auth

Documentation

Index

• Constants
• Variables
• func EnsureTokenValidAt(ctx context.Context, target time.Time) error
• func SetupFlags(flags *pflag.FlagSet)
• func StoreMarshalledUser(ctx context.Context, userAuthData []byte) error
• func StoreTenantToken(token string) error
• type Token
  • func FetchTokenFromSpec(ctx context.Context, spec string) (*Token, error)
  • func LoadTenantToken(ctx context.Context) (*Token, error)
  • func LoadTokenFromPath(ctx context.Context, path string, validAt time.Time) (*Token, error)
  • func (t *Token) Raw() string
  • func (t *Token) UnmarshalJSON(data []byte) error
• type UserAuth
  • func LoadUser() (*UserAuth, error)

Constants

const (
	GithubJWTAudience = "nscloud.dev/inline-token"
)

Variables

var Workspace string

Functions

func EnsureTokenValidAt

func EnsureTokenValidAt(ctx context.Context, target time.Time) error

func SetupFlags

func SetupFlags(flags *pflag.FlagSet)

func StoreMarshalledUser

func StoreMarshalledUser(ctx context.Context, userAuthData []byte) error

func StoreTenantToken

func StoreTenantToken(token string) error

Types

type Token

type Token struct {
	BearerToken string `json:"bearer_token,omitempty"`
}

func FetchTokenFromSpec

func FetchTokenFromSpec(ctx context.Context, spec string) (*Token, error)

func LoadTenantToken

func LoadTenantToken(ctx context.Context) (*Token, error)

func LoadTokenFromPath

func LoadTokenFromPath(ctx context.Context, path string, validAt time.Time) (*Token, error)

func (*Token) Raw

func (t *Token) Raw() string

func (*Token) UnmarshalJSON

func (t *Token) UnmarshalJSON(data []byte) error

TODO: remove when legacy token.json format is not used anymore.

type UserAuth

type UserAuth struct {
	Username       string `json:"username,omitempty"`
	Org            string `json:"org,omitempty"` // The organization this user is acting as. Only really relevant for robot accounts which authenticate against a repository.
	InternalOpaque []byte `json:"opaque,omitempty"`

	Clerk          *clerk.State `json:"clerk,omitempty"`
	IsGithubAction bool         `json:"is_github_action,omitempty"`
}

func LoadUser

func LoadUser() (*UserAuth, error)