enrolltoken

Documentation

Index

• Constants
• func Decode(token string) (addr, secret string, err error)
• func Encode(addr, secret string) string
• func GenerateSecret() (string, error)
• func Hash(secret string) string
• func IsHexSecret(s string) bool
• func IsToken(s string) bool

Constants

const (
	// Prefix is the string prefix for all enrollment tokens.
	Prefix = "mren_"

	// SecretBytes is the number of random bytes in an enrollment secret.
	SecretBytes = 32
)

Functions

func Decode

func Decode(token string) (addr, secret string, err error)

Decode parses an enrollment token and returns the coordinator address and secret it contains.

func Encode

func Encode(addr, secret string) string

Encode produces an enrollment token string from a coordinator address and secret. The token has the form mren_<base64url(json)>.

func GenerateSecret

func GenerateSecret() (string, error)

GenerateSecret produces a cryptographically random hex-encoded secret suitable for use in an enrollment token.

func Hash

func Hash(secret string) string

Hash returns the SHA-256 hash of a secret, using the same scheme as invite code hashing for consistency.

func IsHexSecret

func IsHexSecret(s string) bool

IsHexSecret reports whether s is a valid hex-encoded enrollment secret (64 lowercase hex characters = 32 bytes).

func IsToken

func IsToken(s string) bool

IsToken reports whether s looks like an enrollment token.