auth

Documentation

Index

• type OryAuth
  • func NewOryAuth(mountPath, namespace, object, relation, cookie string) (*OryAuth, error)
  • func (a *OryAuth) Login(ctx context.Context, client *api.Client) (*api.Secret, error)

Types

type OryAuth

type OryAuth struct {
	// contains filtered or unexported fields
}

OryAuth is a Vault AuthMethod that can communicate to the Ory plugin

func NewOryAuth

func NewOryAuth(
	mountPath, namespace, object, relation, cookie string,
) (*OryAuth, error)

NewOryAuth creates an OryAuth struct that can be passed into the client.Auth().Login method to authenticate with Vault via the Ory auth plugin.

The mount path should be the path that the plugin was mounted at (probably `ory`) The namespace, object, and relation should reflect the resource being requested The cookie should be the full cookie string, including the name and `=` e.g. `ory_kratos_session=MyReallyLongSessionCookieString`

func (*OryAuth) Login

func (a *OryAuth) Login(ctx context.Context, client *api.Client) (*api.Secret, error)

Login performs a login request to the Ory Vault auth plugin.