auth

Jul 1, 2026

Changes in this version

+ func AuthThrottle(limit int, period time.Duration) http.Middleware

Jun 29, 2026

Changes in this version

+ var ErrInvalidCredentials = errors.New("authentication failed: invalid credentials")

+ var ErrInvalidToken = errors.New("authentication failed: invalid bearer token")

+ var ErrSessionUninitialized = errors.New("authentication failed: session not initialized")

+ var ErrTokenExpired = errors.New("authentication failed: token expired")

+ var ErrUserNotFound = errors.New("authentication failed: user not found")

+ func CSRF(cookieName string) http.Middleware

+ func Guest(manager *AuthManager, guardName string) http.Middleware

+ func RequireAuth(manager *AuthManager, guardName string) http.Middleware

+ type AuthManager struct

+ func NewAuthManager(defaultGuard string) *AuthManager

+ func (m *AuthManager) Check(r *http.Request) bool

+ func (m *AuthManager) Guard(name string) contract.Guard

+ func (m *AuthManager) Login(w http.ResponseWriter, r *http.Request, user contract.Authenticatable) error

+ func (m *AuthManager) Logout(w http.ResponseWriter, r *http.Request) error

+ func (m *AuthManager) Register(name string, guard contract.Guard)

+ func (m *AuthManager) User(r *http.Request) (contract.Authenticatable, bool)

+ type BcryptHasher struct

+ func NewBcryptHasher(cost int) *BcryptHasher

+ func (h *BcryptHasher) Hash(plain string) (string, error)

+ func (h *BcryptHasher) Verify(plain, hashed string) bool

+ type Gate struct

+ func NewGate() *Gate

+ func (g *Gate) Allows(user contract.Authenticatable, ability string, args ...any) bool

+ func (g *Gate) Define(ability string, fn func(user contract.Authenticatable, args ...any) bool)

+ func (g *Gate) Denies(user contract.Authenticatable, ability string, args ...any) bool

+ func (g *Gate) RegisterPolicy(resourceName string, policy Policy)

+ type Policy func(user contract.Authenticatable, model any) bool

+ type SessionGuard struct

+ func NewSessionGuard(name string, provider contract.UserProvider) *SessionGuard

+ func (g *SessionGuard) Attempt(w http.ResponseWriter, r *http.Request, credentials map[string]any) error

+ func (g *SessionGuard) Check(r *http.Request) bool

+ func (g *SessionGuard) Login(w http.ResponseWriter, r *http.Request, user contract.Authenticatable) error

+ func (g *SessionGuard) Logout(w http.ResponseWriter, r *http.Request) error

+ func (g *SessionGuard) User(r *http.Request) (contract.Authenticatable, bool)

+ type TokenGuard struct

+ func NewTokenGuard(provider contract.UserProvider) *TokenGuard

+ func (g *TokenGuard) Check(r *http.Request) bool

+ func (g *TokenGuard) Login(w http.ResponseWriter, r *http.Request, user contract.Authenticatable) error

+ func (g *TokenGuard) Logout(w http.ResponseWriter, r *http.Request) error

+ func (g *TokenGuard) User(r *http.Request) (contract.Authenticatable, bool)