password

package
v0.0.0-...-c4f7e29 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Apr 26, 2024 License: Apache-2.0 Imports: 21 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var DependencySet = wire.NewSet(
	NewLogger,
	wire.Struct(new(Provider), "*"),
	wire.Struct(new(Store), "*"),
	NewHousekeeperLogger,
	wire.Struct(new(Housekeeper), "*"),
	ProvideChecker,
	wire.Struct(new(HistoryStore), "*"),
	wire.Bind(new(CheckerHistoryStore), new(*HistoryStore)),
	ProvideExpiry,
)
View Source 
var InvalidBcryptHash = apierrors.Invalid.WithReason("InvalidBcryptHash")
View Source 
var PasswordExpiryForceChange apierrors.Kind = apierrors.Invalid.WithReason("PasswordExpiryForceChange")
View Source 
var PasswordPolicyViolated apierrors.Kind = apierrors.Invalid.WithReason("PasswordPolicyViolated")

Functions

func IsSamePassword 

func IsSamePassword(hashedPassword []byte, password string) bool

func TranslateBcryptError 

func TranslateBcryptError(err error) error

Types

type Checker 

type Checker struct {
	PwMinLength            int
	PwUppercaseRequired    bool
	PwLowercaseRequired    bool
	PwAlphabetRequired     bool
	PwDigitRequired        bool
	PwSymbolRequired       bool
	PwMinGuessableLevel    int
	PwExcludedKeywords     []string
	PwHistorySize          int
	PwHistoryDays          config.DurationDays
	PasswordHistoryEnabled bool
	PasswordHistoryStore   CheckerHistoryStore
}

func ProvideChecker 

func ProvideChecker(
	cfg *config.AuthenticatorPasswordConfig,
	featureCfg *config.AuthenticatorFeatureConfig,
	s CheckerHistoryStore,
) *Checker

func (*Checker) PasswordPolicy 

func (pc *Checker) PasswordPolicy() (out []Policy)

PasswordPolicy outputs a list of PasswordPolicy to reflect the password policy.

func (*Checker) PasswordRules 

func (pc *Checker) PasswordRules() string

func (*Checker) ValidateCurrentPassword 

func (pc *Checker) ValidateCurrentPassword(plainPassword string) error

ValidateCurrentPassword should be used when the user authenticates.

func (*Checker) ValidateNewPassword 

func (pc *Checker) ValidateNewPassword(userID string, plainPassword string) error

ValidateNewPassword should be used when the user changes their password.

type CheckerHistoryStore 

type CheckerHistoryStore interface {
	GetPasswordHistory(userID string, historySize int, historyDays config.DurationDays) ([]History, error)
}

type Expiry 

type Expiry struct {
	ForceChangeEnabled         bool
	ForceChangeSinceLastUpdate config.DurationString
	Clock                      clock.Clock
}

func ProvideExpiry 

func ProvideExpiry(
	cfg *config.AuthenticatorPasswordConfig,
	c clock.Clock,
) *Expiry

func (*Expiry) Validate 

func (pe *Expiry) Validate(authenticator *authenticator.Password) error

type History 

type History struct {
	ID             string
	UserID         string
	HashedPassword []byte
	CreatedAt      time.Time
}

History contains a password history of a user

type HistoryStore 

type HistoryStore struct {
	Clock       clock.Clock
	SQLBuilder  *appdb.SQLBuilderApp
	SQLExecutor *appdb.SQLExecutor
}

func (*HistoryStore) CreatePasswordHistory 

func (p *HistoryStore) CreatePasswordHistory(userID string, hashedPassword []byte, createdAt time.Time) error

func (*HistoryStore) GetPasswordHistory 

func (p *HistoryStore) GetPasswordHistory(userID string, historySize int, historyDays config.DurationDays) ([]History, error)

func (*HistoryStore) RemovePasswordHistory 

func (p *HistoryStore) RemovePasswordHistory(userID string, historySize int, historyDays config.DurationDays) error

func (*HistoryStore) ResetPasswordHistory 

func (p *HistoryStore) ResetPasswordHistory(userID string) error

type Housekeeper 

type Housekeeper struct {
	Store  *HistoryStore
	Logger HousekeeperLogger
	Config *config.AuthenticatorPasswordConfig
}

func (*Housekeeper) Housekeep 

func (p *Housekeeper) Housekeep(authID string) (err error)

type HousekeeperLogger 

type HousekeeperLogger struct {
	*log.Logger
}

func NewHousekeeperLogger 

func NewHousekeeperLogger(lf *log.Factory) HousekeeperLogger

type Logger 

type Logger struct{ *log.Logger }

func NewLogger 

func NewLogger(lf *log.Factory) Logger

type Policy 

type Policy struct {
	Name PolicyName
	Info map[string]interface{} `json:",omitempty"`
}

func (Policy) Kind 

func (v Policy) Kind() string

type PolicyName 

type PolicyName string
const (
	// PasswordTooShort is self-explanatory
	PasswordTooShort PolicyName = "PasswordTooShort"
	// PasswordUppercaseRequired means the password does not contain ASCII uppercase character
	PasswordUppercaseRequired PolicyName = "PasswordUppercaseRequired"
	// PasswordLowercaseRequired means the password does not contain ASCII lowercase character
	PasswordLowercaseRequired PolicyName = "PasswordLowercaseRequired"
	// PasswordAlphabetRequired means the password does not contain ASCII alphabet character
	PasswordAlphabetRequired PolicyName = "PasswordAlphabetRequired"
	// PasswordDigitRequired means the password does not contain ASCII digit character
	PasswordDigitRequired PolicyName = "PasswordDigitRequired"
	// PasswordSymbolRequired means the password does not contain ASCII non-alphanumeric character
	PasswordSymbolRequired PolicyName = "PasswordSymbolRequired"
	// PasswordContainingExcludedKeywords means the password contains configured excluded keywords
	PasswordContainingExcludedKeywords PolicyName = "PasswordContainingExcludedKeywords"
	// PasswordBelowGuessableLevel means the password's guessable level is below configured level.
	// The current implementation uses Dropbox's zxcvbn.
	PasswordBelowGuessableLevel PolicyName = "PasswordBelowGuessableLevel"
	// PasswordReused is self-explanatory
	PasswordReused PolicyName = "PasswordReused"
)

type Provider 

type Provider struct {
	Store           *Store
	Config          *config.AuthenticatorPasswordConfig
	Clock           clock.Clock
	Logger          Logger
	PasswordHistory *HistoryStore
	PasswordChecker *Checker
	Expiry          *Expiry
	Housekeeper     *Housekeeper
}

func (*Provider) Authenticate 

func (p *Provider) Authenticate(a *authenticator.Password, password string) (verifyResult *VerifyResult, err error)

func (*Provider) Create 

func (p *Provider) Create(a *authenticator.Password) error

func (*Provider) Delete 

func (p *Provider) Delete(a *authenticator.Password) error

func (*Provider) Get 

func (p *Provider) Get(userID string, id string) (*authenticator.Password, error)

func (*Provider) GetMany 

func (p *Provider) GetMany(ids []string) ([]*authenticator.Password, error)

func (*Provider) List 

func (p *Provider) List(userID string) ([]*authenticator.Password, error)

func (*Provider) New 

func (p *Provider) New(id string, userID string, passwordSpec *authenticator.PasswordSpec, isDefault bool, kind string) (*authenticator.Password, error)

func (*Provider) UpdatePassword 

func (p *Provider) UpdatePassword(a *authenticator.Password) error

func (*Provider) WithPassword 

func (p *Provider) WithPassword(a *authenticator.Password, password string) (*authenticator.Password, error)

WithPassword return new authenticator pointer if password is changed Otherwise original authenticator will be returned

type Store 

type Store struct {
	SQLBuilder  *appdb.SQLBuilderApp
	SQLExecutor *appdb.SQLExecutor
}

func (*Store) Create 

func (s *Store) Create(a *authenticator.Password) (err error)

func (*Store) Delete 

func (s *Store) Delete(id string) error

func (*Store) Get 

func (s *Store) Get(userID string, id string) (*authenticator.Password, error)

func (*Store) GetMany 

func (s *Store) GetMany(ids []string) ([]*authenticator.Password, error)

func (*Store) List 

func (s *Store) List(userID string) ([]*authenticator.Password, error)

func (*Store) UpdatePasswordHash 

func (s *Store) UpdatePasswordHash(a *authenticator.Password) error

type VerifyResult 

type VerifyResult struct {
	PolicyForceChange bool
	ExpiryForceChange bool
}

func (*VerifyResult) RequireUpdate 

func (r *VerifyResult) RequireUpdate() bool

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.