ory

Documentation

Index

• type Client
  • func NewClient(cfg Config) *Client
  • func (c *Client) KetoCheck(ctx context.Context, req KetoCheckRequest) (bool, error)
  • func (c *Client) ValidateJWT(ctx context.Context, tokenString string, jwksURL string) (jwt.MapClaims, error)
  • func (c *Client) ValidateSession(ctx context.Context, token string) (*Session, error)
  • func (c *Client) WriteKetoTuple(ctx context.Context, namespace, object, relation, subjectID string) error
• type Config
• type KetoCheckRequest
• type Session

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client wraps Ory Kratos (auth) and Keto (authorization).

func NewClient

func NewClient(cfg Config) *Client

NewClient creates an Ory client (Kratos + Keto).

func (*Client) KetoCheck

func (c *Client) KetoCheck(ctx context.Context, req KetoCheckRequest) (bool, error)

KetoCheck performs an authorization check against Ory Keto.

func (*Client) ValidateJWT

func (c *Client) ValidateJWT(ctx context.Context, tokenString string, jwksURL string) (jwt.MapClaims, error)

ValidateJWT validates a JWT signed by Ory Kratos.

func (*Client) ValidateSession

func (c *Client) ValidateSession(ctx context.Context, token string) (*Session, error)

ValidateSession validates a session cookie or token against Ory Kratos.

func (*Client) WriteKetoTuple

func (c *Client) WriteKetoTuple(ctx context.Context, namespace, object, relation, subjectID string) error

WriteKetoTuple writes a relation tuple to Ory Keto.

type Config

type Config struct {
	KratosPublicURL string
	KetoURL         string
}

Config holds Ory connection settings.

type KetoCheckRequest

type KetoCheckRequest struct {
	Namespace string
	Object    string
	Relation  string
	SubjectID string
}

KetoCheckRequest defines an authorization check against Ory Keto.

type Session

type Session struct {
	Identity struct {
		ID     string         `json:"id"`
		Traits map[string]any `json:"traits"`
	} `json:"identity"`
}

Session holds the validated user session from Kratos.