qaauthmw

Jan 26, 2026

Changes in this version

type Option

+ func WithBodyReader(f func(r *http.Request) ([]byte, error)) Option

+ func WithComputeBodySHA256(v bool) Option

type Options

+ BodyReader func(r *http.Request) ([]byte, error)

+ ComputeBodySHA256 bool

type VerifyInput

+ Body []byte

Jan 16, 2026

Changes in this version

+ const CtxUserIDKey

+ const DefaultRemoteBaseURL

+ var ErrBadRequest = errors.New("quantumauth: bad request")

+ var ErrUnauthorized = errors.New("quantumauth: unauthorized")

+ func Middleware(v Verifier, opts ...Option) func(next http.Handler) http.Handler

+ func NormalizeHost(host string) string

+ func QAMiddleware(opts ...Option) func(http.Handler) http.Handler

+ func QAMiddlewareWithRemote(baseURL string, opts ...Option) func(http.Handler) http.Handler

+ func UserIDFromContext(ctx context.Context) (string, bool)

+ type HostPolicy struct

+ TrustForwardedHeader bool

+ TrustedProxyCIDRs []string

+ func (p HostPolicy) CanonicalHost(r *http.Request) (string, error)

+ type Option func(*Options)

+ func WithBadRequestHandler(f func(w http.ResponseWriter, r *http.Request, err error)) Option

+ func WithEncryptedFunc(f func(r *http.Request) json.RawMessage) Option

+ func WithHostPolicy(p HostPolicy) Option

+ func WithPathFunc(f func(r *http.Request) string) Option

+ func WithRequireAuth(v bool) Option

+ func WithUnauthorizedHandler(f func(w http.ResponseWriter, r *http.Request)) Option

+ type Options struct

+ EncryptedFunc func(r *http.Request) json.RawMessage

+ HostPolicy HostPolicy

+ OnBadRequest func(w http.ResponseWriter, r *http.Request, err error)

+ OnUnauthorized func(w http.ResponseWriter, r *http.Request)

+ PathFunc func(r *http.Request) string

+ RequireAuth bool

+ type QAHeaderFields struct

+ Extra map[string]string

+ SigPQ string

+ SigTPM string

+ func ParseAuthorizationQuantumAuth(auth string) (*QAHeaderFields, error)

+ type RemoteVerifier struct

+ BaseURL string

+ Client *http.Client

+ ExtraHeaders map[string]string

+ func NewRemoteVerifier() *RemoteVerifier

+ func (r *RemoteVerifier) Verify(ctx context.Context, in VerifyInput) (*VerifyResult, error)

+ type Verifier interface

+ Verify func(ctx context.Context, in VerifyInput) (*VerifyResult, error)

+ type VerifyInput struct

+ Encrypted json.RawMessage

+ Headers map[string]string

+ Method string

+ Path string

+ type VerifyResult struct

+ Authenticated bool

+ UserID string