auth

Documentation

Overview

Package auth resolves fal credentials and produces the Authorization header. It is consumed by the transport layer through the Manager type. Credential material (keys, tokens, refresh tokens) is held in unexported fields and is never exposed: the only surface is NewManager and the AuthHeader method.

Index

• type Manager
  • func NewManager(key, authBase, tokenFilePath, userAgent string, httpClient *http.Client) *Manager
  • func (m *Manager) AuthHeader(ctx context.Context) (string, error)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager resolves credentials once and serves the Authorization header, refreshing a file-based bearer token on expiry. It is safe for concurrent use.

func NewManager

func NewManager(key, authBase, tokenFilePath, userAgent string, httpClient *http.Client) *Manager

NewManager builds a Manager. key is an explicit fal key (overriding environment resolution) or ""; authBase is the Auth0 token host; tokenFilePath overrides the default login-token path (mainly for tests) or ""; userAgent is sent on the refresh request; httpClient performs the (un-retried) refresh call.

func (*Manager) AuthHeader

func (m *Manager) AuthHeader(ctx context.Context) (string, error)

AuthHeader returns the Authorization header value, refreshing a file-based bearer token if it is missing or near expiry.