auth

Documentation

Overview

Package auth defines the authentication layer of the application.

Index

• type Auth
  • func NewAuth(nonces nonce.Repository) *Auth
  • func (a *Auth) Challenge(ctx context.Context, message string) string
  • func (a *Auth) Verify(ctx context.Context, address string, data []byte, sig []byte) error

Types

type Auth

type Auth struct {
	// contains filtered or unexported fields
}

Auth is a service that provides HTTP handlers and middlewares used for authentication.

It uses a time-based nonce. The nonce is encrypted with the private key.

func NewAuth

func NewAuth(
	nonces nonce.Repository,
) *Auth

NewAuth builds the Auth struct.

func (*Auth) Challenge

func (a *Auth) Challenge(ctx context.Context, message string) string

Challenge returns a message with a nonce.

func (*Auth) Verify

func (a *Auth) Verify(ctx context.Context, address string, data []byte, sig []byte) error

Verify checks the signature and nonce.

This is a time-based nonce. In production, it is preferable to use a true nonce (random number) which is stored in a database.