auth

Documentation

Index

• Constants
• Variables
• func IsScopedToken(rawToken string) bool
• func SignScopedToken(secret []byte, claims ScopedTokenClaims, now time.Time) (string, error)
• type ScopedTokenClaims
  • func ParseScopedTokenUnverified(rawToken string) (ScopedTokenClaims, error)
  • func VerifyScopedToken(secret []byte, rawToken string, now time.Time) (ScopedTokenClaims, error)
  • func (c ScopedTokenClaims) Expired(now time.Time) bool
  • func (c ScopedTokenClaims) HasScope(required string) bool

Constants

const (
	ScopedTokenPrefix = "stella_scoped_"
)

Variables

var DefaultSandboxScopes = []string{
	"agent:read",
	"tasks:*",
	"goals:*",
	"scheduler:*",
	"skills:*",
	"shares:*",
	"recally:*",
	"email:*",
	"oauth:*",
	"vault:*",
}

Functions

func IsScopedToken

func IsScopedToken(rawToken string) bool

func SignScopedToken

func SignScopedToken(secret []byte, claims ScopedTokenClaims, now time.Time) (string, error)

Types

type ScopedTokenClaims

type ScopedTokenClaims struct {
	Subject   string   `json:"sub"`
	UserID    string   `json:"user_id"`
	AgentID   string   `json:"agent_id"`
	SessionID string   `json:"session_id,omitempty"`
	ProjectID string   `json:"project_id,omitempty"`
	Scopes    []string `json:"scopes,omitempty"`
	ExpiresAt int64    `json:"exp"`
	IssuedAt  int64    `json:"iat"`
	TokenID   string   `json:"jti"`
}

func ParseScopedTokenUnverified

func ParseScopedTokenUnverified(rawToken string) (ScopedTokenClaims, error)

func VerifyScopedToken

func VerifyScopedToken(secret []byte, rawToken string, now time.Time) (ScopedTokenClaims, error)

func (ScopedTokenClaims) Expired

func (c ScopedTokenClaims) Expired(now time.Time) bool

func (ScopedTokenClaims) HasScope

func (c ScopedTokenClaims) HasScope(required string) bool