token

Documentation

Index

• Constants
• Variables
• func Armor(token []byte) string
• func Metadata(stoken string) (map[string]string, error)
• func RemoveArmor(token string) ([]byte, error)
• func SetupVault(vc *api.Client, path string) (ed25519.PublicKey, error)
• type TokenCreator
  • func (c *TokenCreator) EncodeED25519(key ed25519.PrivateKey, keyId string) (string, error)
  • func (c *TokenCreator) EncodeED25519WithVault(vc *api.Client, path, keyId string) (string, error)
  • func (c *TokenCreator) EncodeHMAC(key []byte, keyId string) (string, error)
• type ValidToken
  • func CheckTokenED25519(stoken string, key ed25519.PublicKey) (*ValidToken, error)
  • func CheckTokenHMAC(stoken string, key []byte) (*ValidToken, error)
  • func (t *ValidToken) Account() *pb.Account
  • func (t *ValidToken) AllowAccount(ns string) bool
  • func (t *ValidToken) HasCapability(target pb.Capability) (bool, string)

Constants

const (
	KeyAlgo             = 1
	KeyAccountId        = 100
	KeyAccountNamespace = 101
	KeyCapabilities     = 110
)

const (
	ValueHMAC    = 1
	ValueED25519 = 2
)

const (
	Magic = 0x47
)

Variables

var (
	ErrBadToken      = errors.New("bad token")
	ErrNoLongerValid = errors.New("token no longer valid")
)

Functions

func Armor

func Armor(token []byte) string

func Metadata

func Metadata(stoken string) (map[string]string, error)

func RemoveArmor

func RemoveArmor(token string) ([]byte, error)

func SetupVault

func SetupVault(vc *api.Client, path string) (ed25519.PublicKey, error)

Types

type TokenCreator

type TokenCreator struct {
	Role            pb.TokenRole
	Issuer          string
	AccountId       *pb.ULID
	AccuntNamespace string
	Capabilities    map[pb.Capability]string
	Metadata        map[string]string
	ValidDuration   time.Duration

	RawCapabilities []pb.TokenCapability
}

func (*TokenCreator) EncodeED25519

func (c *TokenCreator) EncodeED25519(key ed25519.PrivateKey, keyId string) (string, error)

func (*TokenCreator) EncodeED25519WithVault

func (c *TokenCreator) EncodeED25519WithVault(vc *api.Client, path, keyId string) (string, error)

func (*TokenCreator) EncodeHMAC

func (c *TokenCreator) EncodeHMAC(key []byte, keyId string) (string, error)

type ValidToken

type ValidToken struct {
	Body  *pb.Token_Body
	Token *pb.Token
	Raw   []byte
	KeyId string
}

func CheckTokenED25519

func CheckTokenED25519(stoken string, key ed25519.PublicKey) (*ValidToken, error)

func CheckTokenHMAC

func CheckTokenHMAC(stoken string, key []byte) (*ValidToken, error)

func (*ValidToken) Account

func (t *ValidToken) Account() *pb.Account

func (*ValidToken) AllowAccount

func (t *ValidToken) AllowAccount(ns string) bool

func (*ValidToken) HasCapability

func (t *ValidToken) HasCapability(target pb.Capability) (bool, string)