auth

Documentation

Index

• Constants
• Variables
• type CachedTokenProvider
  • func NewCachedTokenProvider(provider TokenProvider) *CachedTokenProvider
  • func (p *CachedTokenProvider) GetRawToken(ctx context.Context) (RawToken, error)
  • func (p *CachedTokenProvider) WithClock(clock func() time.Time) *CachedTokenProvider
  • func (p *CachedTokenProvider) WithGracePeriod(duration time.Duration) *CachedTokenProvider
• type CredentialsClient
• type CredentialsTokenProvider
  • func (provider *CredentialsTokenProvider) GetRawToken(ctx context.Context) (RawToken, error)
• type RawToken
  • func (token RawToken) GetRawToken(_ context.Context) (RawToken, error)
  • func (token RawToken) ParseExpires() (time.Time, error)
  • func (token RawToken) String() string
• type SecretCredentials
• type SecretCredentialsTokenProvider
  • func (provider *SecretCredentialsTokenProvider) GetRawToken(ctx context.Context) (_ RawToken, err error)
• type SecretsClient
• type SecretsManagerTokenProvider
  • func (provider *SecretsManagerTokenProvider) GetRawToken(ctx context.Context) (RawToken, error)
• type SecretsManagerV1Client
  • func (c SecretsManagerV1Client) GetSecretByID(ctx context.Context, secretID string) ([]byte, error)
• type SecretsManagerV2Client
  • func (c SecretsManagerV2Client) GetSecretByID(ctx context.Context, secretID string) ([]byte, error)
• type SignInRequest
• type SignInResponse
• type TokenProvider

Constants

const (
	DefaultTokenType = "identityToken"
)

Variables

var (
	ErrIncorrectCredentials = errors.New("incorrect credentials")
	ErrChallenged           = errors.New("user password needs to be reset")
	ErrTooManyRequests      = errors.New("too many requests to Enlight SSO")
	ErrInactivated          = errors.New("user has been inactivated")
	ErrUnknownTokenType     = errors.New("provided token type not present in response")
)

var (
	ErrInvalidToken = errors.New("invalid token")
)

Types

type CachedTokenProvider

type CachedTokenProvider struct {
	TokenProvider
	// contains filtered or unexported fields
}

func NewCachedTokenProvider

func NewCachedTokenProvider(provider TokenProvider) *CachedTokenProvider

func (*CachedTokenProvider) GetRawToken

func (p *CachedTokenProvider) GetRawToken(ctx context.Context) (RawToken, error)

func (*CachedTokenProvider) WithClock

func (p *CachedTokenProvider) WithClock(clock func() time.Time) *CachedTokenProvider

func (*CachedTokenProvider) WithGracePeriod

func (p *CachedTokenProvider) WithGracePeriod(duration time.Duration) *CachedTokenProvider

type CredentialsClient

type CredentialsClient interface {
	Do(*http.Request) (*http.Response, error)
}

type CredentialsTokenProvider

type CredentialsTokenProvider struct {
	Username string
	Password string
	Endpoint string

	Client    CredentialsClient
	TokenType string
	Retry     retry.BackoffProvider
}

func (*CredentialsTokenProvider) GetRawToken

func (provider *CredentialsTokenProvider) GetRawToken(ctx context.Context) (RawToken, error)

type RawToken

type RawToken string

func (RawToken) GetRawToken

func (token RawToken) GetRawToken(_ context.Context) (RawToken, error)

func (RawToken) ParseExpires

func (token RawToken) ParseExpires() (time.Time, error)

ParseExpires attempts to extract the `exp` claim from the JWT. This function does not validate that the token is signed and should only be used if the correctness of this value is not used for security.

func (RawToken) String

func (token RawToken) String() string

type SecretCredentials

type SecretCredentials struct {
	Username string `json:"username"`
	Password string `json:"password"`
	Endpoint string `json:"signInUrl"`
}

type SecretCredentialsTokenProvider

type SecretCredentialsTokenProvider struct {
	SecretID      string
	SecretsClient SecretsClient

	Client    CredentialsClient
	TokenType string
	Retry     retry.BackoffProvider
	// contains filtered or unexported fields
}

func (*SecretCredentialsTokenProvider) GetRawToken

func (provider *SecretCredentialsTokenProvider) GetRawToken(ctx context.Context) (_ RawToken, err error)

type SecretsClient

type SecretsClient interface {
	GetSecretByID(context.Context, string) ([]byte, error)
}

type SecretsManagerTokenProvider

type SecretsManagerTokenProvider struct {
	Config secretsmanagerauth.Config
	// contains filtered or unexported fields
}

Deprecated: Use CredentialsTokenProvider instead

func (*SecretsManagerTokenProvider) GetRawToken

func (provider *SecretsManagerTokenProvider) GetRawToken(ctx context.Context) (RawToken, error)

type SecretsManagerV1Client

type SecretsManagerV1Client struct {
	*sm_v1.SecretsManager
}

func (SecretsManagerV1Client) GetSecretByID

func (c SecretsManagerV1Client) GetSecretByID(ctx context.Context, secretID string) ([]byte, error)

type SecretsManagerV2Client

type SecretsManagerV2Client struct {
	*sm_v2.Client
}

func (SecretsManagerV2Client) GetSecretByID

func (c SecretsManagerV2Client) GetSecretByID(ctx context.Context, secretID string) ([]byte, error)

type SignInRequest

type SignInRequest struct {
	Username string `json:"username"`
	Password string `json:"password"`
}

type SignInResponse

type SignInResponse struct {
	Tokens    map[string]RawToken `json:"tokens"`
	Challenge *struct {
		ID   string `json:"id"`
		Type string `json:"type"`
	} `json:"challenge"`
}

type TokenProvider

type TokenProvider interface {
	GetRawToken(ctx context.Context) (RawToken, error)
}