lotorhttp

Documentation

Overview

Package lotorhttp exposes browser-safe, same-origin HTTP adapters for Lotor-owned commands. It keeps Control application bearers and runtime credentials outside browser JavaScript.

Index

• Variables
• type Handler
  • func New(options Options) (*Handler, error)
  • func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request)
• type Identity
• type Options
• type SessionStore

Variables

var ErrNoSession = errors.New("application session not found")

ErrNoSession indicates that an opaque application session is absent or expired.

Types

type Handler

type Handler struct {
	// contains filtered or unexported fields
}

func New

func New(options Options) (*Handler, error)

New constructs a production gateway backed by Control identity verification and owned LWP.

func (*Handler) ServeHTTP

func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type Identity

type Identity struct {
	Subject       string
	Email         string
	TenantID      string
	ApplicationID string
	EnvironmentID string
}

Identity is verified from Control for every lifecycle command.

type Options

type Options struct {
	TLSConfig  *tls.Config
	Sessions   SessionStore
	ControlURL string
	APIKey     string
	CookieName string
}

Options configures the reusable browser command gateway.

type SessionStore

type SessionStore interface {
	Bearer(context.Context, string) (string, error)
	Delete(context.Context, string) error
}

SessionStore resolves the opaque application cookie to the Control bearer held by the BFF.