security

Documentation

Index

• Variables
• func CreateAccessToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)
• func CreateRefreshToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)
• func GetClaimsIfAccessTokenIsValid(tokenString string) (*jwt.MapClaims, error)
• func GetClaimsIfRefreshTokenIsValid(tokenString string) (*jwt.MapClaims, error)
• func GetVerifiedAuthUser(db *gorm.DB, userModel models.IModel) (models.IModel, error)
• func HashAndSalt(pwd string) (string, error)
• func IsSamePassword(plainPwd string, hashedPwd string) bool
• func Setup(ck *CertAndKeys)
• type CertAndKeys

Variables

var ErrEmailNotFound = errors.New("email not found")

var ErrInactive = errors.New("account inactive")

var ErrNotVerified = errors.New("email not verified")

var ErrPasswordIncorrect = errors.New("password incorrect")

Functions

func CreateAccessToken

func CreateAccessToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)

CreateAccessToken creates a new JWT token

func CreateRefreshToken

func CreateRefreshToken(ident *datatypes.UUID, duration time.Duration, scope *string) (string, error)

CreateRefreshToken creates a new JWT token

func GetClaimsIfAccessTokenIsValid

func GetClaimsIfAccessTokenIsValid(tokenString string) (*jwt.MapClaims, error)

GetClaimsIfAccessTokenIsValid validates this token and get the ISS claim

func GetClaimsIfRefreshTokenIsValid

func GetClaimsIfRefreshTokenIsValid(tokenString string) (*jwt.MapClaims, error)

GetClaimsIfRefreshTokenIsValid validates this token and get the ISS claim

func GetVerifiedAuthUser

func GetVerifiedAuthUser(db *gorm.DB, userModel models.IModel) (models.IModel, error)

GetVerifiedAuthUser authenticates the user userModel is from JSON in the HTTP body

func HashAndSalt

func HashAndSalt(pwd string) (string, error)

HashAndSalt turns password into encrypted hash The salt is included in the hash

func IsSamePassword

func IsSamePassword(plainPwd string, hashedPwd string) bool

IsSamePassword checks if password is the same as in the db

func Setup

func Setup(ck *CertAndKeys)

Setup loads the public and private keys fromfile

Types

type CertAndKeys

type CertAndKeys struct {
	/* Access tokens */
	AccessTokenPrivKeyPath string
	AccessTokenPubKeyPath  string
	AccessTokenPemPasswd   string

	/* Refresh tokens */
	RefreshTokenPrivKeyPath string
	RefreshTokenPubKeyPath  string
	RefreshTokenPemPasswd   string
}

CertAndKeys are paths for certificates and keys for initialization