token

Documentation

Index

• Variables
• type Attribute
• type Authenticator
  • func NewAuthenticator(tokenDecoder *Decoder, tokenURL string) *Authenticator
  • func (c *Authenticator) Authenticate(rw http.ResponseWriter, r *http.Request)
  • func (c *Authenticator) Authorization(r *http.Request) (Token, error)
• type Decoder
  • func NewDecoder(verifier *signing.Verifier) *Decoder
  • func (p *Decoder) Decode(code string) (t Token, err error)
• type Encoder
  • func NewEncoder(signer *signing.Signer) *Encoder
  • func (p *Encoder) Encode(t Token) (code string, err error)
• type Generator
  • func NewGenerator(tokenEncoder *Encoder, ...) *Generator
  • func (g *Generator) ServeHTTP(rw http.ResponseWriter, r *http.Request)
• type Token

Variables

var ErrNoAuth = fmt.Errorf("no authorization header found")

Types

type Attribute

type Attribute struct {
	NoRateLimit        bool   `json:"no_rate_limit,omitempty"`
	RateLimitPerSecond uint64 `json:"rate_limit_per_second,omitempty"`

	NoAllowlist   bool `json:"no_allowlist,omitempty"`
	NoBlock       bool `json:"no_block,omitempty"`
	AllowTagsList bool `json:"allow_tags_list,omitempty"`

	BlobsURL string `json:"blobs_url,omitempty"`

	Block        bool   `json:"block,omitempty"`
	BlockMessage string `json:"block_message,omitempty"`
}

type Authenticator

type Authenticator struct {
	// contains filtered or unexported fields
}

func NewAuthenticator

func NewAuthenticator(
	tokenDecoder *Decoder,
	tokenURL string,
) *Authenticator

func (*Authenticator) Authenticate

func (c *Authenticator) Authenticate(rw http.ResponseWriter, r *http.Request)

func (*Authenticator) Authorization

func (c *Authenticator) Authorization(r *http.Request) (Token, error)

type Decoder

type Decoder struct {
	// contains filtered or unexported fields
}

func NewDecoder

func NewDecoder(verifier *signing.Verifier) *Decoder

func (*Decoder) Decode

func (p *Decoder) Decode(code string) (t Token, err error)

type Encoder

type Encoder struct {
	// contains filtered or unexported fields
}

func NewEncoder

func NewEncoder(signer *signing.Signer) *Encoder

func (*Encoder) Encode

func (p *Encoder) Encode(t Token) (code string, err error)

type Generator

type Generator struct {
	// contains filtered or unexported fields
}

func NewGenerator

func NewGenerator(
	tokenEncoder *Encoder,
	authFunc func(r *http.Request, userinfo *url.Userinfo, t *Token) (Attribute, bool),
	logger *slog.Logger,
) *Generator

func (*Generator) ServeHTTP

func (g *Generator) ServeHTTP(rw http.ResponseWriter, r *http.Request)

type Token

type Token struct {
	ExpiresAt time.Time `json:"expires_at,omitempty"`
	Scope     string    `json:"scope,omitempty"`
	Service   string    `json:"service,omitempty"`

	Account string `json:"account,omitempty"`
	Image   string `json:"image,omitempty"`

	IP string `json:"ip,omitempty"`

	Attribute `json:"attribute,omitempty"`
}