kal

package module

Go to main page

Versions in this module

v0

v0.6.0

Aug 26, 2026

Changes in this version

type Auth

+ func (a *Auth) Delete[T any](ctx context.Context, db orm.DB, column string, key *T, ...) (bool, error)

+ func (a *Auth) Get[T any](ctx context.Context, db orm.DB, column string, key *T, ...) (*T, error)

+ func (a *Auth) List[T any](ctx context.Context, db orm.DB, column string, ...) ([]*T, error)

+ func (a *Auth) Update[T any](ctx context.Context, db orm.DB, column string, m *T, label string, ...) (*T, error)

v0.5.1

Aug 10, 2026

v0.5.0

Aug 9, 2026

Changes in this version

+ func DefaultSensitiveFields() []string

type Config

+ ExtraMiddleware []func(http.Handler) http.Handler

+ Proofs func(context.Context, []string) error

v0.4.0

Aug 9, 2026

Changes in this version

+ func WithRLSSettings(ctx context.Context, db *pg.DB, extra map[string]string, fn func(orm.DB) error) error

+ type Audit = authz.Audit

type Auth

+ func (a *Auth) MigrateSchema(ctx context.Context, schema string) error

type Config

+ Audit authz.Audit

+ Hasher *authn.Hasher

+ RLSSettings func(context.Context) map[string]string

+ type Event = authz.Event

+ type Hasher = authn.Hasher

+ func NewHasher(p Params, maxConcurrent int64) (*Hasher, error)

type ZKConfig

+ KnowledgeVK *ZKVerifyingKey

+ MembershipVK *ZKVerifyingKey

v0.3.0

Aug 7, 2026

Changes in this version

+ const KDFArgon2id

+ const KDFPBKDF2

+ func NewRecoveryCode() (string, error)

+ func ValidateAuthSecret(s string) error

type Auth

+ Vaults *e2ee.Vaults

type Config

+ E2EE *e2ee.Options

+ type Vault = e2ee.Vault

+ type VaultOptions = e2ee.Options

+ type VaultParams = e2ee.Params

+ type Vaults = e2ee.Vaults

+ func NewVaults(opts VaultOptions) (*Vaults, error)

v0.2.0

Aug 6, 2026

Changes in this version

+ const ZKCircuitKnowledge

+ const ZKCircuitMembership

+ const ZKClaimOneShot

+ const ZKClaimRecurring

+ const ZKKnowledgeCircuitID

+ const ZKKnowledgeConstraints

+ const ZKMembershipCircuitID

+ const ZKMembershipConstraints

+ const ZKMerkleDepth

+ const ZKSecretSize

+ func SetupZK(kind ZKCircuit, pkw, vkw io.Writer) error

+ func ZKCircuitInfo(kind ZKCircuit) (int, [32]byte, error)

+ func ZKKnowledgeValid(w ZKKnowledgeWitness) bool

+ func ZKMembershipValid(w ZKMembershipWitness) bool

+ func ZKProofSize() int

type Auth

+ ZK *zkauthn.ZK

type Config

+ ZK *ZKConfig

+ type ZKCircuit = zkauthn.Circuit

+ type ZKClaim = zkauthn.Claim

+ type ZKClaimKind = zkauthn.ClaimKind

+ type ZKClaims = zkauthz.Claims

+ func NewZKClaims(schema string) (*ZKClaims, error)

+ type ZKConfig struct

+ KnowledgeVerifyingKey io.Reader

+ KnowledgeVerifyingKeySHA256 []byte

+ MaxConcurrentVerifications int64

+ MembershipVerifyingKey io.Reader

+ MembershipVerifyingKeySHA256 []byte

+ RootGrace time.Duration

+ type ZKCredential = zkauthn.Credential

+ type ZKField = zkauthn.Field

+ func NewZKAudience(deployment, policy, epoch string) ZKField

+ func ZKChallengeField(token string) (ZKField, error)

+ func ZKKnowledgeCommitment(secret ZKSecret) (ZKField, error)

+ func ZKMembershipCommitment(secret ZKSecret, attribute uint64) (ZKField, error)

+ func ZKNullifier(secret ZKSecret, audience ZKField) (ZKField, error)

+ type ZKKnowledgeCircuit = zkauthn.KnowledgeCircuit

+ type ZKKnowledgeRequest = zkauthn.KnowledgeRequest

+ type ZKKnowledgeWitness = zkauthn.KnowledgeWitness

+ type ZKMembershipCircuit = zkauthn.MembershipCircuit

+ type ZKMembershipPublic = zkauthn.MembershipPublic

+ type ZKMembershipRequest = zkauthn.MembershipRequest

+ type ZKMembershipWitness = zkauthn.MembershipWitness

+ func ZKMembershipWitnessFor(credential ZKCredential, path ZKMerklePath, claim ZKClaim, ...) ZKMembershipWitness

+ type ZKMerklePath = zkauthn.MerklePath

+ func ZKSingleLeafPath(commitment ZKField) (ZKMerklePath, error)

+ type ZKOptions = zkauthn.Options

+ type ZKProvingKey = zkauthn.ProvingKey

+ func LoadZKProvingKey(kind ZKCircuit, r io.Reader) (*ZKProvingKey, error)

+ type ZKSecret = zkauthn.Secret

+ type ZKService = zkauthn.ZK

+ func NewZK(opts ZKOptions) (*ZKService, error)

+ type ZKVerifiedClaim = zkauthn.VerifiedClaim

+ type ZKVerifyingKey = zkauthn.VerifyingKey

+ func LoadZKVerifyingKey(kind ZKCircuit, r io.Reader, wantSHA256 []byte) (*ZKVerifyingKey, error)

v0.1.0

Aug 5, 2026

Changes in this version

+ const DefaultMaxAliases

+ const DefaultMaxDepth

+ const LevelAnonymous

+ const LevelAuthenticated

+ func AssertAuthCoverage(schema graphql.ExecutableSchema, exempt ...string) error

+ func AssertDirectivesWired(directiveRoot any) error

+ func HasRole(ctx context.Context, role string) bool

+ func PresentError(ctx context.Context, err error) *gqlerror.Error

+ func Scope(ctx context.Context, column string) func(*orm.Query) *orm.Query

+ func ValidatePassword(password string) error

+ type Auth struct

+ Accounts *authn.Accounts

+ Hasher *authn.Hasher

+ JWT *session.JWT

+ Roles *authz.Roles

+ Sessions *session.Sessions

+ func New(cfg Config) (*Auth, error)

+ func (a *Auth) Configure() func(*handler.Server)

+ func (a *Auth) Directive() ...

+ func (a *Auth) Middleware() func(http.Handler) http.Handler

+ func (a *Auth) Migrate(ctx context.Context) error

+ func (a *Auth) WithRLS(ctx context.Context, fn func(orm.DB) error) error

+ type AuthLevel = authz.AuthLevel

+ type Config struct

+ AbsoluteTimeout time.Duration

+ AllowIntrospection func(context.Context) bool

+ AllowUnverifiedLogin bool

+ Argon2 authn.Params

+ BaseURL string

+ BypassRole string

+ ClientIP func(*http.Request) string

+ CookieName string

+ DB *pg.DB

+ IdleTimeout time.Duration

+ JWTIssuer string

+ JWTKeys []ed25519.PrivateKey

+ MFAWindow time.Duration

+ Mailer Mailer

+ MaxAliases int

+ MaxConcurrentHashes int64

+ MaxDepth int

+ SensitiveFields []string

+ TableSchema string

+ type Error = kalerr.Error

+ type LogMailer = authn.LogMailer

+ type Mailer = authn.Mailer

+ type Message = authn.Message

+ type Params = authn.Params

+ type Principal = authz.Principal

+ func From(ctx context.Context) (*Principal, bool)

+ func Require(ctx context.Context) (*Principal, error)

+ type SessionInfo = session.Info

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL