consent

Oct 27, 2021

Changes in this version

type ConsentRequest

+ AMR sqlxx.StringSlicePipeDelimiter

type HandledLoginRequest

+ AMR sqlxx.StringSlicePipeDelimiter

May 4, 2021

Changes in this version

type HandledConsentRequest

+ WasHandled bool

type HandledLoginRequest

+ WasHandled bool

type LogoutRequest

+ WasHandled bool

type PreviousConsentSession

+ WasHandled bool

+ type RequestWasHandledResponse struct

+ RedirectTo string

Mar 25, 2021

Changes in this version

+ type FlushLoginConsentRequest struct

+ NotAfter time.Time

type HandledConsentRequest

+ func NewHandledConsentRequest(challenge string, hasError bool, requestedAt time.Time, ...) *HandledConsentRequest

type HandledLoginRequest

+ func NewHandledLoginRequest(challenge string, hasError bool, requestedAt time.Time, ...) *HandledLoginRequest

Jan 12, 2021

Changes in this version

type ConsentRequest

+ ID string

+ func (_ ConsentRequest) TableName() string

+ func (r *ConsentRequest) AfterFind(c *pop.Connection) error

+ func (r *ConsentRequest) BeforeSave(_ *pop.Connection) error

+ func (r *ConsentRequest) FindInDB(c *pop.Connection, id string) error

type ForcedObfuscatedLoginSession

+ func (_ *ForcedObfuscatedLoginSession) TableName() string

type HandledConsentRequest

+ ID string

+ func (r *HandledConsentRequest) AfterFind(c *pop.Connection) error

+ func (r *HandledConsentRequest) AfterSave(c *pop.Connection) error

+ func (r *HandledConsentRequest) BeforeSave(_ *pop.Connection) error

type HandledLoginRequest

+ ID string

+ func (r *HandledLoginRequest) AfterUpdate(c *pop.Connection) error

+ func (r *HandledLoginRequest) BeforeSave(_ *pop.Connection) error

type LoginRequest

+ ID string

+ func (_ LoginRequest) TableName() string

+ func (r *LoginRequest) AfterFind(c *pop.Connection) error

+ func (r *LoginRequest) BeforeSave(_ *pop.Connection) error

+ func (r *LoginRequest) FindInDB(c *pop.Connection, id string) error

type LogoutRequest

+ ID string

+ func (_ LogoutRequest) TableName() string

+ func (r *LogoutRequest) AfterFind(c *pop.Connection) error

+ func (r *LogoutRequest) BeforeSave(_ *pop.Connection) error

type PreviousConsentSession

+ ID string

Aug 14, 2020

Changes in this version

+ func CookieName(secure bool, name string) string

Jun 16, 2020

Changes in this version

type HandledConsentRequest

+ func (r HandledConsentRequest) TableName() string

type HandledLoginRequest

+ func (r HandledLoginRequest) TableName() string

type LoginSession

+ func (s LoginSession) TableName() string

Apr 2, 2020

Changes in this version

type ConsentRequest

+ ClientID string

type HandledConsentRequest

+ SessionAccessToken sqlxx.MapStringInterface

+ SessionIDToken sqlxx.MapStringInterface

+ func (r *HandledConsentRequest) HasError() bool

type HandledLoginRequest

+ func (r *HandledLoginRequest) HasError() bool

type LoginRequest

+ ClientID string

+ Context string

type LogoutRequest

+ ClientID sql.NullString

+ Rejected bool

type OpenIDConnectContext

+ func (n *OpenIDConnectContext) Scan(value interface{}) error

+ func (n *OpenIDConnectContext) Value() (driver.Value, error)

type PreviousConsentSession

+ SessionAccessToken sqlxx.MapStringInterface

+ SessionIDToken sqlxx.MapStringInterface

type RequestDeniedError

+ func (e *RequestDeniedError) IsError() bool

+ func (e *RequestDeniedError) Scan(value interface{}) error

+ func (e *RequestDeniedError) SetDefaults(name string)

+ func (e *RequestDeniedError) Value() (driver.Value, error)

Feb 14, 2020

Changes in this version

type HandledConsentRequest

+ HandledAt time.Time

type PreviousConsentSession

+ HandledAt time.Time

Jan 15, 2020

Changes in this version

type ConsentRequest

+ func SaneMockConsentRequest(t *testing.T, m Manager, ar *LoginRequest, skip bool) (c *ConsentRequest)

type HandledConsentRequest

+ func SaneMockHandleConsentRequest(t *testing.T, m Manager, c *ConsentRequest, authAt time.Time, rememberFor int, ...) *HandledConsentRequest

type LoginRequest

+ func SaneMockAuthRequest(t *testing.T, m Manager, ls *LoginSession, cl *client.Client) (c *LoginRequest)

Sep 4, 2019

Changes in this version

+ func AssetDigest(name string) ([sha256.Size]byte, error)

+ func AssetString(name string) (string, error)

+ func Digests() (map[string][sha256.Size]byte, error)

+ func MustAssetString(name string) string

May 8, 2019

Changes in this version

+ const ConsentPath

+ const CookieAuthenticationName

+ const CookieAuthenticationSIDName

+ const LoginPath

+ const LogoutPath

+ const SessionsPath

+ var ErrAbortOAuth2Request = errors.New("the OAuth 2.0 Authorization request must be aborted")

+ var ErrHintDoesNotMatchAuthentication = errors.New("subject from hint does not match subject from session")

+ var ErrNoAuthenticationSessionFound = errors.New("no previous login session was found")

+ var ErrNoPreviousConsentFound = errors.New("no previous OAuth 2.0 Consent could be found for this access request")

+ var Migrations = map[string]*dbal.PackrMigrationSource

+ func Asset(name string) ([]byte, error)

+ func AssetDir(name string) ([]string, error)

+ func AssetInfo(name string) (os.FileInfo, error)

+ func AssetNames() []string

+ func ManagerTests(m Manager, clientManager client.Manager, fositeManager x.FositeStorer) func(t *testing.T)

+ func MockAuthRequest(key string, authAt bool) (c *LoginRequest, h *HandledLoginRequest)

+ func MockConsentRequest(key string, remember bool, rememberFor int, hasError bool, skip bool, ...) (c *ConsentRequest, h *HandledConsentRequest)

+ func MustAsset(name string) []byte

+ func RestoreAsset(dir, name string) error

+ func RestoreAssets(dir, name string) error

+ type Configuration interface

+ type ConsentRequest struct

+ ACR string

+ AuthenticatedAt time.Time

+ CSRF string

+ Challenge string

+ Client *client.Client

+ Context map[string]interface{}

+ ForceSubjectIdentifier string

+ LoginChallenge string

+ LoginSessionID string

+ OpenIDConnectContext *OpenIDConnectContext

+ RequestURL string

+ RequestedAt time.Time

+ RequestedAudience []string

+ RequestedScope []string

+ Skip bool

+ Subject string

+ SubjectIdentifier string

+ Verifier string

+ WasHandled bool

+ type ConsentRequestSessionData struct

+ AccessToken map[string]interface{}

+ IDToken map[string]interface{}

+ func NewConsentRequestSessionData() *ConsentRequestSessionData

+ type DefaultStrategy struct

+ func NewStrategy(r InternalRegistry, c Configuration) *DefaultStrategy

+ func (s *DefaultStrategy) HandleOAuth2AuthorizationRequest(w http.ResponseWriter, r *http.Request, req fosite.AuthorizeRequester) (*HandledConsentRequest, error)

+ func (s *DefaultStrategy) HandleOpenIDConnectLogout(w http.ResponseWriter, r *http.Request) (*LogoutResult, error)

+ type ForcedObfuscatedLoginSession struct

+ ClientID string

+ Subject string

+ SubjectObfuscated string

+ type HandledConsentRequest struct

+ AuthenticatedAt time.Time

+ Challenge string

+ ConsentRequest *ConsentRequest

+ Error *RequestDeniedError

+ GrantedAudience []string

+ GrantedScope []string

+ Remember bool

+ RememberFor int

+ RequestedAt time.Time

+ Session *ConsentRequestSessionData

+ WasUsed bool

+ type HandledLoginRequest struct

+ ACR string

+ AuthenticatedAt time.Time

+ Challenge string

+ Context map[string]interface{}

+ Error *RequestDeniedError

+ ForceSubjectIdentifier string

+ LoginRequest *LoginRequest

+ Remember bool

+ RememberFor int

+ RequestedAt time.Time

+ Subject string

+ WasUsed bool

+ type Handler struct

+ func NewHandler(r InternalRegistry, c Configuration) *Handler

+ func (h *Handler) AcceptConsentRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) AcceptLoginRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) AcceptLogoutRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) DeleteConsentSession(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) DeleteLoginSession(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) GetConsentRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) GetConsentSessions(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) GetLoginRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) GetLogoutRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) RejectConsentRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) RejectLoginRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) RejectLogoutRequest(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) SetRoutes(admin *x.RouterAdmin)

+ type InternalRegistry interface

+ OAuth2Storage func() x.FositeStorer

+ OpenIDConnectRequestValidator func() *openid.OpenIDConnectRequestValidator

+ OpenIDJWTStrategy func() jwk.JWTStrategy

+ ScopeStrategy func() fosite.ScopeStrategy

+ type LoginRequest struct

+ AuthenticatedAt time.Time

+ CSRF string

+ Challenge string

+ Client *client.Client

+ ForceSubjectIdentifier string

+ OpenIDConnectContext *OpenIDConnectContext

+ RequestURL string

+ RequestedAt time.Time

+ RequestedAudience []string

+ RequestedScope []string

+ SessionID string

+ Skip bool

+ Subject string

+ Verifier string

+ WasHandled bool

+ type LoginSession struct

+ AuthenticatedAt time.Time

+ ID string

+ Remember bool

+ Subject string

+ type LogoutRequest struct

+ Accepted bool

+ Challenge string

+ Client *client.Client

+ PostLogoutRedirectURI string

+ RPInitiated bool

+ RequestURL string

+ SessionID string

+ Subject string

+ Verifier string

+ WasUsed bool

+ func MockLogoutRequest(key string, withClient bool) (c *LogoutRequest)

+ type LogoutResult struct

+ FrontChannelLogoutURLs []string

+ RedirectTo string

+ type Manager interface

+ AcceptLogoutRequest func(ctx context.Context, challenge string) (*LogoutRequest, error)

+ ConfirmLoginSession func(ctx context.Context, id string, subject string, remember bool) error

+ CountSubjectsGrantedConsentRequests func(ctx context.Context, user string) (int, error)

+ CreateConsentRequest func(ctx context.Context, req *ConsentRequest) error

+ CreateForcedObfuscatedLoginSession func(ctx context.Context, session *ForcedObfuscatedLoginSession) error

+ CreateLoginRequest func(ctx context.Context, req *LoginRequest) error

+ CreateLoginSession func(ctx context.Context, session *LoginSession) error

+ CreateLogoutRequest func(ctx context.Context, request *LogoutRequest) error

+ DeleteLoginSession func(ctx context.Context, id string) error

+ FindGrantedAndRememberedConsentRequests func(ctx context.Context, client, user string) ([]HandledConsentRequest, error)

+ FindSubjectsGrantedConsentRequests func(ctx context.Context, user string, limit, offset int) ([]HandledConsentRequest, error)

+ GetConsentRequest func(ctx context.Context, challenge string) (*ConsentRequest, error)

+ GetForcedObfuscatedLoginSession func(ctx context.Context, client, obfuscated string) (*ForcedObfuscatedLoginSession, error)

+ GetLoginRequest func(ctx context.Context, challenge string) (*LoginRequest, error)

+ GetLogoutRequest func(ctx context.Context, challenge string) (*LogoutRequest, error)

+ GetRememberedLoginSession func(ctx context.Context, id string) (*LoginSession, error)

+ HandleConsentRequest func(ctx context.Context, challenge string, r *HandledConsentRequest) (*ConsentRequest, error)

+ HandleLoginRequest func(ctx context.Context, challenge string, r *HandledLoginRequest) (*LoginRequest, error)

+ ListUserAuthenticatedClientsWithBackChannelLogout func(ctx context.Context, subject string) ([]client.Client, error)

+ ListUserAuthenticatedClientsWithFrontChannelLogout func(ctx context.Context, subject string) ([]client.Client, error)

+ RejectLogoutRequest func(ctx context.Context, challenge string) error

+ RevokeSubjectClientConsentSession func(ctx context.Context, user, client string) error

+ RevokeSubjectConsentSession func(ctx context.Context, user string) error

+ RevokeSubjectLoginSession func(ctx context.Context, user string) error

+ VerifyAndInvalidateConsentRequest func(ctx context.Context, verifier string) (*HandledConsentRequest, error)

+ VerifyAndInvalidateLoginRequest func(ctx context.Context, verifier string) (*HandledLoginRequest, error)

+ VerifyAndInvalidateLogoutRequest func(ctx context.Context, verifier string) (*LogoutRequest, error)

+ type MemoryManager struct

+ func NewMemoryManager(r InternalRegistry) *MemoryManager

+ func (m *MemoryManager) AcceptLogoutRequest(ctx context.Context, challenge string) (*LogoutRequest, error)

+ func (m *MemoryManager) ConfirmLoginSession(ctx context.Context, id string, subject string, remember bool) error

+ func (m *MemoryManager) CountSubjectsGrantedConsentRequests(ctx context.Context, subject string) (int, error)

+ func (m *MemoryManager) CreateConsentRequest(ctx context.Context, c *ConsentRequest) error

+ func (m *MemoryManager) CreateForcedObfuscatedLoginSession(ctx context.Context, s *ForcedObfuscatedLoginSession) error

+ func (m *MemoryManager) CreateLoginRequest(ctx context.Context, a *LoginRequest) error

+ func (m *MemoryManager) CreateLoginSession(ctx context.Context, a *LoginSession) error

+ func (m *MemoryManager) CreateLogoutRequest(ctx context.Context, r *LogoutRequest) error

+ func (m *MemoryManager) DeleteLoginSession(ctx context.Context, id string) error

+ func (m *MemoryManager) FindGrantedAndRememberedConsentRequests(ctx context.Context, client, subject string) ([]HandledConsentRequest, error)

+ func (m *MemoryManager) FindSubjectsGrantedConsentRequests(ctx context.Context, subject string, limit, offset int) ([]HandledConsentRequest, error)

+ func (m *MemoryManager) GetConsentRequest(ctx context.Context, challenge string) (*ConsentRequest, error)

+ func (m *MemoryManager) GetForcedObfuscatedLoginSession(ctx context.Context, client, obfuscated string) (*ForcedObfuscatedLoginSession, error)

+ func (m *MemoryManager) GetLoginRequest(ctx context.Context, challenge string) (*LoginRequest, error)

+ func (m *MemoryManager) GetLogoutRequest(ctx context.Context, challenge string) (*LogoutRequest, error)

+ func (m *MemoryManager) GetRememberedLoginSession(ctx context.Context, id string) (*LoginSession, error)

+ func (m *MemoryManager) HandleConsentRequest(ctx context.Context, challenge string, r *HandledConsentRequest) (*ConsentRequest, error)

+ func (m *MemoryManager) HandleLoginRequest(ctx context.Context, challenge string, r *HandledLoginRequest) (*LoginRequest, error)

+ func (m *MemoryManager) ListUserAuthenticatedClientsWithBackChannelLogout(ctx context.Context, subject string) ([]client.Client, error)

+ func (m *MemoryManager) ListUserAuthenticatedClientsWithFrontChannelLogout(ctx context.Context, subject string) ([]client.Client, error)

+ func (m *MemoryManager) RejectLogoutRequest(ctx context.Context, challenge string) error

+ func (m *MemoryManager) RevokeSubjectClientConsentSession(ctx context.Context, user, client string) error

+ func (m *MemoryManager) RevokeSubjectConsentSession(ctx context.Context, user string) error

+ func (m *MemoryManager) RevokeSubjectLoginSession(ctx context.Context, user string) error

+ func (m *MemoryManager) VerifyAndInvalidateConsentRequest(ctx context.Context, verifier string) (*HandledConsentRequest, error)

+ func (m *MemoryManager) VerifyAndInvalidateLoginRequest(ctx context.Context, verifier string) (*HandledLoginRequest, error)

+ func (m *MemoryManager) VerifyAndInvalidateLogoutRequest(ctx context.Context, verifier string) (*LogoutRequest, error)

+ type OpenIDConnectContext struct

+ ACRValues []string

+ Display string

+ IDTokenHintClaims map[string]interface{}

+ LoginHint string

+ UILocales []string

+ type PreviousConsentSession struct

+ AuthenticatedAt time.Time

+ Challenge string

+ ConsentRequest *ConsentRequest

+ Error *RequestDeniedError

+ GrantedAudience []string

+ GrantedScope []string

+ Remember bool

+ RememberFor int

+ RequestedAt time.Time

+ Session *ConsentRequestSessionData

+ WasUsed bool

+ type Registry interface

+ ConsentManager func() Manager

+ ConsentStrategy func() Strategy

+ SubjectIdentifierAlgorithm func() map[string]SubjectIdentifierAlgorithm

+ type RequestDeniedError struct

+ Code int

+ Debug string

+ Description string

+ Hint string

+ Name string

+ type RequestHandlerResponse struct

+ RedirectTo string

+ type SQLManager struct

+ DB *sqlx.DB

+ func NewSQLManager(db *sqlx.DB, r InternalRegistry) *SQLManager

+ func (m *SQLManager) AcceptLogoutRequest(ctx context.Context, challenge string) (*LogoutRequest, error)

+ func (m *SQLManager) ConfirmLoginSession(ctx context.Context, id string, subject string, remember bool) error

+ func (m *SQLManager) CountSubjectsGrantedConsentRequests(ctx context.Context, subject string) (int, error)

+ func (m *SQLManager) CreateConsentRequest(ctx context.Context, c *ConsentRequest) error

+ func (m *SQLManager) CreateForcedObfuscatedLoginSession(ctx context.Context, s *ForcedObfuscatedLoginSession) error

+ func (m *SQLManager) CreateLoginRequest(ctx context.Context, c *LoginRequest) error

+ func (m *SQLManager) CreateLoginSession(ctx context.Context, a *LoginSession) error

+ func (m *SQLManager) CreateLogoutRequest(ctx context.Context, r *LogoutRequest) error

+ func (m *SQLManager) CreateSchemas() (int, error)

+ func (m *SQLManager) DeleteLoginSession(ctx context.Context, id string) error

+ func (m *SQLManager) FindGrantedAndRememberedConsentRequests(ctx context.Context, client, subject string) ([]HandledConsentRequest, error)

+ func (m *SQLManager) FindSubjectsGrantedConsentRequests(ctx context.Context, subject string, limit, offset int) ([]HandledConsentRequest, error)

+ func (m *SQLManager) GetConsentRequest(ctx context.Context, challenge string) (*ConsentRequest, error)

+ func (m *SQLManager) GetForcedObfuscatedLoginSession(ctx context.Context, client, obfuscated string) (*ForcedObfuscatedLoginSession, error)

+ func (m *SQLManager) GetLoginRequest(ctx context.Context, challenge string) (*LoginRequest, error)

+ func (m *SQLManager) GetLogoutRequest(ctx context.Context, challenge string) (*LogoutRequest, error)

+ func (m *SQLManager) GetRememberedLoginSession(ctx context.Context, id string) (*LoginSession, error)

+ func (m *SQLManager) HandleConsentRequest(ctx context.Context, challenge string, r *HandledConsentRequest) (*ConsentRequest, error)

+ func (m *SQLManager) HandleLoginRequest(ctx context.Context, challenge string, r *HandledLoginRequest) (*LoginRequest, error)

+ func (m *SQLManager) ListUserAuthenticatedClientsWithBackChannelLogout(ctx context.Context, subject string) ([]client.Client, error)

+ func (m *SQLManager) ListUserAuthenticatedClientsWithFrontChannelLogout(ctx context.Context, subject string) ([]client.Client, error)

+ func (m *SQLManager) PlanMigration() ([]*migrate.PlannedMigration, error)

+ func (m *SQLManager) RejectLogoutRequest(ctx context.Context, challenge string) error

+ func (m *SQLManager) RevokeSubjectClientConsentSession(ctx context.Context, user, client string) error

+ func (m *SQLManager) RevokeSubjectConsentSession(ctx context.Context, user string) error

+ func (m *SQLManager) RevokeSubjectLoginSession(ctx context.Context, user string) error

+ func (m *SQLManager) VerifyAndInvalidateConsentRequest(ctx context.Context, verifier string) (*HandledConsentRequest, error)

+ func (m *SQLManager) VerifyAndInvalidateLoginRequest(ctx context.Context, verifier string) (*HandledLoginRequest, error)

+ func (m *SQLManager) VerifyAndInvalidateLogoutRequest(ctx context.Context, verifier string) (*LogoutRequest, error)

+ type Strategy interface

+ HandleOAuth2AuthorizationRequest func(w http.ResponseWriter, r *http.Request, req fosite.AuthorizeRequester) (*HandledConsentRequest, error)

+ HandleOpenIDConnectLogout func(w http.ResponseWriter, r *http.Request) (*LogoutResult, error)

+ type SubjectIdentifierAlgorithm interface

+ Obfuscate func(subject string, client *client.Client) (string, error)

+ type SubjectIdentifierAlgorithmPairwise struct

+ Salt []byte

+ func NewSubjectIdentifierAlgorithmPairwise(salt []byte) *SubjectIdentifierAlgorithmPairwise

+ func (g *SubjectIdentifierAlgorithmPairwise) Obfuscate(subject string, client *client.Client) (string, error)

+ type SubjectIdentifierAlgorithmPublic struct

+ func NewSubjectIdentifierAlgorithmPublic() *SubjectIdentifierAlgorithmPublic

+ func (g *SubjectIdentifierAlgorithmPublic) Obfuscate(subject string, client *client.Client) (string, error)