security

Documentation

Index

• func CreateAccessToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)
• func CreateRefreshToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)
• func GetClaimsIfAccessTokenIsValid(tokenString string) (*jwt.MapClaims, error)
• func GetClaimsIfRefreshTokenIsValid(tokenString string) (*jwt.MapClaims, error)
• func HashAndSalt(pwd string) (string, error)
• func IsSamePassword(plainPwd string, hashedPwd string) bool
• func Setup(ck *CertAndKeys)
• type CertAndKeys
• type VerifyUserResult
  • func GetVerifiedAuthUser(userModel models.IModel) (models.IModel, VerifyUserResult)

Functions

func CreateAccessToken

func CreateAccessToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)

CreateAccessToken creates a new JWT token

func CreateRefreshToken

func CreateRefreshToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)

CreateRefreshToken creates a new JWT token

func GetClaimsIfAccessTokenIsValid

func GetClaimsIfAccessTokenIsValid(tokenString string) (*jwt.MapClaims, error)

GetClaimsIfAccessTokenIsValid validates this token and get the ISS claim

func GetClaimsIfRefreshTokenIsValid

func GetClaimsIfRefreshTokenIsValid(tokenString string) (*jwt.MapClaims, error)

GetClaimsIfRefreshTokenIsValid validates this token and get the ISS claim

func HashAndSalt

func HashAndSalt(pwd string) (string, error)

HashAndSalt turns password into encrypted hash The salt is included in the hash

func IsSamePassword

func IsSamePassword(plainPwd string, hashedPwd string) bool

IsSamePassword checks if password is the same as in the db

func Setup

func Setup(ck *CertAndKeys)

Setup loads the public and private keys fromfile

Types

type CertAndKeys

type CertAndKeys struct {
	/* Access tokens */
	AccessTokenPrivKeyPath string
	AccessTokenPubKeyPath  string
	AccessTokenPemPasswd   string

	/* Refresh tokens */
	RefreshTokenPrivKeyPath string
	RefreshTokenPubKeyPath  string
	RefreshTokenPemPasswd   string
}

CertAndKeys are paths for certificates and keys for initialization

type VerifyUserResult

type VerifyUserResult int

VerifyUserResult type with enum

const (
	// VerifyUserResultOK found username and password
	VerifyUserResultOK VerifyUserResult = iota
	// VerifyUserResultPasswordNotMatch password does not match
	VerifyUserResultPasswordNotMatch
	// VerifyUserResultEmailNotFound email is not found
	VerifyUserResultEmailNotFound
	// VerifyUserResultOtherError other error
	VerifyUserResultOtherError
)

func GetVerifiedAuthUser

func GetVerifiedAuthUser(userModel models.IModel) (models.IModel, VerifyUserResult)

GetVerifiedAuthUser authenticates the user