auth

Documentation

Index

• Variables
• func AuthMiddleware(c Config) func(next http.Handler) http.Handler
• func ContextWithAuthInfo(ctx context.Context, info *AuthInfo) context.Context
• func ContextWithFullAccess(ctx context.Context) context.Context
• func GenerateToken(privateKey []byte, claims jwt.MapClaims) (string, error)
• func IsFullAccess(ctx context.Context) bool
• func ParsePrivateKey(key []byte) (interface{}, error)
• type AnonymousConfig
• type AnonymousProvider
  • func NewAnonymous(config AnonymousConfig) *AnonymousProvider
  • func (p *AnonymousProvider) Authenticate(r *http.Request) (*AuthInfo, error)
  • func (p *AnonymousProvider) Name() string
  • func (p *AnonymousProvider) Type() string
• type ApiKeyConfig
• type ApiKeyProvider
  • func NewApiKey(name string, config ApiKeyConfig) *ApiKeyProvider
  • func (p *ApiKeyProvider) Authenticate(r *http.Request) (*AuthInfo, error)
  • func (p *ApiKeyProvider) Name() string
  • func (p *ApiKeyProvider) Type() string
• type AuthInfo
  • func AuthInfoFromContext(ctx context.Context) *AuthInfo
• type AuthProvider
• type Config
  • func (c *Config) Info() []ProviderInfo
• type CookieExtractor
  • func (c CookieExtractor) ExtractToken(r *http.Request) (string, error)
• type DBApiKey
  • func NewDBApiKey(qe types.Querier, name, headerName string) *DBApiKey
  • func (p *DBApiKey) Authenticate(r *http.Request) (*AuthInfo, error)
  • func (p *DBApiKey) Name() string
  • func (p *DBApiKey) Type() string
• type JwtConfig
• type JwtProvider
  • func NewJwt(config *JwtConfig) (*JwtProvider, error)
  • func (p *JwtProvider) Authenticate(r *http.Request) (*AuthInfo, error)
  • func (p *JwtProvider) Name() string
  • func (p *JwtProvider) Type() string
• type ProviderInfo
• type UserAuthInfoConfig

Variables

var ErrForbidden = errors.New("forbidden")

var ErrNeedAuth = errors.New("authentication required")

Functions

func AuthMiddleware

func AuthMiddleware(c Config) func(next http.Handler) http.Handler

Provide middleware for authentication Checks if api key allowed or token is valid Get user and role from headers or token if request is anonymous, check if it allowed and add role

func ContextWithAuthInfo

func ContextWithAuthInfo(ctx context.Context, info *AuthInfo) context.Context

func ContextWithFullAccess

func ContextWithFullAccess(ctx context.Context) context.Context

func GenerateToken

func GenerateToken(privateKey []byte, claims jwt.MapClaims) (string, error)

func IsFullAccess

func IsFullAccess(ctx context.Context) bool

func ParsePrivateKey

func ParsePrivateKey(key []byte) (interface{}, error)

Types

type AnonymousConfig

type AnonymousConfig struct {
	Allowed bool   `json:"allowed" yaml:"allowed"`
	Role    string `json:"role" yaml:"role"`
}

type AnonymousProvider

type AnonymousProvider struct {
	Config AnonymousConfig
}

func NewAnonymous

func NewAnonymous(config AnonymousConfig) *AnonymousProvider

func (*AnonymousProvider) Authenticate

func (p *AnonymousProvider) Authenticate(r *http.Request) (*AuthInfo, error)

func (*AnonymousProvider) Name

func (p *AnonymousProvider) Name() string

func (*AnonymousProvider) Type

func (p *AnonymousProvider) Type() string

type ApiKeyConfig

type ApiKeyConfig struct {
	Key         string `json:"key" yaml:"key"`
	Header      string `json:"header" yaml:"header"`
	DefaultRole string `json:"default_role" yaml:"default-role"`

	Headers UserAuthInfoConfig `json:"headers" yaml:"headers"`
}

type ApiKeyProvider

type ApiKeyProvider struct {
	// contains filtered or unexported fields
}

func NewApiKey

func NewApiKey(name string, config ApiKeyConfig) *ApiKeyProvider

func (*ApiKeyProvider) Authenticate

func (p *ApiKeyProvider) Authenticate(r *http.Request) (*AuthInfo, error)

func (*ApiKeyProvider) Name

func (p *ApiKeyProvider) Name() string

func (*ApiKeyProvider) Type

func (p *ApiKeyProvider) Type() string

type AuthInfo

type AuthInfo struct {
	Role     string
	UserId   string
	UserName string

	AuthType     string
	AuthProvider string
	Token        string
}

func AuthInfoFromContext

func AuthInfoFromContext(ctx context.Context) *AuthInfo

type AuthProvider

type AuthProvider interface {
	Authenticate(r *http.Request) (*AuthInfo, error)
	Name() string
	Type() string
}

type Config

type Config struct {
	Providers []AuthProvider

	RedirectLoginPaths []string
	LoginUrl           string
	RedirectUrl        string
	DBApiKeysEnabled   bool
}

func (*Config) Info

func (c *Config) Info() []ProviderInfo

type CookieExtractor

type CookieExtractor string

func (CookieExtractor) ExtractToken

func (c CookieExtractor) ExtractToken(r *http.Request) (string, error)

type DBApiKey

type DBApiKey struct {
	// contains filtered or unexported fields
}

func NewDBApiKey

func NewDBApiKey(qe types.Querier, name, headerName string) *DBApiKey

func (*DBApiKey) Authenticate

func (p *DBApiKey) Authenticate(r *http.Request) (*AuthInfo, error)

func (*DBApiKey) Name

func (p *DBApiKey) Name() string

func (*DBApiKey) Type

func (p *DBApiKey) Type() string

type JwtConfig

type JwtConfig struct {
	Issuer    string `json:"issuer" yaml:"issuer"`
	PublicKey []byte `json:"public_key" yaml:"public-key"`

	CookieName string `json:"cookie_name" yaml:"cookie-name"`

	ScopeRolePrefix string `json:"scope_role_prefix" yaml:"scope-role-prefix"`
	// RoleHeader is the header to check for role if not in claims than check that scope contains prefix+role (if the many roles a)
	RoleHeader string             `json:"role_header" yaml:"role-header"`
	Claims     UserAuthInfoConfig `json:"claims" yaml:"claims"`
}

type JwtProvider

type JwtProvider struct {
	Issuer string
	// contains filtered or unexported fields
}

func NewJwt

func NewJwt(config *JwtConfig) (*JwtProvider, error)

func (*JwtProvider) Authenticate

func (p *JwtProvider) Authenticate(r *http.Request) (*AuthInfo, error)

func (*JwtProvider) Name

func (p *JwtProvider) Name() string

func (*JwtProvider) Type

func (p *JwtProvider) Type() string

type ProviderInfo

type ProviderInfo struct {
	Name string `json:"name" yaml:"name"`
	Type string `json:"type" yaml:"type"`
}

type UserAuthInfoConfig

type UserAuthInfoConfig struct {
	Role     string `json:"role" yaml:"role"`
	UserId   string `json:"user_id" yaml:"user-id"`
	UserName string `json:"user_name" yaml:"user-name"`
}