auth

Documentation

Index

• Constants
• func ForgeAuthorizationHeader(token string) string
• func GetActiveOrganization(ctx context.Context) string
• func GetUser(ctx context.Context) string
• type AuthClaims
• type Interceptors
  • func (i *Interceptors) Interceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, ...) (h interface{}, err error)
  • func (i *Interceptors) StreamInterceptor(srv interface{}, stream grpc.ServerStream, info *grpc.StreamServerInfo, ...) error
• type Tokens
  • func New(secretKey string) *Tokens
  • func (t *Tokens) CreateLoginToken(name string, activeOrganization string) (string, error)
  • func (t *Tokens) CreatePasswordToken(name string) (string, error)
  • func (t *Tokens) CreateVerificationToken(name string) (string, error)
  • func (t *Tokens) ValidateToken(signedString string, tokenType string) (*AuthClaims, error)
• type ValidateUser

Constants

const (
	AuthorizationHeader   = "authorization" // HTTP2 authorization header name, cf. https://http2.github.io/http2-spec/compression.html#static.table.definition
	AuthorizationScheme   = "amp"
	TokenKey              = "amp.token"
	UserKey               = "amp.user"
	ActiveOrganizationKey = "amp.organization"
	CredentialsRequired   = "credentials required"
)

Keys used in context metadata

const (
	TokenIssuer           = "amplifier"
	TokenTypeVerification = "verification"
	TokenTypeLogin        = "login"
	TokenTypePassword     = "password"

	VerificationTokenValidFor = time.Hour
	LoginTokenValidFor        = 24 * time.Hour
	PasswordTokenValidFor     = time.Hour
)

Token constants

Functions

func ForgeAuthorizationHeader

func ForgeAuthorizationHeader(token string) string

ForgeAuthorizationHeader forges an amp authorization header

func GetActiveOrganization

func GetActiveOrganization(ctx context.Context) string

GetActiveOrganization gets the active organization from context metadata

func GetUser

func GetUser(ctx context.Context) string

GetUser gets the user from context metadata

Types

type AuthClaims

type AuthClaims struct {
	Type               string `json:"Type"`
	AccountName        string `json:"AccountName"`
	ActiveOrganization string `json:"ActiveOrganization"`
	jwt.StandardClaims
}

AuthClaims represents authentication claims

type Interceptors

type Interceptors struct {
	Tokens      *Tokens
	IsUserValid ValidateUser
}

func (*Interceptors) Interceptor

func (i *Interceptors) Interceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (h interface{}, err error)

Interceptor is an interceptor checking for authentication tokens

func (*Interceptors) StreamInterceptor

func (i *Interceptors) StreamInterceptor(srv interface{}, stream grpc.ServerStream, info *grpc.StreamServerInfo, handler grpc.StreamHandler) error

StreamInterceptor is an interceptor checking for authentication tokens

type Tokens

type Tokens struct {
	// contains filtered or unexported fields
}

func New

func New(secretKey string) *Tokens

func (*Tokens) CreateLoginToken

func (t *Tokens) CreateLoginToken(name string, activeOrganization string) (string, error)

CreateLoginToken creates a login token for a given account

func (*Tokens) CreatePasswordToken

func (t *Tokens) CreatePasswordToken(name string) (string, error)

CreatePasswordToken creates a password token for a given user name

func (*Tokens) CreateVerificationToken

func (t *Tokens) CreateVerificationToken(name string) (string, error)

CreateVerificationToken creates a verification token for a given user

func (*Tokens) ValidateToken

func (t *Tokens) ValidateToken(signedString string, tokenType string) (*AuthClaims, error)

ValidateToken validates a token and return its claims

type ValidateUser

type ValidateUser func(string) bool