Documentation
¶
Index ¶
- type AuthGoogleOAuth
- func (a *AuthGoogleOAuth) AuthenticatorID() (id string)
- func (a *AuthGoogleOAuth) Configure(yamlSource []byte) (err error)
- func (a *AuthGoogleOAuth) DetectUser(res http.ResponseWriter, r *http.Request) (user string, groups []string, err error)
- func (a *AuthGoogleOAuth) Login(res http.ResponseWriter, r *http.Request) (user string, mfaConfigs []plugins.MFAConfig, err error)
- func (a *AuthGoogleOAuth) LoginFields() (fields []plugins.LoginField)
- func (a *AuthGoogleOAuth) Logout(res http.ResponseWriter, r *http.Request) (err error)
- func (a *AuthGoogleOAuth) SupportsMFA() bool
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AuthGoogleOAuth ¶
type AuthGoogleOAuth struct {
ClientID string `yaml:"client_id"`
ClientSecret string `yaml:"client_secret"`
RedirectURL string `yaml:"redirect_url"`
RequireDomain string `yaml:"require_domain"` // Deprecated: Use RequireDomains
RequireDomains []string `yaml:"require_domains"`
UserIDMethod string `yaml:"user_id_method"`
// contains filtered or unexported fields
}
func New ¶
func New(cs *sessions.CookieStore) *AuthGoogleOAuth
func (*AuthGoogleOAuth) AuthenticatorID ¶
func (a *AuthGoogleOAuth) AuthenticatorID() (id string)
AuthenticatorID needs to return an unique string to identify this special authenticator
func (*AuthGoogleOAuth) Configure ¶
func (a *AuthGoogleOAuth) Configure(yamlSource []byte) (err error)
Configure loads the configuration for the Authenticator from the global config.yaml file which is passed as a byte-slice. If no configuration for the Authenticator is supplied the function needs to return the ErrProviderUnconfigured
func (*AuthGoogleOAuth) DetectUser ¶
func (a *AuthGoogleOAuth) DetectUser(res http.ResponseWriter, r *http.Request) (user string, groups []string, err error)
DetectUser is used to detect a user without a login form from a cookie, header or other methods If no user was detected the ErrNoValidUserFound needs to be returned
func (*AuthGoogleOAuth) Login ¶
func (a *AuthGoogleOAuth) Login(res http.ResponseWriter, r *http.Request) (user string, mfaConfigs []plugins.MFAConfig, err error)
Login is called when the user submits the login form and needs to authenticate the user or throw an error. If the user has successfully logged in the persistent cookie should be written in order to use DetectUser for the next login. With the login result an array of mfaConfig must be returned. In case there is no MFA config or the provider does not support MFA return nil. If the user did not login correctly the ErrNoValidUserFound needs to be returned
func (*AuthGoogleOAuth) LoginFields ¶
func (a *AuthGoogleOAuth) LoginFields() (fields []plugins.LoginField)
LoginFields needs to return the fields required for this login method. If no login using this method is possible the function needs to return nil.
func (*AuthGoogleOAuth) Logout ¶
func (a *AuthGoogleOAuth) Logout(res http.ResponseWriter, r *http.Request) (err error)
Logout is called when the user visits the logout endpoint and needs to destroy any persistent stored cookies
func (*AuthGoogleOAuth) SupportsMFA ¶
func (a *AuthGoogleOAuth) SupportsMFA() bool
SupportsMFA returns the MFA detection capabilities of the login provider. If the provider can provide mfaConfig objects from its configuration return true. If this is true the login interface will display an additional field for this provider for the user to fill in their MFA token.
Source Files