session

Documentation

Index

• Constants
• func Username(ctx context.Context) string
• type SessionManager
  • func NewSessionManager(settingsMgr *settings.SettingsManager, dexServerAddr string) *SessionManager
  • func (mgr *SessionManager) Create(subject string, secondsBeforeExpiry int64) (string, error)
  • func (mgr *SessionManager) Parse(tokenString string) (jwt.Claims, error)
  • func (mgr *SessionManager) VerifyToken(tokenString string) (jwt.Claims, error)
  • func (mgr *SessionManager) VerifyUsernamePassword(username, password string) error

Constants

const (
	// SessionManagerClaimsIssuer fills the "iss" field of the token.
	SessionManagerClaimsIssuer = "argocd"
)

Functions

func Username

func Username(ctx context.Context) string

Username is a helper to extract a human readable username from a context

Types

type SessionManager

type SessionManager struct {
	// contains filtered or unexported fields
}

SessionManager generates and validates JWT tokens for login sessions.

func NewSessionManager

func NewSessionManager(settingsMgr *settings.SettingsManager, dexServerAddr string) *SessionManager

NewSessionManager creates a new session manager from Argo CD settings

func (*SessionManager) Create

func (mgr *SessionManager) Create(subject string, secondsBeforeExpiry int64) (string, error)

Create creates a new token for a given subject (user) and returns it as a string. Passing a value of `0` for secondsBeforeExpiry creates a token that never expires.

func (*SessionManager) Parse

func (mgr *SessionManager) Parse(tokenString string) (jwt.Claims, error)

Parse tries to parse the provided string and returns the token claims for local superuser login.

func (*SessionManager) VerifyToken

func (mgr *SessionManager) VerifyToken(tokenString string) (jwt.Claims, error)

VerifyToken verifies if a token is correct. Tokens can be issued either from us or by an IDP. We choose how to verify based on the issuer.

func (*SessionManager) VerifyUsernamePassword

func (mgr *SessionManager) VerifyUsernamePassword(username, password string) error

VerifyUsernamePassword verifies if a username/password combo is correct