README
¶
Sessionless, passwords was authentication.
How
JSON web tokens + OAuth identity providers.
All you need to do is this:
package main
import (
"net/http"
"github.com/bentranter/id"
"github.com/bentranter/id/providers/facebook"
)
func main() {
provider := facebook.New("<your-client-id>", "<your-client-secret>", "<your-client-callback-url>")
http.Handle("/auth/facebook/authorize", id.Authorize(provider))
http.Handle("/auth/facebook/callback", id.Callback(provider, "<your-redirect-url>"))
http.ListenAndServe(":3000", nil)
}
It works with Gorilla's Mux, Pat, Julien Schmidt's HttpRouter, and of course the standard net/http package.
Looking for a more "normal" password flow?
Checkout Password
Documentation
¶
Overview ¶
Package id is an authentication package that is sessionless, and passwordless.
Index ¶
- Variables
- func AuthInit(key []byte)
- func Authorize(p Provider) http.Handler
- func Callback(p Provider, redirectURL string) http.Handler
- func ExpireCookie(w http.ResponseWriter, r *http.Request)
- func GenToken(user *User) (*http.Cookie, error)
- func HTTPRouterAuthorize(p Provider) httprouter.Handle
- func HTTPRouterCallback(p Provider, redirectURL string) httprouter.Handle
- func Middleware(handlers ...Handler) http.Handler
- func Verified(w http.ResponseWriter, r *http.Request) error
- func Verify(w http.ResponseWriter, r *http.Request) error
- type Handler
- type Provider
- type User
Constants ¶
This section is empty.
Variables ¶
var ( // ErrTokenInvalid means the token wasn't valid based // on the value of its signature. ErrTokenInvalid = errors.New("Invalid token") // ErrCannotParseToken means that the token could not //be parsed. ErrCannotParseToken = errors.New("Cannot parse token") // ErrInvalidSigningMethod means that the method used // to sign the token was not the expected method, or // is an invalid method. ErrInvalidSigningMethod = errors.New("Invalid signing method") // ErrNoSigningKey means that a signing key doesn't // exist. ErrNoSigningKey = errors.New("No signing key") )
Functions ¶
func AuthInit ¶
func AuthInit(key []byte)
AuthInit overrides the randomly generated signing key. Useful for users who want to use the same key across server restarts, so users don't lose their session.
func ExpireCookie ¶
func ExpireCookie(w http.ResponseWriter, r *http.Request)
ExpireCookie sets the expiry on the cookie. It will not send the request.
func HTTPRouterAuthorize ¶
func HTTPRouterAuthorize(p Provider) httprouter.Handle
HTTPRouterAuthorize is the same thing as the regular `Authorize`, but for Julien Schmidt's HttpRouter.
This should be moved into it's own package.
func HTTPRouterCallback ¶
func HTTPRouterCallback(p Provider, redirectURL string) httprouter.Handle
HTTPRouterCallback is the thing as `Callback` but for Julien Schmidt's HttpRouter
func Middleware ¶
Middleware executes all our middleware.
Types ¶
type Handler ¶
type Handler func(w http.ResponseWriter, r *http.Request) error
Handler is the function definition for our middleware.
Source Files
Directories