jwtauth

Documentation

Index

• Variables
• type APIAlg
• type AuthMux
  • func NewAuthMux(jwtCli IJwtAuthClient, serveMux *http.ServeMux) *AuthMux
  • func (authMux *AuthMux) ServeHTTP(w http.ResponseWriter, r *http.Request)
  • func (authMux *AuthMux) TrustHandle(pattern string, handler http.Handler)
• type IJwtAuthClient
• type JwtAuth
  • func NewJwtAuth(lr repo.Repo) (*JwtAuth, error)
  • func (jwtAuth *JwtAuth) API() apiface.IJwtAuthAPI
  • func (jwtAuth *JwtAuth) V0API() apiface.IJwtAuthAPI
  • func (jwtAuth *JwtAuth) Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)
• type JwtAuthAPI
  • func (a *JwtAuthAPI) AuthNew(ctx context.Context, perms []auth.Permission) ([]byte, error)
  • func (a *JwtAuthAPI) Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)
• type JwtPayload
• type RemoteAuth
  • func NewRemoteAuth(url string) *RemoteAuth
  • func (r *RemoteAuth) API() apiface.IJwtAuthAPI
  • func (r *RemoteAuth) V0API() apiface.IJwtAuthAPI
  • func (r *RemoteAuth) Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)

Variables

var (
	ErrKeyInfoNotFound = fmt.Errorf("key info not found")
)

Types

type APIAlg

type APIAlg jwt3.HMACSHA

type AuthMux

type AuthMux struct {
	// contains filtered or unexported fields
}

AuthMux used with jsonrpc library to verify whether the request is legal

func NewAuthMux

func NewAuthMux(jwtCli IJwtAuthClient, serveMux *http.ServeMux) *AuthMux

func (*AuthMux) ServeHTTP

func (authMux *AuthMux) ServeHTTP(w http.ResponseWriter, r *http.Request)

ServeHTTP used to verify that the token is legal, but skip local request to allow request from cmds todo should mixed local verify and venus-auth verify. first check local and than check remote auth

func (*AuthMux) TrustHandle

func (authMux *AuthMux) TrustHandle(pattern string, handler http.Handler)

TrustHandle for requests that can be accessed directly

type IJwtAuthClient

type IJwtAuthClient interface {
	API() apiface.IJwtAuthAPI
	Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)
}

type JwtAuth

type JwtAuth struct {
	// contains filtered or unexported fields
}

JwtAuth auth through local token

func NewJwtAuth

func NewJwtAuth(lr repo.Repo) (*JwtAuth, error)

func (*JwtAuth) API

func (jwtAuth *JwtAuth) API() apiface.IJwtAuthAPI

API jwt for token api todo remove auth new api, because not secure for remote mod

func (*JwtAuth) V0API

func (jwtAuth *JwtAuth) V0API() apiface.IJwtAuthAPI

func (*JwtAuth) Verify

func (jwtAuth *JwtAuth) Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)

Verify verify token from request

type JwtAuthAPI

type JwtAuthAPI struct {
	JwtAuth *JwtAuth
}

func (*JwtAuthAPI) AuthNew

func (a *JwtAuthAPI) AuthNew(ctx context.Context, perms []auth.Permission) ([]byte, error)

AuthNew create new token with specify permission for access venus

func (*JwtAuthAPI) Verify

func (a *JwtAuthAPI) Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)

Verify check the token is valid or not

type JwtPayload

type JwtPayload struct {
	Allow []auth.Permission
}

type RemoteAuth

type RemoteAuth struct {
	// contains filtered or unexported fields
}

RemoteAuth in remote verification mode, venus connects venus-auth service, and verifies whether token is legal through rpc

func NewRemoteAuth

func NewRemoteAuth(url string) *RemoteAuth

NewRemoteAuth new remote auth client from venus-auth url

func (*RemoteAuth) API

func (r *RemoteAuth) API() apiface.IJwtAuthAPI

API remote a new api

func (*RemoteAuth) V0API

func (r *RemoteAuth) V0API() apiface.IJwtAuthAPI

func (*RemoteAuth) Verify

func (r *RemoteAuth) Verify(ctx context.Context, spanID, serviceName, preHost, host, token string) ([]auth.Permission, error)

Verify check token through venus-auth rpc api