certauth

Documentation

Overview

Package certauth

Index

• Variables
• func HashCert(cert *x509.Certificate) string
• type CertAuth
  • func New(next service.CheckinAndCommandService, storage storage.CertAuthStore, ...) *CertAuth
  • func (s *CertAuth) Authenticate(r *mdm.Request, m *mdm.Authenticate) error
  • func (s *CertAuth) CheckOut(r *mdm.Request, m *mdm.CheckOut) error
  • func (s *CertAuth) CommandAndReportResults(r *mdm.Request, results *mdm.CommandResults) (*mdm.Command, error)
  • func (s *CertAuth) DeclarativeManagement(r *mdm.Request, m *mdm.DeclarativeManagement) ([]byte, error)
  • func (s *CertAuth) GetBootstrapToken(r *mdm.Request, m *mdm.GetBootstrapToken) (*mdm.BootstrapToken, error)
  • func (s *CertAuth) SetBootstrapToken(r *mdm.Request, m *mdm.SetBootstrapToken) error
  • func (s *CertAuth) TokenUpdate(r *mdm.Request, m *mdm.TokenUpdate) error
  • func (s *CertAuth) UserAuthenticate(r *mdm.Request, m *mdm.UserAuthenticate) ([]byte, error)
• type Option
  • func WithAllowRetroactive() Option
  • func WithLogger(logger log.Logger) Option

Variables

var (
	ErrNoCertReuse = errors.New("cert re-use not permitted")
	ErrNoCertAssoc = errors.New("enrollment not associated with cert")
	ErrMissingCert = errors.New("missing MDM certificate")
)

Functions

func HashCert

func HashCert(cert *x509.Certificate) string

HashCert returns the string representation

Types

type CertAuth

type CertAuth struct {
	// contains filtered or unexported fields
}

func New

func New(next service.CheckinAndCommandService, storage storage.CertAuthStore, opts ...Option) *CertAuth

New creates a new certificate authorization middleware service. It will forward requests to next or return errors for failing authentication.

func (*CertAuth) Authenticate

func (s *CertAuth) Authenticate(r *mdm.Request, m *mdm.Authenticate) error

func (*CertAuth) CheckOut

func (s *CertAuth) CheckOut(r *mdm.Request, m *mdm.CheckOut) error

func (*CertAuth) CommandAndReportResults

func (s *CertAuth) CommandAndReportResults(r *mdm.Request, results *mdm.CommandResults) (*mdm.Command, error)

func (*CertAuth) DeclarativeManagement

func (s *CertAuth) DeclarativeManagement(r *mdm.Request, m *mdm.DeclarativeManagement) ([]byte, error)

func (*CertAuth) GetBootstrapToken

func (s *CertAuth) GetBootstrapToken(r *mdm.Request, m *mdm.GetBootstrapToken) (*mdm.BootstrapToken, error)

func (*CertAuth) SetBootstrapToken

func (s *CertAuth) SetBootstrapToken(r *mdm.Request, m *mdm.SetBootstrapToken) error

func (*CertAuth) TokenUpdate

func (s *CertAuth) TokenUpdate(r *mdm.Request, m *mdm.TokenUpdate) error

func (*CertAuth) UserAuthenticate

func (s *CertAuth) UserAuthenticate(r *mdm.Request, m *mdm.UserAuthenticate) ([]byte, error)

type Option

type Option func(*CertAuth)

func WithAllowRetroactive

func WithAllowRetroactive() Option

func WithLogger

func WithLogger(logger log.Logger) Option