user

Mar 15, 2026

Changes in this version

+ var Identity_ = struct{ ... } — js/wasm

+ var LANIP_ = struct{ ... } — js/wasm

+ var OAuthState_ = struct{ ... } — js/wasm

+ var Permission_ = struct{ ... } — js/wasm

+ var RolePermission_ = struct{ ... } — js/wasm

+ var Role_ = struct{ ... } — js/wasm

+ var Session_ = struct{ ... } — js/wasm

+ var UserRole_ = struct{ ... } — js/wasm

+ var User_ = struct{ ... } — js/wasm

type Identity

+ func (m *Identity) FormName() string

type LANIP

+ func (m *LANIP) FormName() string

type LoginData

+ func (m *LoginData) Pointers() []any

+ func (m *LoginData) Schema() []fmt.Field

type OAuthState

+ func (m *OAuthState) FormName() string

type PasswordData

+ func (m *PasswordData) Pointers() []any

+ func (m *PasswordData) Schema() []fmt.Field

type Permission

+ func (m *Permission) FormName() string

type ProfileData

+ func (m *ProfileData) Pointers() []any

+ func (m *ProfileData) Schema() []fmt.Field

type RegisterData

+ func (m *RegisterData) Pointers() []any

+ func (m *RegisterData) Schema() []fmt.Field

type Role

+ func (m *Role) FormName() string

type RolePermission

+ func (m *RolePermission) FormName() string

type Session

+ func (m *Session) FormName() string

type User

+ func (m *User) FormName() string

type UserRole

+ func (m *UserRole) FormName() string

Mar 7, 2026

Changes in this version

type AuthMode

+ const AuthModeBearer

type Module — darwin/amd64, linux/amd64, windows/amd64

+ func (m *Module) CanExecute(ctx context.Context, resource string, action byte) bool

+ func (m *Module) GenerateAPIToken(userID string, ttl int) (string, error)

+ func (m *Module) InjectIdentity(ctx context.Context, r *http.Request) context.Context

Mar 7, 2026

Changes in this version

type Config

+ OnPasswordValidate func(password string) error

+ OnSecurityEvent func(SecurityEvent)

type Module — darwin/amd64, linux/amd64, windows/amd64

+ func (m *Module) PurgeSessionsByUser(userID string) error

+ func (m *Module) ReactivateUser(id string) error

+ func (m *Module) RotateSession(oldID, ip, userAgent string) (Session, error)

+ func (m *Module) SuspendUser(id string) error

+ type SecurityEvent struct

+ IP string

+ Provider string

+ Resource string

+ Timestamp int64

+ Type SecurityEventType

+ UserID string

+ type SecurityEventType uint8

+ const EventAccessDenied

+ const EventIPMismatch

+ const EventJWTTampered

+ const EventNonActiveAccess

+ const EventOAuthCrossProvider

+ const EventOAuthExpiredState

+ const EventOAuthReplay

+ const EventUnauthorizedAccess

Mar 5, 2026

Changes in this version

+ var Identity_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var LANIP_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var OAuthState_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var Permission_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var RolePermission_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var Role_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var Session_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var UserRole_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

+ var User_ = struct{ ... } — darwin/amd64, linux/amd64, windows/amd64

Mar 5, 2026

Changes in this version

+ var ErrInvalidToken = fmt.Err("token", "invalid") — darwin/amd64, linux/amd64, windows/amd64

+ func GenerateJWT(secret []byte, userID string, ttl int) (string, error) — darwin/amd64, linux/amd64, windows/amd64

+ func ValidateJWT(secret []byte, token string) (string, error) — darwin/amd64, linux/amd64, windows/amd64

+ type AuthMode uint8

+ const AuthModeCookie

+ const AuthModeJWT

type Config

+ AuthMode AuthMode

+ CookieName string

+ JWTSecret []byte

+ TokenTTL int

+ type Module struct — js/wasm

Mar 5, 2026

Changes in this version

+ func UIModules() []any

+ type Module struct — darwin/amd64, linux/amd64, windows/amd64

+ func (m *Module) AccessCheck(resource string, action byte, data ...any) bool

+ func (m *Module) Add() []any

+ func (m *Module) AssignLANIP(userID, ip, label string) error

+ func (m *Module) AssignPermission(roleID, permissionID string) error

+ func (m *Module) AssignRole(userID, roleID string) error

+ func (m *Module) BeginOAuth(providerName string) (string, error)

+ func (m *Module) CompleteOAuth(providerName string, r *http.Request, ip, ua string) (User, bool, error)

+ func (m *Module) CreatePermission(id, name, resource string, action string) error

+ func (m *Module) CreateRole(id string, code string, name, description string) error

+ func (m *Module) CreateSession(userID, ip, userAgent string) (Session, error)

+ func (m *Module) DeletePermission(id string) error

+ func (m *Module) DeleteRole(id string) error

+ func (m *Module) DeleteSession(id string) error

+ func (m *Module) FromContext(ctx context.Context) (*User, bool)

+ func (m *Module) GetLANIPs(userID string) ([]LANIP, error)

+ func (m *Module) GetPermission(id string) (*Permission, error)

+ func (m *Module) GetRole(id string) (*Role, error)

+ func (m *Module) GetRoleByCode(code string) (*Role, error)

+ func (m *Module) GetSession(id string) (Session, error)

+ func (m *Module) GetUser(id string) (User, error)

+ func (m *Module) GetUserIdentities(userID string) ([]Identity, error)

+ func (m *Module) GetUserRoles(userID string) ([]Role, error)

+ func (m *Module) HasPermission(userID, resource string, action byte) (bool, error)

+ func (m *Module) Login(email, password string) (User, error)

+ func (m *Module) LoginLAN(rut string, r *http.Request) (User, error)

+ func (m *Module) Middleware(next http.Handler) http.Handler

+ func (m *Module) PurgeExpiredOAuthStates() error

+ func (m *Module) PurgeExpiredSessions() error

+ func (m *Module) Register(handlers ...RBACObject) error

+ func (m *Module) RegisterLAN(userID, rut string) error

+ func (m *Module) RegisterMCP(next http.Handler) http.Handler

+ func (m *Module) RevokeLANIP(userID, ip string) error

+ func (m *Module) RevokeRole(userID, roleID string) error

+ func (m *Module) SetLog(fn func(...any))

+ func (m *Module) SetPassword(userID, password string) error

+ func (m *Module) UIModules() []any

+ func (m *Module) UnlinkIdentity(userID, provider string) error

+ func (m *Module) UnregisterLAN(userID string) error

+ func (m *Module) VerifyPassword(userID, password string) error

Mar 2, 2026

Changes in this version

+ var IdentityMeta = struct{ ... }

+ var LANIPMeta = struct{ ... }

+ var OAuthStateMeta = struct{ ... }

+ var PermissionMeta = struct{ ... }

+ var RoleMeta = struct{ ... }

+ var RolePermissionMeta = struct{ ... }

+ var SessionMeta = struct{ ... }

+ var UserMeta = struct{ ... }

+ var UserRoleMeta = struct{ ... }

+ func AssignPermission(roleID, permissionID string) error — darwin/amd64, linux/amd64, windows/amd64

+ func AssignRole(userID, roleID string) error — darwin/amd64, linux/amd64, windows/amd64

+ func CreatePermission(id, name, resource string, action string) error — darwin/amd64, linux/amd64, windows/amd64

+ func CreateRole(id string, code string, name, description string) error — darwin/amd64, linux/amd64, windows/amd64

+ func DeletePermission(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func DeleteRole(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func HasPermission(userID, resource string, action byte) (bool, error) — darwin/amd64, linux/amd64, windows/amd64

+ func Register(handlers ...RBACObject) error — darwin/amd64, linux/amd64, windows/amd64

+ func RevokeRole(userID, roleID string) error — darwin/amd64, linux/amd64, windows/amd64

type Identity

+ func ReadAllIdentity(qb *orm.QB) ([]*Identity, error)

+ func ReadOneIdentity(qb *orm.QB, model *Identity) (*Identity, error)

+ func (Identity) TableName() string

+ func (m *Identity) Pointers() []any

+ func (m *Identity) Schema() []orm.Field

+ func (m *Identity) Values() []any

+ type LANIP struct — js/wasm

+ CreatedAt int64

+ ID string

+ IP string

+ Label string

+ UserID string

+ func ReadAllLANIP(qb *orm.QB) ([]*LANIP, error)

+ func ReadOneLANIP(qb *orm.QB, model *LANIP) (*LANIP, error)

+ func (LANIP) TableName() string

+ func (m *LANIP) Pointers() []any

+ func (m *LANIP) Schema() []orm.Field

+ func (m *LANIP) Values() []any

+ type OAuthState struct

+ CreatedAt int64

+ ExpiresAt int64

+ Provider string

+ State string

+ func ReadAllOAuthState(qb *orm.QB) ([]*OAuthState, error)

+ func ReadOneOAuthState(qb *orm.QB, model *OAuthState) (*OAuthState, error)

+ func (OAuthState) TableName() string

+ func (m *OAuthState) Pointers() []any

+ func (m *OAuthState) Schema() []orm.Field

+ func (m *OAuthState) Values() []any

+ type Permission struct

+ Action string

+ ID string

+ Name string

+ Resource string

+ func GetPermission(id string) (*Permission, error)

+ func ReadAllPermission(qb *orm.QB) ([]*Permission, error)

+ func ReadOnePermission(qb *orm.QB, model *Permission) (*Permission, error)

+ func (Permission) TableName() string

+ func (m *Permission) Pointers() []any

+ func (m *Permission) Schema() []orm.Field

+ func (m *Permission) Values() []any

+ type RBACObject interface — darwin/amd64, linux/amd64, windows/amd64

+ AllowedRoles func(action byte) []byte

+ HandlerName func() string

+ type Role struct

+ Code string

+ Description string

+ ID string

+ Name string

+ func GetRole(id string) (*Role, error)

+ func GetRoleByCode(code string) (*Role, error)

+ func GetUserRoles(userID string) ([]Role, error)

+ func ReadAllRole(qb *orm.QB) ([]*Role, error)

+ func ReadOneRole(qb *orm.QB, model *Role) (*Role, error)

+ func (Role) TableName() string

+ func (m *Role) Pointers() []any

+ func (m *Role) Schema() []orm.Field

+ func (m *Role) Values() []any

+ type RolePermission struct

+ PermissionID string

+ RoleID string

+ func ReadAllRolePermission(qb *orm.QB) ([]*RolePermission, error)

+ func ReadOneRolePermission(qb *orm.QB, model *RolePermission) (*RolePermission, error)

+ func (RolePermission) TableName() string

+ func (m *RolePermission) Pointers() []any

+ func (m *RolePermission) Schema() []orm.Field

+ func (m *RolePermission) Values() []any

type Session

+ func ReadAllSession(qb *orm.QB) ([]*Session, error)

+ func ReadOneSession(qb *orm.QB, model *Session) (*Session, error)

+ func (Session) TableName() string

+ func (m *Session) Pointers() []any

+ func (m *Session) Schema() []orm.Field

+ func (m *Session) Values() []any

type User

+ Permissions []Permission

+ Roles []Role

+ func ReadAllUser(qb *orm.QB) ([]*User, error)

+ func ReadOneUser(qb *orm.QB, model *User) (*User, error)

+ func (User) TableName() string

+ func (m *User) Pointers() []any

+ func (m *User) Schema() []orm.Field

+ func (m *User) Values() []any

+ type UserRole struct

+ RoleID string

+ UserID string

+ func ReadAllUserRole(qb *orm.QB) ([]*UserRole, error)

+ func ReadOneUserRole(qb *orm.QB, model *UserRole) (*UserRole, error)

+ func (UserRole) TableName() string

+ func (m *UserRole) Pointers() []any

+ func (m *UserRole) Schema() []orm.Field

+ func (m *UserRole) Values() []any

Feb 20, 2026

Changes in this version

+ var PasswordHashCost = bcrypt.DefaultCost — darwin/amd64, linux/amd64, windows/amd64

Feb 20, 2026

Changes in this version

+ var ErrCannotUnlink = fmt.Err("identity", "cannot", "unlink")

+ var ErrEmailTaken = fmt.Err("email", "registered")

+ var ErrIPTaken = fmt.Err("ip", "registered")

+ var ErrInvalidCredentials = fmt.Err("access", "denied")

+ var ErrInvalidOAuthState = fmt.Err("state", "invalid")

+ var ErrInvalidRUT = fmt.Err("rut", "invalid")

+ var ErrNotFound = fmt.Err("user", "not", "found")

+ var ErrProviderNotFound = fmt.Err("provider", "not", "found")

+ var ErrRUTTaken = fmt.Err("rut", "registered")

+ var ErrSessionExpired = fmt.Err("token", "expired")

+ var ErrSuspended = fmt.Err("user", "suspended")

+ var ErrWeakPassword = fmt.Err("password", "weak")

+ var LANModule *lanModule

+ var LoginModule *loginModule

+ var OAuthCallback *oauthModule

+ var ProfileModule *profileModule

+ var RegisterModule *registerModule

+ func AssignLANIP(userID, ip, label string) error — darwin/amd64, linux/amd64, windows/amd64

+ func BeginOAuth(providerName string) (string, error) — darwin/amd64, linux/amd64, windows/amd64

+ func CreateIdentity(userID, provider, providerID, email string) error — darwin/amd64, linux/amd64, windows/amd64

+ func DeleteSession(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func Init(exec Executor, cfg Config) error — darwin/amd64, linux/amd64, windows/amd64

+ func PurgeExpiredOAuthStates() error — darwin/amd64, linux/amd64, windows/amd64

+ func PurgeExpiredSessions() error — darwin/amd64, linux/amd64, windows/amd64

+ func ReactivateUser(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func RegisterLAN(userID, rut string) error — darwin/amd64, linux/amd64, windows/amd64

+ func RevokeLANIP(userID, ip string) error — darwin/amd64, linux/amd64, windows/amd64

+ func SessionCookieName() string

+ func SetPassword(userID, password string) error — darwin/amd64, linux/amd64, windows/amd64

+ func SuspendUser(id string) error — darwin/amd64, linux/amd64, windows/amd64

+ func UnlinkIdentity(userID, provider string) error — darwin/amd64, linux/amd64, windows/amd64

+ func UnregisterLAN(userID string) error — darwin/amd64, linux/amd64, windows/amd64

+ func UpdateUser(id, name, phone string) error — darwin/amd64, linux/amd64, windows/amd64

+ func VerifyPassword(userID, password string) error — darwin/amd64, linux/amd64, windows/amd64

+ type Config struct

+ OAuthProviders []OAuthProvider

+ SessionCookieName string

+ SessionTTL int

+ TrustProxy bool

+ type Executor interface — darwin/amd64, linux/amd64, windows/amd64

+ Begin func() (*sql.Tx, error)

+ Exec func(query string, args ...any) error

+ Prepare func(query string) (*sql.Stmt, error)

+ Query func(query string, args ...any) (Rows, error)

+ QueryRow func(query string, args ...any) Scanner

+ type GoogleProvider struct — darwin/amd64, linux/amd64, windows/amd64

+ ClientID string

+ ClientSecret string

+ RedirectURL string

+ func (p *GoogleProvider) AuthCodeURL(state string) string

+ func (p *GoogleProvider) ExchangeCode(ctx context.Context, code string) (*oauth2.Token, error)

+ func (p *GoogleProvider) GetUserInfo(ctx context.Context, token *oauth2.Token) (OAuthUserInfo, error)

+ func (p *GoogleProvider) Name() string

+ type Identity struct

+ CreatedAt int64

+ Email string

+ ID string

+ Provider string

+ ProviderID string

+ UserID string

+ func GetIdentityByProvider(provider, providerID string) (Identity, error)

+ func GetUserIdentities(userID string) ([]Identity, error)

+ type LANIP struct — darwin/amd64, linux/amd64, windows/amd64

+ CreatedAt int64

+ ID string

+ IP string

+ Label string

+ UserID string

+ func GetLANIPs(userID string) ([]LANIP, error)

+ type LoginData struct

+ Email string

+ Password string

+ type MicrosoftProvider struct — darwin/amd64, linux/amd64, windows/amd64

+ ClientID string

+ ClientSecret string

+ RedirectURL string

+ func (p *MicrosoftProvider) AuthCodeURL(state string) string

+ func (p *MicrosoftProvider) ExchangeCode(ctx context.Context, code string) (*oauth2.Token, error)

+ func (p *MicrosoftProvider) GetUserInfo(ctx context.Context, token *oauth2.Token) (OAuthUserInfo, error)

+ func (p *MicrosoftProvider) Name() string

+ type OAuthProvider interface

+ AuthCodeURL func(state string) string

+ ExchangeCode func(ctx context.Context, code string) (*oauth2.Token, error)

+ GetUserInfo func(ctx context.Context, token *oauth2.Token) (OAuthUserInfo, error)

+ Name func() string

+ type OAuthUserInfo struct

+ Email string

+ ID string

+ Name string

+ type PasswordData struct

+ Confirm string

+ Current string

+ New string

+ type ProfileData struct

+ Name string

+ Phone string

+ type RegisterData struct

+ Email string

+ Name string

+ Password string

+ Phone string

+ type Rows interface — darwin/amd64, linux/amd64, windows/amd64

+ Close func() error

+ Err func() error

+ Next func() bool

+ Scan func(dest ...any) error

+ type Scanner interface — darwin/amd64, linux/amd64, windows/amd64

+ Scan func(dest ...any) error

+ type Session struct

+ CreatedAt int64

+ ExpiresAt int64

+ ID string

+ IP string

+ UserAgent string

+ UserID string

+ func CreateSession(userID, ip, userAgent string) (Session, error)

+ func GetSession(id string) (Session, error)

+ type Store struct — darwin/amd64, linux/amd64, windows/amd64

type User

+ CreatedAt int64

+ Email string

+ ID string

+ Name string

+ Phone string

+ Status string

+ func CompleteOAuth(providerName string, r *http.Request, ip, ua string) (User, bool, error)

+ func CreateUser(email, name, phone string) (User, error)

+ func GetUser(id string) (User, error)

+ func GetUserByEmail(email string) (User, error)

+ func Login(email, password string) (User, error)

+ func LoginLAN(rut string, r *http.Request) (User, error)

Feb 19, 2026

Changes in this version

+ type User struct

+ func New() *User