auth

Documentation

Index

• Variables
• func PasswordVerify(encryptedPassword, password string) error
• type LoginRecorder
  • func NewLoginRecorder(ksClient kubesphere.Interface, userLister iamv1alpha2listers.UserLister) LoginRecorder
• type OAuthAuthenticator
  • func NewOAuthAuthenticator(ksClient kubesphere.Interface, ksInformer informers.SharedInformerFactory, ...) OAuthAuthenticator
• type PasswordAuthenticator
  • func NewPasswordAuthenticator(ksClient kubesphere.Interface, userLister iamv1alpha2listers.UserLister, ...) PasswordAuthenticator
• type TokenManagementInterface
  • func NewTokenOperator(cache cache.Interface, options *authoptions.AuthenticationOptions) TokenManagementInterface

Variables

var (
	RateLimitExceededError  = fmt.Errorf("auth rate limit exceeded")
	IncorrectPasswordError  = fmt.Errorf("incorrect password")
	AccountIsNotActiveError = fmt.Errorf("account is not active")
)

Functions

func PasswordVerify

func PasswordVerify(encryptedPassword, password string) error

Types

type LoginRecorder

type LoginRecorder interface {
	RecordLogin(username string, loginType iamv1alpha2.LoginType, provider string, sourceIP string, userAgent string, authErr error) error
}

func NewLoginRecorder

func NewLoginRecorder(ksClient kubesphere.Interface, userLister iamv1alpha2listers.UserLister) LoginRecorder

type OAuthAuthenticator

type OAuthAuthenticator interface {
	Authenticate(provider, code string) (authuser.Info, string, error)
}

func NewOAuthAuthenticator

func NewOAuthAuthenticator(ksClient kubesphere.Interface,
	ksInformer informers.SharedInformerFactory,
	options *authoptions.AuthenticationOptions) OAuthAuthenticator

type PasswordAuthenticator

type PasswordAuthenticator interface {
	Authenticate(username, password string) (authuser.Info, string, error)
}

func NewPasswordAuthenticator

func NewPasswordAuthenticator(ksClient kubesphere.Interface,
	userLister iamv1alpha2listers.UserLister,
	options *authoptions.AuthenticationOptions) PasswordAuthenticator

type TokenManagementInterface

type TokenManagementInterface interface {
	// Verify verifies a token, and return a User if it's a valid token, otherwise return error
	Verify(token string) (user.Info, error)
	// IssueTo issues a token a User, return error if issuing process failed
	IssueTo(user user.Info) (*oauth.Token, error)
	// RevokeAllUserTokens revoke all user tokens
	RevokeAllUserTokens(username string) error
}

func NewTokenOperator

func NewTokenOperator(cache cache.Interface, options *authoptions.AuthenticationOptions) TokenManagementInterface