security

Documentation

Index

• func Decrypt(cipherText string, key string) ([]byte, error)
• func Encrypt(data []byte, key string) (string, error)
• func NewJWT(payload jwt.MapClaims, signingKey string, secondsDuration int64) (string, error)
• func NewToken(payload jwt.MapClaims, signingKey string, secondsDuration int64) (string, error)
• func ParseJWT(token string, verificationKey string) (jwt.MapClaims, error)
• func ParseUnverifiedJWT(token string) (jwt.MapClaims, error)
• func PseudorandomString(length int) string
• func PseudorandomStringWithAlphabet(length int, alphabet string) string
• func RandomString(length int) string
• func RandomStringWithAlphabet(length int, alphabet string) string
• func S256Challenge(code string) string

Functions

func Decrypt

func Decrypt(cipherText string, key string) ([]byte, error)

Decrypt decrypts encrypted text with key (must be valid 32 chars aes key).

func Encrypt

func Encrypt(data []byte, key string) (string, error)

Encrypt encrypts data with key (must be valid 32 char aes key).

func NewJWT

func NewJWT(payload jwt.MapClaims, signingKey string, secondsDuration int64) (string, error)

NewJWT generates and returns new HS256 signed JWT token.

func NewToken

func NewToken(payload jwt.MapClaims, signingKey string, secondsDuration int64) (string, error)

Deprecated: Consider replacing with NewJWT().

NewToken is a legacy alias for NewJWT that generates a HS256 signed JWT token.

func ParseJWT

func ParseJWT(token string, verificationKey string) (jwt.MapClaims, error)

ParseJWT verifies and parses JWT token and returns its claims.

func ParseUnverifiedJWT

func ParseUnverifiedJWT(token string) (jwt.MapClaims, error)

ParseUnverifiedJWT parses JWT token and returns its claims but DOES NOT verify the signature.

It verifies only the exp, iat and nbf claims.

func PseudorandomString

func PseudorandomString(length int) string

PseudorandomString generates a pseudorandom string with the specified length.

The generated string matches [A-Za-z0-9]+ and it's transparent to URL-encoding.

For a cryptographically random string (but a little bit slower) use RandomString instead.

func PseudorandomStringWithAlphabet

func PseudorandomStringWithAlphabet(length int, alphabet string) string

PseudorandomStringWithAlphabet generates a pseudorandom string with the specified length and characters set.

For a cryptographically random (but a little bit slower) use RandomStringWithAlphabet instead.

func RandomString

func RandomString(length int) string

RandomString generates a cryptographically random string with the specified length.

The generated string matches [A-Za-z0-9]+ and it's transparent to URL-encoding.

func RandomStringWithAlphabet

func RandomStringWithAlphabet(length int, alphabet string) string

RandomStringWithAlphabet generates a cryptographically random string with the specified length and characters set.

It panics if for some reason rand.Int returns a non-nil error.

func S256Challenge

func S256Challenge(code string) string

S256Challenge creates base64 encoded sha256 challenge string derived from code. The padding of the result base64 string is stripped per RFC 7636.