Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

fiberauth

package module

Go to main page

Versions in this module

v0

v0.3.0

Sep 17, 2026

v0.2.1

Sep 17, 2026

Changes in this version

+ func RefreshSessionsToEvict(sessions []RefreshSession, max int) []string

v0.2.0

Sep 17, 2026

Changes in this version

+ func ExpiredRefreshCookie(name, path string) *fiber.Cookie

+ func RefreshCookie(name, path, id, plain string, ttl time.Duration) *fiber.Cookie

+ func SplitRefreshCookie(v string) (id, plain string, ok bool)

+ type RefreshResult int

+ const RefreshExpired

+ const RefreshGrace

+ const RefreshOK

+ const RefreshReuse

+ const RefreshRevoked

+ func CheckRefresh(s RefreshSession, plain string, currentVer int64, grace time.Duration) RefreshResult

+ type RefreshSession struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ HashedToken string

+ ID string

+ Label string

+ PrevHashedToken string

+ RotatedAt time.Time

+ UID string

+ Ver int64

+ func NewRefreshSession(uid string, ver int64, label string, ttl time.Duration) (RefreshSession, string, error)

+ func RotateRefreshSession(s RefreshSession) (RefreshSession, string, error)

v0.1.0

Aug 2, 2026

Changes in this version

+ const CtxRoles

+ const CtxUID

+ const CtxVer

+ const RoleAdmin

+ func AdminOnly(c *fiber.Ctx) error

+ func AuthMiddleware(secret string, bootTime time.Time, onReject func(reason string, c *fiber.Ctx)) fiber.Handler

+ func CheckBackupCode(hashed []string, input string) (matchIndex int, ok bool)

+ func ClientIP(c *fiber.Ctx) string

+ func CookieDeviceID(cookieValue string) string

+ func DeviceCookie(name, id, plain string, ttl time.Duration) *fiber.Cookie

+ func DummyVerify(pw string)

+ func ExpiredDeviceCookie(name string) *fiber.Cookie

+ func GenerateBackupCodes(n int) (plaintext []string, hashed []string, err error)

+ func GenerateCode() (string, error)

+ func GenerateTOTPSecret(cfg TOTPConfig, accountName string) (secret, uri string, err error)

+ func HasRole(c *fiber.Ctx, r string) bool

+ func HashPassword(pw string) (string, error)

+ func IsNewIP(ip string, history []LoginRecord) bool

+ func Issue(secret, uid string, roles []string, ver int64, ttl time.Duration) (string, error)

+ func IssuePurpose(secret, uid, purpose string, ver int64, ttl time.Duration) (string, error)

+ func NewTrustedDeviceToken() (id, plain, hashed string, err error)

+ func Roles(c *fiber.Ctx) []string

+ func TokenVersionMiddleware(lookup func(uid string) (currentVersion int64, found bool, err error)) fiber.Handler

+ func UID(c *fiber.Ctx) string

+ func ValidateDeviceCookie(cookieValue string, devices []TrustedDevice) (deviceID string, ok bool)

+ func ValidateTOTPCode(secret, code string) bool

+ func Ver(c *fiber.Ctx) int64

+ func VerifyPassword(hash, pw string) bool

+ type Claims struct

+ Purpose string

+ Roles []string

+ UID string

+ Ver int64

+ func Parse(secret, token string) (*Claims, error)

+ func (c *Claims) HasRole(r string) bool

+ type CodeCheck int

+ const CodeExpired

+ const CodeLocked

+ const CodeOK

+ const CodeWrong

+ func CheckCode(st CodeState, input string, maxAttempts int) (result CodeCheck, remaining int)

+ type CodeState struct

+ Attempts int

+ Code string

+ ExpiresAt *time.Time

+ type LoginRecord struct

+ At time.Time

+ IP string

+ UserAgent string

+ func AppendLoginRecord(history []LoginRecord, ip, ua string, max int) []LoginRecord

+ type LoginThrottle struct

+ func NewLoginThrottle(cfg LoginThrottleConfig) *LoginThrottle

+ func (l *LoginThrottle) Fail(login, ip string) int

+ func (l *LoginThrottle) Locked(login, ip string) (bool, time.Duration)

+ func (l *LoginThrottle) Succeeded(login string)

+ type LoginThrottleConfig struct

+ IPMaxFails int

+ LockFor time.Duration

+ LoginMaxFails int

+ TTL time.Duration

+ type Mailer struct

+ APIKey string

+ Endpoint string

+ From string

+ HTTPClient *http.Client

+ func NewMailer(apiKey, from string) *Mailer

+ func (m *Mailer) Enabled() bool

+ func (m *Mailer) Send(to, subject, html string) error

+ type TOTPConfig struct

+ Issuer string

+ type Throttle struct

+ func NewThrottle(lockFor, ttl time.Duration) *Throttle

+ func (t *Throttle) Fail(key string, maxFails int) int

+ func (t *Throttle) Locked(key string) (bool, time.Duration)

+ func (t *Throttle) Reset(key string)

+ type TicketStore struct

+ func NewTicketStore(ttl time.Duration) *TicketStore

+ func (d *TicketStore) Consume(tok string) (uid, scope string, ok bool)

+ func (d *TicketStore) Issue(uid, scope string) (string, error)

+ type TrustedDevice struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ HashedToken string

+ ID string

+ Label string

+ func PruneExpiredDevices(devices []TrustedDevice) []TrustedDevice