twofa

Documentation

Overview

Package twofa contains routines for getting short lived certificate.

Index

• Variables
• func AuthenticateToTargetUrls(userName string, password []byte, targetUrls []string, skip2fa bool, ...) (baseUrl string, err error)
• func DoCertRequest(signer crypto.Signer, client *http.Client, userName string, ...) ([]byte, error)

Variables

var (
	// Duration of generated cert. Default 16 hours.
	Duration = flag.Duration("duration", 16*time.Hour, "Duration of the requested certificates in golang duration format (ex: 30s, 5m, 12h)")
)

Functions

func AuthenticateToTargetUrls

func AuthenticateToTargetUrls(
	userName string,
	password []byte,
	targetUrls []string,
	skip2fa bool,
	client *http.Client,
	userAgentString string,
	logger log.DebugLogger) (baseUrl string, err error)

AuthenticateToTargetUrls does an authentication to the keymasted server it performs 2fa if needed using the server side specified methods it assumes the http client has a valid cookiejar

func DoCertRequest

func DoCertRequest(signer crypto.Signer, client *http.Client, userName string,
	baseUrl,
	certType string,
	addGroups bool,
	userAgentString string, logger log.DebugLogger) ([]byte, error)

After a client has authenticated it can call DoCertRequest for the appropiate type