session

Documentation

Index

• Constants
• func Groups(ctx context.Context) []string
• func Iat(ctx context.Context) (time.Time, error)
• func Iss(ctx context.Context) string
• func LoggedIn(ctx context.Context) bool
• func Sub(ctx context.Context) string
• func Username(ctx context.Context) string
• type SessionManager
  • func NewSessionManager(settingsMgr *settings.SettingsManager, dexServerAddr string) *SessionManager
  • func (mgr *SessionManager) Create(subject string, secondsBeforeExpiry int64, id string) (string, error)
  • func (mgr *SessionManager) Parse(tokenString string) (jwt.Claims, error)
  • func (mgr *SessionManager) VerifyToken(tokenString string) (jwt.Claims, error)
  • func (mgr *SessionManager) VerifyUsernamePassword(username string, password string) error

Constants

const (
	// SessionManagerClaimsIssuer fills the "iss" field of the token.
	SessionManagerClaimsIssuer = "argocd"
)

Functions

func Groups

func Groups(ctx context.Context) []string

func Iat

func Iat(ctx context.Context) (time.Time, error)

func Iss

func Iss(ctx context.Context) string

func LoggedIn

func LoggedIn(ctx context.Context) bool

func Sub

func Sub(ctx context.Context) string

func Username

func Username(ctx context.Context) string

Username is a helper to extract a human readable username from a context

Types

type SessionManager

type SessionManager struct {
	// contains filtered or unexported fields
}

SessionManager generates and validates JWT tokens for login sessions.

func NewSessionManager

func NewSessionManager(settingsMgr *settings.SettingsManager, dexServerAddr string) *SessionManager

NewSessionManager creates a new session manager from Argo CD settings

func (*SessionManager) Create

func (mgr *SessionManager) Create(subject string, secondsBeforeExpiry int64, id string) (string, error)

Create creates a new token for a given subject (user) and returns it as a string. Passing a value of `0` for secondsBeforeExpiry creates a token that never expires. The id parameter holds an optional unique JWT token identifier and stored as a standard claim "jti" in the JWT token.

func (*SessionManager) Parse

func (mgr *SessionManager) Parse(tokenString string) (jwt.Claims, error)

Parse tries to parse the provided string and returns the token claims for local login.

func (*SessionManager) VerifyToken

func (mgr *SessionManager) VerifyToken(tokenString string) (jwt.Claims, error)

VerifyToken verifies if a token is correct. Tokens can be issued either from us or by an IDP. We choose how to verify based on the issuer.

func (*SessionManager) VerifyUsernamePassword

func (mgr *SessionManager) VerifyUsernamePassword(username string, password string) error

VerifyUsernamePassword verifies if a username/password combo is correct