routerauth

Documentation

Index

• Constants
• func ClaimsFromContext(ctx context.Context) (contracts.RouterInvocationCredentialClaimsV1, bool)
• type Config
  • func LoadConfig(lookup func(string) (string, bool)) (Config, error)
  • func (config Config) Validate() error
• type Middleware
  • func NewMiddleware(config Config, now func() time.Time) (*Middleware, error)
  • func (middleware *Middleware) Handler(next http.Handler) http.Handler
• type ReplayGuard
  • func NewReplayGuard(now func() time.Time) (*ReplayGuard, error)
  • func (guard *ReplayGuard) Accept(jwtID string, expiresAt int64) bool
• type Verifier
  • func NewVerifier(config Config, now func() time.Time) (*Verifier, error)
  • func (verifier *Verifier) Verify(request *http.Request) (contracts.RouterInvocationCredentialClaimsV1, error)

Constants

const (
	IssuerEnvironment    = "NEKIRO_AGENT_ROUTER_ISSUER"
	AudienceEnvironment  = "NEKIRO_AGENT_ROUTER_AUDIENCE"
	KeyIDEnvironment     = "NEKIRO_AGENT_ROUTER_KEY_ID"
	PublicKeyEnvironment = "NEKIRO_AGENT_ROUTER_PUBLIC_KEY_BASE64URL"
)

Functions

func ClaimsFromContext

func ClaimsFromContext(ctx context.Context) (contracts.RouterInvocationCredentialClaimsV1, bool)

Types

type Config

type Config struct {
	Issuer    string
	Audience  string
	KeyID     string
	PublicKey ed25519.PublicKey
}

func LoadConfig

func LoadConfig(lookup func(string) (string, bool)) (Config, error)

func (Config) Validate

func (config Config) Validate() error

type Middleware

type Middleware struct {
	// contains filtered or unexported fields
}

func NewMiddleware

func NewMiddleware(config Config, now func() time.Time) (*Middleware, error)

func (*Middleware) Handler

func (middleware *Middleware) Handler(next http.Handler) http.Handler

type ReplayGuard

type ReplayGuard struct {
	// contains filtered or unexported fields
}

func NewReplayGuard

func NewReplayGuard(now func() time.Time) (*ReplayGuard, error)

func (*ReplayGuard) Accept

func (guard *ReplayGuard) Accept(jwtID string, expiresAt int64) bool

type Verifier

type Verifier struct {
	// contains filtered or unexported fields
}

func NewVerifier

func NewVerifier(config Config, now func() time.Time) (*Verifier, error)

func (*Verifier) Verify

func (verifier *Verifier) Verify(request *http.Request) (contracts.RouterInvocationCredentialClaimsV1, error)