*ssh.Permissions, error)
	PublicKey() ssh.PublicKey
}

func NewPublicKeyAuthenticator

func NewPublicKeyAuthenticator(publicKey ssh.PublicKey) PublicKeyAuthenticator

type UAAAuthTokenResponse

type UAAAuthTokenResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
}