client

Documentation

Index

• type Host
  • func NewHost(client protocol.CertClient) *Host
  • func (h *Host) Authenticate(ctx context.Context) (string, error)
  • func (h *Host) RequestCerts(ctx context.Context, duration time.Duration) error
  • func (h *Host) UpdateUserCertAuthority(filePath string) error
• type User
  • func NewUser(client protocol.CertClient) *User
  • func NewUserWithToken(client protocol.CertClient, token *oauth2.Token) *User
  • func (u *User) CheckAuthorization(ctx context.Context) (bool, string, error)
  • func (u *User) RequestCerts(ctx context.Context, userId string, duration time.Duration) error
  • func (u *User) SetKeysDir(keysDir string)
  • func (u *User) SetPrincipals(principals []string)
  • func (u *User) SetRemoteUsername(username string)
  • func (u *User) SetUsername(username string)
  • func (u *User) UpdateHostCertAuthority(knownHostsFile string) error

Types

type Host

type Host struct {
	Client       protocol.CertClient
	Dryrun       bool
	PSKStore     accord.PSKStore
	Salt         string
	DeploymentId string
	KeysDir      string
	Hostnames    []string
	UUID         []byte
}

Host has all fields public because most of them are required to be set by the caller in one way or another anyway and duplicating the fields in another input object is just waste to only be used once

func NewHost

func NewHost(client protocol.CertClient) *Host

func (*Host) Authenticate

func (h *Host) Authenticate(ctx context.Context) (string, error)

For now the response doesn't do a proper challenge auth

func (*Host) RequestCerts

func (h *Host) RequestCerts(ctx context.Context, duration time.Duration) error

It's always in the future, so not giving the user start time option

func (*Host) UpdateUserCertAuthority

func (h *Host) UpdateUserCertAuthority(filePath string) error

type User

type User struct {
	// contains filtered or unexported fields
}

func NewUser

func NewUser(client protocol.CertClient) *User

func NewUserWithToken

func NewUserWithToken(client protocol.CertClient, token *oauth2.Token) *User

func (*User) CheckAuthorization

func (u *User) CheckAuthorization(ctx context.Context) (bool, string, error)

Validate the Oauth2.0 token against the server it needs to have been generated by the same clientID and have valid expiry date, etc Maybe use a nonce or something, but I can't think of reasonable things to send here, so boolean so that the backend doesn't get bad requests

func (*User) RequestCerts

func (u *User) RequestCerts(ctx context.Context, userId string, duration time.Duration) error

func (*User) SetKeysDir

func (u *User) SetKeysDir(keysDir string)

func (*User) SetPrincipals

func (u *User) SetPrincipals(principals []string)

func (*User) SetRemoteUsername

func (u *User) SetRemoteUsername(username string)

func (*User) SetUsername

func (u *User) SetUsername(username string)

func (*User) UpdateHostCertAuthority

func (u *User) UpdateHostCertAuthority(knownHostsFile string) error