apitoken

Documentation

Index

• Constants
• Variables
• type Builder
  • func NewBuilder(opts ...NewOpt) (*Builder, error)
  • func (ra *Builder) GenerateJWT(orgID, keyID string, expiresAt *time.Time) (string, error)
• type CustomClaims
• type NewOpt
  • func WithIssuer(issuer string) NewOpt
  • func WithKeySecret(hmacSecret string) NewOpt

Constants

const Audience = "api-token-auth.chainloop"

Variables

var SigningMethod = jwt.SigningMethodHS256

Types

type Builder

type Builder struct {
	// contains filtered or unexported fields
}

func NewBuilder

func NewBuilder(opts ...NewOpt) (*Builder, error)

NewBuilder creates a new APIToken JWT builder It supports expiration and revocation Currently we use a simple hmac encryption method meant to be continuously rotated TODO: additional/alternative encryption method, i.e DSE asymmetric, see CAS robot account for reference

func (*Builder) GenerateJWT

func (ra *Builder) GenerateJWT(orgID, keyID string, expiresAt *time.Time) (string, error)

it can both expire and being revoked, revocation is performed by checking the keyID against our revocation list

type CustomClaims

type CustomClaims struct {
	OrgID string `json:"org_id"`
	jwt.RegisteredClaims
}

type NewOpt

type NewOpt func(b *Builder)

func WithIssuer

func WithIssuer(issuer string) NewOpt

func WithKeySecret

func WithKeySecret(hmacSecret string) NewOpt