theauth

package module

Go to main page

Versions in this module

v1

v1.0.0

Jun 21, 2026

Changes in this version

+ const PermissionAuditRead

+ const PermissionBillingAdmin

+ const PermissionBillingRead

+ const PermissionBillingWrite

+ const PermissionRolesAdmin

+ const PermissionRolesRead

+ const PermissionSAMLAdmin

+ const PermissionSCIMAdmin

+ const PermissionSessionsRevoke

+ const PermissionUsersAdmin

+ const PermissionUsersInvite

+ const PermissionUsersRead

+ const SystemRoleSuperAdmin

+ var ErrAdminRequiresRBAC = errors.New("theauth: Admin requires RBAC to be enabled")

+ var ErrForbidden = errors.New("theauth: forbidden")

+ var ErrNoActiveOrg = errors.New("theauth: session has no active organization")

+ var ErrOrgMismatch = errors.New("theauth: session active organization does not match resource")

+ var ErrRBACDisabled = errors.New("theauth: RBAC disabled (Config.RBAC is nil)")

+ var ErrRoleInUse = errors.New("theauth: role in use")

+ var ErrUnknownPermission = errors.New("theauth: unknown permission")

+ func DefaultRedactor(metadata map[string]any) map[string]any

+ func HashEmailForAudit(email string) string

+ func SeededSecretKeys() []string

+ func WithAuditMetadata(ctx context.Context, md AuditMetadata) context.Context

+ type AdminConfig struct

+ PathPrefix string

+ type AuditConfig struct

+ BatchSize int

+ BufferSize int

+ DrainTimeout time.Duration

+ FlushInterval time.Duration

+ Redactor func(metadata map[string]any) map[string]any

type AuditEvent

+ ActorSessionID *ULID

+ ActorUserID *ULID

+ CreatedAt time.Time

+ ID ULID

+ IP string

+ Metadata map[string]any

+ TargetID string

+ TargetType string

+ UserAgent string

+ type AuditMetadata struct

+ ActorUserID *ULID

+ IP string

+ OrganizationID *ULID

+ UserAgent string

+ type AuditQuery struct

+ Action string

+ ActorUserID *ULID

+ After string

+ Limit int

+ OrganizationID *ULID

+ Since *time.Time

+ TargetID string

+ TargetType string

+ Until *time.Time

type Config

+ Admin *AdminConfig

+ Audit *AuditConfig

+ RBAC *RBACConfig

+ type Permission struct

+ CreatedAt time.Time

+ Description string

+ ID ULID

+ Name string

+ func SeededPermissions() []Permission

+ type RBACConfig struct

+ DefaultRoles []RoleSeed

+ Permissions []Permission

+ type Role struct

+ CreatedAt time.Time

+ Description string

+ ID ULID

+ Name string

+ OrganizationID *ULID

+ Permissions []string

+ UpdatedAt time.Time

+ type RoleSeed struct

+ Description string

+ Name string

+ Permissions []string

+ func DefaultRoleSeeds() []RoleSeed

+ type Stats struct

+ AuditDropped uint64

+ AuditEmitted uint64

+ AuditFailed uint64

+ AuditWritten uint64

type Storage

+ CountUsersWithPermissionInOrg func(ctx context.Context, orgID ULID, perm string) (int, error)

+ DeleteRole func(ctx context.Context, id ULID) error

+ GrantUserRole func(ctx context.Context, ur UserRole) error

+ InsertAuditEvents func(ctx context.Context, events []AuditEvent) error

+ InsertPermission func(ctx context.Context, p Permission) (Permission, error)

+ InsertRole func(ctx context.Context, r Role) (Role, error)

+ ListPermissions func(ctx context.Context) ([]Permission, error)

+ PermissionByName func(ctx context.Context, name string) (*Permission, error)

+ PermissionsByRole func(ctx context.Context, roleID ULID) ([]string, error)

+ PermissionsForUser func(ctx context.Context, userID ULID, orgID *ULID) ([]string, error)

+ QueryAuditEvents func(ctx context.Context, q AuditQuery) (events []AuditEvent, nextCursor string, err error)

+ RevokeUserRole func(ctx context.Context, userID, roleID ULID) error

+ RoleByID func(ctx context.Context, id ULID) (*Role, error)

+ RoleByOrgAndName func(ctx context.Context, orgID *ULID, name string) (*Role, error)

+ RolesByOrganization func(ctx context.Context, orgID *ULID) ([]Role, error)

+ RolesForUser func(ctx context.Context, userID ULID, orgID *ULID) ([]Role, error)

+ SetRolePermissions func(ctx context.Context, roleID ULID, permissionIDs []ULID) error

+ UpdateRoleRow func(ctx context.Context, r Role) (Role, error)

+ type TargetRef struct

+ ID string

+ Type string

type TheAuth

+ func (a *TheAuth) CreateRole(ctx context.Context, orgID ULID, name, description string, perms []string) (Role, error)

+ func (a *TheAuth) DeleteRole(ctx context.Context, roleID ULID) error

+ func (a *TheAuth) EmitAudit(ctx context.Context, action string, target TargetRef, metadata map[string]any)

+ func (a *TheAuth) GrantRole(ctx context.Context, actor, target, roleID ULID) error

+ func (a *TheAuth) HasPermission(ctx context.Context, userID ULID, orgID *ULID, perm string) (bool, error)

+ func (a *TheAuth) PermissionsForUser(ctx context.Context, userID ULID, orgID *ULID) ([]string, error)

+ func (a *TheAuth) QueryAudit(ctx context.Context, q AuditQuery) ([]AuditEvent, string, error)

+ func (a *TheAuth) RequirePermission(perms ...string) func(http.Handler) http.Handler

+ func (a *TheAuth) RevokeRole(ctx context.Context, actor, target, roleID ULID) error

+ func (a *TheAuth) SeedOrganizationRoles(ctx context.Context, orgID ULID) error

+ func (a *TheAuth) SeedPermissions(ctx context.Context) ([]Permission, error)

+ func (a *TheAuth) Start() error

+ func (a *TheAuth) Stats() Stats

+ func (a *TheAuth) UpdateRole(ctx context.Context, roleID ULID, name, description string, perms []string) (Role, error)

+ type UserRole struct

+ GrantedAt time.Time

+ GrantedBy *ULID

+ RoleID ULID

+ UserID ULID

v0

v0.7.0

Jun 21, 2026

Changes in this version

+ const OrgRoleAdmin

+ const OrgRoleMember

+ const OrgRoleOwner

+ var ErrLastOwner = errors.New("theauth: cannot remove the last owner")

+ var ErrSAMLInvalidAssertion = errors.New("theauth: saml assertion invalid")

+ var ErrSAMLMissingEmail = errors.New("theauth: saml assertion missing email attribute")

+ var ErrSAMLRequiresOrganizations = errors.New("theauth: SAML requires Organizations to be enabled")

+ var ErrSAMLUnsignedAssertion = errors.New("theauth: saml assertion not signed")

+ var ErrSCIMRequiresOrganizations = errors.New("theauth: SCIM requires Organizations to be enabled")

+ var ErrSlugTaken = errors.New("theauth: organization slug already taken")

+ var ErrUnsupportedFilter = errors.New("theauth: scim filter not supported")

+ type AuditEvent struct

+ Action string

+ ActorID ULID

+ At time.Time

+ Detail string

+ OrganizationID ULID

+ ResourceID ULID

+ type AuditHook func(ctx context.Context, event AuditEvent)

type Config

+ AuditHook AuditHook

+ Organizations *OrganizationsConfig

+ SAML *SAMLConfig

+ SCIM *SCIMConfig

+ type Group struct

+ CreatedAt time.Time

+ DisplayName string

+ ExternalID string

+ ID ULID

+ OrganizationID ULID

+ UpdatedAt time.Time

+ type Organization struct

+ CreatedAt time.Time

+ ID ULID

+ Name string

+ Slug string

+ UpdatedAt time.Time

+ type OrganizationMember struct

+ JoinedAt time.Time

+ OrganizationID ULID

+ Role string

+ UserID ULID

+ type OrganizationsConfig struct

+ type SAMLAttributeMap struct

+ Email string

+ Extra map[string]string

+ FamilyName string

+ GivenName string

+ Groups string

+ Name string

+ func DefaultSAMLAttributeMap() SAMLAttributeMap

+ type SAMLConfig struct

+ AuthnRequestTTL time.Duration

+ ClockSkew time.Duration

+ SPCertificatePEM []byte

+ SPPrivateKeyPEM []byte

+ type SAMLConnection struct

+ AttributeMap SAMLAttributeMap

+ CreatedAt time.Time

+ ID ULID

+ IdPEntityID string

+ IdPSSOURL string

+ IdPX509Cert string

+ OrganizationID ULID

+ SPACSURL string

+ SPEntityID string

+ UpdatedAt time.Time

+ type SAMLConnectionInput struct

+ AttributeMap SAMLAttributeMap

+ IdPEntityID string

+ IdPSSOURL string

+ IdPX509Cert string

+ OrganizationID ULID

+ SPACSURL string

+ SPEntityID string

+ type SAMLIdentity struct

+ ConnectionID ULID

+ CreatedAt time.Time

+ ID ULID

+ LastLoginAt *time.Time

+ NameID string

+ NameIDFormat string

+ UserID ULID

+ type SCIMConfig struct

+ MaxPageSize int

+ RequireHTTPS bool

+ type SCIMGroupFilter struct

+ DisplayName string

+ ExternalID string

+ type SCIMToken struct

+ CreatedAt time.Time

+ ID ULID

+ LastUsedAt *time.Time

+ Name string

+ OrganizationID ULID

+ RevokedAt *time.Time

+ TokenHash []byte

+ type SCIMUserFilter struct

+ Email string

+ ExternalID string

+ UserName string

type Session

+ ActiveOrganizationID *ULID

type Storage

+ AddGroupMembers func(ctx context.Context, groupID ULID, userIDs []ULID) error

+ DeleteGroup func(ctx context.Context, id ULID) error

+ DeleteOrganization func(ctx context.Context, id ULID) error

+ DeleteOrganizationMember func(ctx context.Context, orgID, userID ULID) error

+ DeleteSAMLConnection func(ctx context.Context, id ULID) error

+ GroupByExternalIDInOrg func(ctx context.Context, orgID ULID, externalID string) (*Group, error)

+ GroupByID func(ctx context.Context, id ULID) (*Group, error)

+ GroupMembers func(ctx context.Context, groupID ULID) ([]ULID, error)

+ InsertGroup func(ctx context.Context, g Group) (Group, error)

+ InsertOrganization func(ctx context.Context, o Organization) (Organization, error)

+ InsertSAMLConnection func(ctx context.Context, c SAMLConnection) (SAMLConnection, error)

+ InsertSCIMToken func(ctx context.Context, t SCIMToken) (SCIMToken, error)

+ ListGroupsByOrganization func(ctx context.Context, orgID ULID, offset, limit int, filter SCIMGroupFilter) (groups []Group, total int, err error)

+ ListUsersByOrganization func(ctx context.Context, orgID ULID, offset, limit int, filter SCIMUserFilter) (users []User, total int, err error)

+ OrganizationByID func(ctx context.Context, id ULID) (*Organization, error)

+ OrganizationBySlug func(ctx context.Context, slug string) (*Organization, error)

+ OrganizationMemberRole func(ctx context.Context, orgID, userID ULID) (string, error)

+ OrganizationMembersByOrg func(ctx context.Context, orgID ULID) ([]OrganizationMember, error)

+ OrganizationsByUser func(ctx context.Context, userID ULID) ([]Organization, error)

+ RemoveGroupMembers func(ctx context.Context, groupID ULID, userIDs []ULID) error

+ RevokeSCIMTokenByID func(ctx context.Context, id ULID, at time.Time) error

+ SAMLConnectionByID func(ctx context.Context, id ULID) (*SAMLConnection, error)

+ SAMLConnectionsByOrg func(ctx context.Context, orgID ULID) ([]SAMLConnection, error)

+ SAMLIdentityByConnectionAndNameID func(ctx context.Context, connectionID ULID, nameID string) (*SAMLIdentity, error)

+ SCIMTokenByHash func(ctx context.Context, hash []byte) (*SCIMToken, error)

+ SCIMTokensByOrg func(ctx context.Context, orgID ULID) ([]SCIMToken, error)

+ SetGroupMembers func(ctx context.Context, groupID ULID, userIDs []ULID) error

+ SetSessionActiveOrganization func(ctx context.Context, sessionID ULID, orgID *ULID) error

+ TouchSAMLIdentityLastLogin func(ctx context.Context, id ULID, at time.Time) error

+ TouchSCIMTokenLastUsed func(ctx context.Context, id ULID, at time.Time) error

+ UpdateGroup func(ctx context.Context, g Group) error

+ UpdateOrganization func(ctx context.Context, o Organization) error

+ UpdateSAMLConnectionRow func(ctx context.Context, c SAMLConnection) error

+ UpdateUserSCIM func(ctx context.Context, u User) error

+ UpsertOrganizationMember func(ctx context.Context, m OrganizationMember) error

+ UpsertSAMLIdentity func(ctx context.Context, i SAMLIdentity) (SAMLIdentity, error)

+ UserByExternalIDInOrg func(ctx context.Context, orgID ULID, externalID string) (*User, error)

type TheAuth

+ func (a *TheAuth) AddOrganizationMember(ctx context.Context, orgID, userID ULID, role string) error

+ func (a *TheAuth) AuthenticateSCIMToken(ctx context.Context, presented string) (ULID, error)

+ func (a *TheAuth) BeginSAMLLogin(ctx context.Context, connectionID ULID, relayState string) (string, error)

+ func (a *TheAuth) CreateOrganization(ctx context.Context, name, slug string, ownerUserID ULID) (Organization, error)

+ func (a *TheAuth) CreateSAMLConnection(ctx context.Context, in SAMLConnectionInput) (SAMLConnection, error)

+ func (a *TheAuth) CreateSCIMToken(ctx context.Context, orgID ULID, name string) (string, SCIMToken, error)

+ func (a *TheAuth) DeleteSAMLConnection(ctx context.Context, id ULID) error

+ func (a *TheAuth) FinishSAMLLogin(ctx context.Context, connectionID ULID, samlResponseB64 string, ua, ip string) (string, Session, error)

+ func (a *TheAuth) ListOrganizationMembers(ctx context.Context, orgID ULID) ([]OrganizationMember, error)

+ func (a *TheAuth) ListSAMLConnections(ctx context.Context, orgID ULID) ([]SAMLConnection, error)

+ func (a *TheAuth) ListSCIMTokens(ctx context.Context, orgID ULID) ([]SCIMToken, error)

+ func (a *TheAuth) ListUserOrganizations(ctx context.Context, userID ULID) ([]Organization, error)

+ func (a *TheAuth) OrganizationByID(ctx context.Context, id ULID) (*Organization, error)

+ func (a *TheAuth) OrganizationBySlug(ctx context.Context, slug string) (*Organization, error)

+ func (a *TheAuth) RemoveOrganizationMember(ctx context.Context, orgID, userID ULID) error

+ func (a *TheAuth) RevokeSCIMToken(ctx context.Context, id ULID) error

+ func (a *TheAuth) SAMLConnectionByID(ctx context.Context, id ULID) (*SAMLConnection, error)

+ func (a *TheAuth) SAMLMetadataXML(ctx context.Context, connectionID ULID) ([]byte, error)

+ func (a *TheAuth) SetActiveOrganization(ctx context.Context, sessionID ULID, orgID *ULID) error

+ func (a *TheAuth) UpdateSAMLConnection(ctx context.Context, id ULID, in SAMLConnectionInput) (SAMLConnection, error)

type User

+ DisplayName string

+ ExternalID string

+ FamilyName string

+ GivenName string

v0.6.0

Jun 21, 2026

v0.5.0

Jun 21, 2026

Changes in this version

+ const AuthLevelFull

+ const AuthLevelPending2FA

+ const CodeAlreadyEnrolled

+ const CodeInvalidTOTP

+ const CodeTOTPRequired

+ const CodeWebAuthn

+ var ErrAlreadyEnrolled = errors.New("theauth: totp already enrolled")

+ var ErrReplayDetected = errors.New("theauth: webauthn sign count replay detected")

type Config

+ TOTP *TOTPConfig

+ WebAuthn *WebAuthnConfig

+ type EnrollTOTPResult struct

+ EnrollmentID string

+ OTPAuthURL string

+ Secret string

+ type RecoveryCode struct

+ CodeHash []byte

+ CreatedAt time.Time

+ ID ULID

+ UsedAt *time.Time

+ UserID ULID

type Session

+ AuthLevel string

+ type SigninStep string

+ const SigninStepFull

+ const SigninStepTOTPRequired

type Storage

+ ConfirmTOTPSecret func(ctx context.Context, userID ULID, at time.Time) error

+ ConsumeRecoveryCode func(ctx context.Context, userID ULID, code string, at time.Time) error

+ CreateSessionWithAuthLevel func(ctx context.Context, s Session) (Session, error)

+ DeleteTOTPSecret func(ctx context.Context, userID ULID) error

+ DeleteWebAuthnCredential func(ctx context.Context, id ULID, userID ULID) error

+ InsertRecoveryCodes func(ctx context.Context, codes []RecoveryCode) error

+ InsertWebAuthnCredential func(ctx context.Context, c WebAuthnCredential) (WebAuthnCredential, error)

+ TOTPSecretByUserID func(ctx context.Context, userID ULID) (*TOTPSecret, error)

+ UpdateSessionAuthLevel func(ctx context.Context, id ULID, level string) error

+ UpdateWebAuthnSignCount func(ctx context.Context, credentialID []byte, newCount uint32, usedAt time.Time) error

+ UpsertPendingTOTPSecret func(ctx context.Context, s TOTPSecret) error

+ WebAuthnCredentialByCredentialID func(ctx context.Context, credentialID []byte) (*WebAuthnCredential, error)

+ WebAuthnCredentialsByUserID func(ctx context.Context, userID ULID) ([]WebAuthnCredential, error)

+ type TOTPConfig struct

+ Issuer string

+ RecoveryCodeCount int

+ type TOTPSecret struct

+ ConfirmedAt *time.Time

+ CreatedAt time.Time

+ SecretEnc []byte

+ UpdatedAt time.Time

+ UserID ULID

type TheAuth

+ func (a *TheAuth) BeginPasskeyLogin(_ context.Context) (*protocol.CredentialAssertion, string, error)

+ func (a *TheAuth) BeginPasskeyRegistration(ctx context.Context, userID ULID) (*protocol.CredentialCreation, string, error)

+ func (a *TheAuth) BeginTOTPEnrollment(ctx context.Context, userID ULID, accountName string) (EnrollTOTPResult, error)

+ func (a *TheAuth) ConsumeRecoveryCode(ctx context.Context, pendingSessionToken, code string) (string, Session, error)

+ func (a *TheAuth) FinishPasskeyLogin(ctx context.Context, challengeToken string, body io.Reader, ua, ip string) (string, Session, error)

+ func (a *TheAuth) FinishPasskeyRegistration(ctx context.Context, userID ULID, challengeToken, name string, body io.Reader) (WebAuthnCredential, error)

+ func (a *TheAuth) FinishTOTPEnrollment(ctx context.Context, userID ULID, enrollmentID, code string) ([]string, error)

+ func (a *TheAuth) IssuePending2FA(ctx context.Context, userID ULID, ua, ip string) (string, Session, error)

+ func (a *TheAuth) RequirePendingOrFull() func(http.Handler) http.Handler

+ func (a *TheAuth) VerifyTOTP(ctx context.Context, pendingSessionToken, code string) (string, Session, error)

+ type WebAuthnConfig struct

+ ChallengeTTL time.Duration

+ RPDisplayName string

+ RPID string

+ RPOrigins []string

+ type WebAuthnCredential struct

+ AAGUID []byte

+ CreatedAt time.Time

+ CredentialID []byte

+ ID ULID

+ LastUsedAt *time.Time

+ Name string

+ PublicKey []byte

+ SignCount uint32

+ Transports []string

+ UserID ULID

v0.4.0

Jun 21, 2026

v0.3.0

Jun 21, 2026

Changes in this version

type Config

+ EncryptionKey []byte

+ PostLoginRedirect string

+ Providers []Provider

+ type OAuthAccount struct

+ AccessTokenEnc []byte

+ CreatedAt time.Time

+ ExpiresAt *time.Time

+ ID ULID

+ Provider string

+ ProviderUserID string

+ RefreshTokenEnc []byte

+ Scope string

+ UpdatedAt time.Time

+ UserID ULID

+ type Provider interface

+ AuthURL func(state, codeChallenge, redirectURI string, scopes []string) string

+ ExchangeCode func(ctx context.Context, code, codeVerifier, redirectURI string) (*ProviderToken, error)

+ Name func() string

+ UserInfo func(ctx context.Context, token *ProviderToken) (*ProviderUser, error)

+ type ProviderToken struct

+ AccessToken string

+ ExpiresAt time.Time

+ RefreshToken string

+ Scope string

+ TokenType string

+ type ProviderUser struct

+ AvatarURL string

+ Email string

+ EmailVerified bool

+ ID string

+ Name string

type Storage

+ OAuthAccountByProviderUserID func(ctx context.Context, provider, providerUserID string) (*OAuthAccount, error)

+ UpsertOAuthAccount func(ctx context.Context, a OAuthAccount) (OAuthAccount, error)

type TheAuth

+ func (a *TheAuth) Close()

v0.2.0

Jun 20, 2026

Changes in this version

+ const CodeEmailTaken

+ const CodeInvalidCredentials

+ const CodePasswordResetExpired

+ const CodePasswordResetInvalid

+ const CodeRateLimited

+ const CodeWeakPassword

+ const MinPasswordLength

+ const PasswordResetTTL

type Config

+ RateLimitPerEmail int

+ RateLimitPerIP int

+ type PasswordResetToken struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ ID ULID

+ TokenHash []byte

+ UsedAt *time.Time

+ UserID ULID

type Storage

+ ConsumePasswordResetToken func(ctx context.Context, tokenHash []byte) (*PasswordResetToken, error)

+ CreatePasswordResetToken func(ctx context.Context, t PasswordResetToken) error

+ SetUserPassword func(ctx context.Context, userID ULID, passwordHash string) error

+ UserByEmailWithPassword func(ctx context.Context, email string) (user *User, passwordHash string, err error)

type TheAuth

+ func (a *TheAuth) RateLimitByEmail(perMinute int) func(http.Handler) http.Handler

+ func (a *TheAuth) RateLimitByIP(perMinute int) func(http.Handler) http.Handler

+ type TheAuthError struct

+ Code string

+ Inner error

+ Message string

+ func NewError(code, message string, inner error) *TheAuthError

+ func (e *TheAuthError) Error() string

+ func (e *TheAuthError) Is(target error) bool

+ func (e *TheAuthError) Unwrap() error

v0.1.1

Jun 20, 2026

v0.1.0

Jun 20, 2026

Changes in this version

+ var ErrEmailNotVerified = errors.New("theauth: email not verified")

+ var ErrInvalidToken = errors.New("theauth: invalid token")

+ var ErrMagicLinkExpired = errors.New("theauth: magic link expired")

+ var ErrMagicLinkUsed = errors.New("theauth: magic link already used")

+ var ErrSessionExpired = errors.New("theauth: session expired")

+ var ErrStorageNotFound = errors.New("theauth: storage row not found")

+ var ErrUserNotFound = errors.New("theauth: user not found")

+ type Config struct

+ BaseURL string

+ CookieName string

+ EmailSender email.Sender

+ MagicLinkTTL time.Duration

+ SecureCookie bool

+ SessionTTL time.Duration

+ SigningKey ed25519.PrivateKey

+ Storage Storage

+ type MagicLink struct

+ CreatedAt time.Time

+ Email string

+ ExpiresAt time.Time

+ ID ULID

+ TokenHash []byte

+ UsedAt *time.Time

+ type Session struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ ID ULID

+ IP string

+ RevokedAt *time.Time

+ TokenHash []byte

+ UserAgent string

+ UserID ULID

+ func SessionFromContext(ctx context.Context) (*Session, bool)

+ func (s Session) Expired(now time.Time) bool

+ type Storage interface

+ ConsumeMagicLink func(ctx context.Context, tokenHash []byte) (*MagicLink, error)

+ CreateMagicLink func(ctx context.Context, ml MagicLink) error

+ CreateSession func(ctx context.Context, s Session) (Session, error)

+ CreateUser func(ctx context.Context, u User) (User, error)

+ MarkEmailVerified func(ctx context.Context, userID ULID) error

+ RevokeSession func(ctx context.Context, id ULID) error

+ RevokeUserSessions func(ctx context.Context, userID ULID) error

+ SessionByTokenHash func(ctx context.Context, hash []byte) (*Session, error)

+ UserByEmail func(ctx context.Context, email string) (*User, error)

+ UserByID func(ctx context.Context, id ULID) (*User, error)

+ type TheAuth struct

+ func New(cfg Config) (*TheAuth, error)

+ func (a *TheAuth) Authn() func(http.Handler) http.Handler

+ func (a *TheAuth) Mount(r chi.Router)

+ func (a *TheAuth) RequireAuth() func(http.Handler) http.Handler

+ type ULID = ulid.ULID

+ type User struct

+ AvatarURL string

+ CreatedAt time.Time

+ Email string

+ EmailVerifiedAt *time.Time

+ ID ULID

+ Name string

+ UpdatedAt time.Time

+ func UserFromContext(ctx context.Context) (*User, bool)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL