browser

package module

Go to main page

Versions in this module

v0

v0.6.1

Oct 22, 2026

v0.6.0

Oct 22, 2026

Changes in this version

+ var ErrRequiredAMR = errors.New("required authentication method not satisfied")

type Identity

+ AMR []string

type Option

+ func WithRequiredAMR(value string) Option

v0.5.0

Oct 18, 2026

Changes in this version

+ type CallbackOutcome struct

+ func (o CallbackOutcome) Proof() Proof

+ func (o CallbackOutcome) ReturnPath() string

type Client

+ func (c *Client) CallbackResult(w http.ResponseWriter, r *http.Request) (CallbackOutcome, error)

type Config

+ RequestEmail bool

type Identity

+ Email string

+ EmailVerified bool

type Option

+ func WithEmailScope() Option

v0.4.0

Oct 14, 2026

Changes in this version

+ func SQLiteSchema() string

+ type SQLiteStore struct

+ func NewSQLiteStore(ctx context.Context, db *sql.DB) (*SQLiteStore, error)

+ type Store interface

v0.3.0

Oct 12, 2026

Changes in this version

type Identity

+ AuthHubMFA *MFAEnrollment

+ SessionExpiresAt time.Time

+ type MFAEnrollment struct

+ Enrolled bool

+ SetupAvailable bool

+ Version int

+ func (v *MFAEnrollment) UnmarshalJSON(raw []byte) error

type Option

+ func WithCurrentSessionLogoutEndpoint(value string) Option

v0.2.0

Oct 10, 2026

Changes in this version

+ func ValidateAuthHubClientConfig(c Config) error

+ type CanonicalIdentifiers struct

+ EmailAlias string

+ Login string

+ Version int

type Client

+ func (c *Client) LogoutFromHost(w http.ResponseWriter, r *http.Request)

type Identity

+ AuthHubIdentifiers *CanonicalIdentifiers

type Option

+ func WithAuthHubClientBoundProject() Option

+ func WithHTTPSReverseProxy() Option

type PostgresStore

+ func NewPostgresStoreWithSchema(ctx context.Context, db *sql.DB, schemaName string) (*PostgresStore, error)

v0.1.0

Oct 8, 2026

Changes in this version

+ var ErrDenied = errFenced

+ var ErrRevocationUnconfirmed = errors.New("local logout committed; central revocation unconfirmed")

+ var ErrUnavailable = errors.New("session validity unavailable")

+ func ReadClientSecret(path, clientID string) (string, error)

+ func ReadProtected(path string, limit int64) ([]byte, error)

+ func Schema() string

+ func ValidateConfig(c Config) error

+ func ValidateIssuerEndpoint(issuer, endpoint string) error

+ type Binding struct

+ AbsoluteUntil time.Time

+ AuthTime int64

+ CentralSessionID string

+ ClientID string

+ Deadline time.Time

+ Generation int64

+ Issuer string

+ LoginGeneration int64

+ ProjectID string

+ Reference string

+ Subject string

+ type Client struct

+ func New(ctx context.Context, c Config, o Options) (*Client, error)

+ func NewWithOptions(ctx context.Context, values ...Option) (*Client, error)

+ func (c *Client) Begin(w http.ResponseWriter, r *http.Request)

+ func (c *Client) Callback(w http.ResponseWriter, r *http.Request)

+ func (c *Client) Check(ctx context.Context, b Binding) (Proof, error)

+ func (c *Client) Handler(render func(http.ResponseWriter, *http.Request, View)) http.Handler

+ func (c *Client) Logout(w http.ResponseWriter, r *http.Request)

+ func (c *Client) RevokeBinding(ctx context.Context, b Binding) error

+ func (c *Client) Valid(ctx context.Context, p Proof) error

+ func (c *Client) Verify(r *http.Request) (Proof, error)

+ type Config struct

+ Callback string

+ ClientID string

+ Freshness time.Duration

+ Ingress *ingress.Policy

+ Issuer string

+ IssuerCAFile string

+ Origin string

+ ProjectID string

+ type Identity struct

+ AbsoluteUntil time.Time

+ AuthTime int64

+ ClientID string

+ FreshUntil time.Time

+ IssuedAt time.Time

+ Issuer string

+ Profile map[string]string

+ Project map[string]string

+ ProjectID string

+ SessionID string

+ Subject string

+ type Option func(*options)

+ func WithCallback(value string) Option

+ func WithCentralLogoutURL(value string) Option

+ func WithClientID(value string) Option

+ func WithClientSecret(value string) Option

+ func WithFreshness(value time.Duration) Option

+ func WithIngress(value *ingress.Policy) Option

+ func WithIssuer(value string) Option

+ func WithIssuerCAFile(value string) Option

+ func WithOrigin(value string) Option

+ func WithProjectID(value string) Option

+ func WithRevocationEndpoint(value string) Option

+ func WithStorageKey(value []byte) Option

+ func WithStore(value *PostgresStore) Option

+ type Options struct

+ ClientSecret string

+ StorageKey []byte

+ Store *PostgresStore

+ type PostgresStore struct

+ func NewPostgresStore(ctx context.Context, db *sql.DB) (*PostgresStore, error)

+ type Proof struct

+ func (p Proof) Binding() Binding

+ func (p Proof) Deadline() time.Time

+ func (p Proof) Generation() int64

+ func (p Proof) Identity() Identity

+ func (p Proof) SessionReference() string

+ type View struct

+ CSRF string

+ CentralLogout string

+ Proof *Proof

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL