token

Documentation

Index

• func GenerateKeypair(filename string) (err error)
• type AuthToken
• type Signer
  • func NewSigner(filename string) (Signer, error)
• type Verifier
  • func NewVerifier(basename string) (Verifier, error)

Functions

func GenerateKeypair

func GenerateKeypair(filename string) (err error)

GenerateKeypair generates a public and private ECDSA key, to be used for signing and verifying authentication tokens.

Types

type AuthToken

type AuthToken struct {
	Username   string
	Assertions map[string]string
}

AuthToken contains information about the authenticated user

type Signer

type Signer interface {
	// Sign a token and return the serialized cryptographic token.
	Sign(token *AuthToken) (string, error)
}

Signer signs an issued token

func NewSigner

func NewSigner(filename string) (Signer, error)

NewSigner is, for the moment, a thin wrapper around Square's go-jose library to issue ECDSA-P256 JWS tokens.

type Verifier

type Verifier interface {
	// Verify the payload and return the Token if the payload is valid.
	Verify(s string) (token *AuthToken, err error)
}

Verifier verifies the serialized representation of a token

func NewVerifier

func NewVerifier(basename string) (Verifier, error)

NewVerifier reads a verification key file, and returns a verifier to verify token objects.