auth

Documentation

Index

• type GetConfigResponse
• type OIDCConfig
• type OIDCHandler
  • func NewOIDCHandler(cfg *domain.Config, log zerolog.Logger) (*OIDCHandler, error)
  • func (h *OIDCHandler) GetAuthorizationURL() string
  • func (h *OIDCHandler) GetConfig() *OIDCConfig
  • func (h *OIDCHandler) GetConfigResponse() GetConfigResponse
  • func (h *OIDCHandler) HandleCallback(w http.ResponseWriter, r *http.Request) (string, error)
  • func (h *OIDCHandler) HandleLogin(w http.ResponseWriter, r *http.Request)
  • func (h *OIDCHandler) SetStateCookie(w http.ResponseWriter, r *http.Request, state string)
• type Service
  • func NewService(log logger.Logger, userSvc user.Service) Service

Types

type GetConfigResponse

type GetConfigResponse struct {
	Enabled          bool   `json:"enabled"`
	AuthorizationURL string `json:"authorizationUrl"`
	State            string `json:"state"`
}

type OIDCConfig

type OIDCConfig struct {
	Enabled      bool
	Issuer       string
	ClientID     string
	ClientSecret string
	RedirectURL  string
	Scopes       []string
}

type OIDCHandler

type OIDCHandler struct {
	// contains filtered or unexported fields
}

func NewOIDCHandler

func NewOIDCHandler(cfg *domain.Config, log zerolog.Logger) (*OIDCHandler, error)

func (*OIDCHandler) GetAuthorizationURL

func (h *OIDCHandler) GetAuthorizationURL() string

func (*OIDCHandler) GetConfig

func (h *OIDCHandler) GetConfig() *OIDCConfig

func (*OIDCHandler) GetConfigResponse

func (h *OIDCHandler) GetConfigResponse() GetConfigResponse

func (*OIDCHandler) HandleCallback

func (h *OIDCHandler) HandleCallback(w http.ResponseWriter, r *http.Request) (string, error)

func (*OIDCHandler) HandleLogin

func (h *OIDCHandler) HandleLogin(w http.ResponseWriter, r *http.Request)

func (*OIDCHandler) SetStateCookie

func (h *OIDCHandler) SetStateCookie(w http.ResponseWriter, r *http.Request, state string)

SetStateCookie sets a secure cookie containing the OIDC state parameter. The state parameter is verified when the OAuth provider redirects back to our callback. Short expiration ensures the authentication flow must be completed in a reasonable timeframe.

type Service

type Service interface {
	GetUserCount(ctx context.Context) (int, error)
	Login(ctx context.Context, username, password string) (*domain.User, error)
	CreateUser(ctx context.Context, req domain.CreateUserRequest) error
	UpdateUser(ctx context.Context, req domain.UpdateUserRequest) error
	CreateHash(password string) (hash string, err error)
	ComparePasswordAndHash(password string, hash string) (match bool, err error)
}

func NewService

func NewService(log logger.Logger, userSvc user.Service) Service