auth

Documentation

Index

• Variables
• func PasswordVerify(encryptedPassword, password string) error
• type LoginRecorder
  • func NewLoginRecorder(client ai.Interface) LoginRecorder
• type PasswordAuthenticator
  • func NewPasswordAuthenticator(aiClient ai.Interface, userLister iamv1listers.UserLister, ...) PasswordAuthenticator
• type TokenManagementInterface
  • func NewTokenOperator(cache cache.Interface, options *authoptions.AuthenticationOptions) TokenManagementInterface

Variables

var (
	RateLimitExceededError  = fmt.Errorf("auth rate limit exceeded")
	IncorrectPasswordError  = fmt.Errorf("incorrect password")
	AccountIsNotActiveError = fmt.Errorf("account is not active")
)

Functions

func PasswordVerify

func PasswordVerify(encryptedPassword, password string) error

Types

type LoginRecorder

type LoginRecorder interface {
	RecordLogin(username string, loginType iamv1.LoginType, provider string, sourceIP string, userAgent string, authErr error) error
}

func NewLoginRecorder

func NewLoginRecorder(client ai.Interface) LoginRecorder

type PasswordAuthenticator

type PasswordAuthenticator interface {
	Authenticate(username, password string) (authuser.Info, string, error)
}

func NewPasswordAuthenticator

func NewPasswordAuthenticator(aiClient ai.Interface,
	userLister iamv1listers.UserLister,
	authOptions *authoptions.AuthenticationOptions,
	alOptions *config.AiOptions) PasswordAuthenticator

type TokenManagementInterface

type TokenManagementInterface interface {
	// Verify verifies a token, and return a User if it's a valid token, otherwise return error
	Verify(token string) (user.Info, error)
	// IssueTo issues a token a User, return error if issuing process failed
	IssueTo(user user.Info, accessTokenMaxAge, accessTokenInactivityTimeout *time.Duration) (*oauth.Token, error)
}

func NewTokenOperator

func NewTokenOperator(cache cache.Interface, options *authoptions.AuthenticationOptions) TokenManagementInterface