trust

Documentation

Overview

This is a simple authentiaction scheme based on Hawk.

NOTE This does not provide encryption of requests! All requests are still visible in plain sight unless other precautions are taken.

Only the client is verified - not the server response!

Index

• Variables
• func GetEnvInt(key string, defaultValue int) int
• func SerializeValues(values ...string) []byte
• func Sign(serialized, key []byte) []byte
• type Peer
  • func (peer Peer) Sign(id string) (string, error)
  • func (peer Peer) Verify(auth string) (id string, err error)

Variables

var (
	// Maximum skew in times between servers
	MaxRequestSkew = time.Duration(GetEnvInt("MAX_REQUEST_SKEW", 4)) * time.Minute
	// Maximum authorization field size
	MaxAuthorizationSize = 10 << 10
)

Functions

func GetEnvInt

func GetEnvInt(key string, defaultValue int) int

func SerializeValues

func SerializeValues(values ...string) []byte

func Sign

func Sign(serialized, key []byte) []byte

Types

type Peer

type Peer struct {
	// key that will be used to authenticate
	Key []byte
}

Peer is trusted server information

func (Peer) Sign

func (peer Peer) Sign(id string) (string, error)

Sign signs the request from id.

func (Peer) Verify

func (peer Peer) Verify(auth string) (id string, err error)

Verify checks whether the request is trusted.