authn

Documentation

Index

• Variables
• func HasScope(scopes []string, required string) bool
• func HasScopeOrDelegation(ctx context.Context, db *pgxpool.Pool, agent *AgentIdentity, ...) (bool, bool, error)
• func LogAuthEvent(ctx context.Context, db *pgxpool.Pool, ...)
• func LogAuthFailure(ctx context.Context, db *pgxpool.Pool, ...)
• type AgentIdentity
  • func AuthenticateAgentBearer(ctx context.Context, db *pgxpool.Pool, authorization string) (*AgentIdentity, error)
• type DelegationContext

Variables

var ErrUnauthorized = errors.New("unauthorized")

Functions

func HasScope

func HasScope(scopes []string, required string) bool

func HasScopeOrDelegation

func HasScopeOrDelegation(ctx context.Context, db *pgxpool.Pool, agent *AgentIdentity, requiredScope string, dctx DelegationContext) (bool, bool, error)

func LogAuthEvent

func LogAuthEvent(ctx context.Context, db *pgxpool.Pool, service, endpoint, principalID, actorID, reason string, details map[string]any)

func LogAuthFailure

func LogAuthFailure(ctx context.Context, db *pgxpool.Pool, service, endpoint, principalID, actorID, reason string, details map[string]any)

Types

type AgentIdentity

type AgentIdentity struct {
	ActorID     string
	PrincipalID string
	Scopes      []string
}

func AuthenticateAgentBearer

func AuthenticateAgentBearer(ctx context.Context, db *pgxpool.Pool, authorization string) (*AgentIdentity, error)

type DelegationContext

type DelegationContext struct {
	Capability string
	TemplateID string
	RiskLevel  string
}