Documentation
¶
Index ¶
- Variables
- func ContextWithID(ctx context.Context, id string) context.Context
- func ContextWithRole(ctx context.Context, role Role) context.Context
- func CreateAuthKeys() ([]byte, []byte, error)
- func Middleware(service Service) func(next http.Handler) http.Handler
- func MiddlewareWithOpts(service Service, opts MiddlewareOpts) func(next http.Handler) http.Handler
- func ParseAuthKeys(privateKey, publicKey []byte) (*rsa.PrivateKey, *rsa.PublicKey, error)
- func Router(service Service) func(chi.Router)
- func UserIDFromContext(ctx context.Context) (string, error)
- type Authenticator
- type Authorizer
- type Credentials
- type LoginResponsePayload
- type MiddlewareOpts
- type Role
- type Service
Constants ¶
This section is empty.
Variables ¶
var ErrDeactivated = fmt.Errorf("deactivated")
ErrDeactivated indicates, that the user is deactivated.
var ErrInvalidCredentials = fmt.Errorf("invalid credentials")
ErrInvalidCredentials is the error, that gets returned by the login method, when the provided credentials where invalid.
var ErrRoleFromContext = fmt.Errorf("failed to retrieve authorization role from context")
ErrRoleFromContext is the error, that gets returned by RoleFromRequest, when the retrieval fails.
ErrUnauthorized indicates an unauthorized action.
var ErrUserIDFromContext = fmt.Errorf("failed to retrieve user id from context")
ErrUserIDFromContext is the error, that gets returned by UserIDFromRequest, when the retrieval fails.
Functions ¶
func ContextWithID ¶
ContextWithID adds the given id to the context.
func ContextWithRole ¶
ContextWithRole adds the given role to the context.
func CreateAuthKeys ¶
CreateAuthKeys creates a PEM encoded private and public rsa key pair.
func Middleware ¶
Middleware returns a new validating middleware. Calls MiddlewareWithOpts.
func MiddlewareWithOpts ¶
MiddlewareWithOpts returns a new middleware, that adds user information from the "Authorization" header to the request context. If opts.Validate is set to true, it validates the user authorization and aborts for invalid authorization headers.
func ParseAuthKeys ¶
ParseAuthKeys parses a PEM encoded private and public rsa key pair.
Types ¶
type Authenticator ¶
type Authenticator interface {
// Validate takes an email and password and checks if they are valid.
// If it is valid it returns a unique identifier corresponding to that
// identifier.
// It might return an error, when something unexpected happens during
// validation.
Validate(ctx context.Context, email, password string) (id string, err error)
}
Authenticator determines wether a set of credentials are valid.
type Authorizer ¶
type Authorizer interface {
// Role returns the role for the given identifier.
Role(ctx context.Context, id string) (role Role, err error)
}
Authorizer checks the authorization for a given identifier.
type Credentials ¶
type Credentials struct {
// required:true
Email string `json:"email"`
// required:true
Password string `json:"password"`
}
Credentials define the login credentials.
type LoginResponsePayload ¶
type LoginResponsePayload struct {
Token string `json:"token"`
ID string `json:"id"`
Role Role `json:"role"`
}
LoginResponsePayload describes the payload of a succesful login xhttp.
type MiddlewareOpts ¶
type MiddlewareOpts struct {
Validate bool
}
MiddlewareOpts are options used by the authorization middleware.
type Role ¶
type Role string
Role defines an authorization role.
type Service ¶
type Service interface {
// Login takes an email and a password. When valid returns a new JWT.
Login(ctx context.Context, email, password string) (token string, err error)
// Authenticate takes a JWT and checks wether it's valid.
// If it is valid. It returns the stored id.
Authenticate(token string) (id string, err error)
// Authorize authorizes the given user identifier by returning its
// authorization role.
Authorize(ctx context.Context, id string) (role Role, err error)
}
Service defines an authentication service. -go:generate go run github.com/petergtz/pegomock/pegomock generate eintopf.info/service/auth Service --output=../../internal/mock/auth_service.go --package=mock --mock-name=AuthService
func NewService ¶
func NewService(authenticator Authenticator, authorizer Authorizer, privateKey, publicKey []byte, tz *time.Location) (Service, error)
NewService returns a new authentication service.
Source Files