ssoca

module

v0.19.2 Latest Latest Go to latest Published: Jul 16, 2020 License: MIT

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/dpb587/ssoca

Links

Open Source Insights

README ¶

ssoca

SSO for services that use CA-based authentication.

For when you might want...

ssh users to authenticate against Cloud Foundry UAA,
Google Cloud project owners to have access to an OpenVPN server, or
a GitHub team to access a network with sshuttle

With the caveat that this repo...

is a work in progress, and
is open source to help facilitate demos, discussion, and reviews to continue its evolution

Summary

Supporting services like...

HTTP x.509 (rfc5280) (in theory)
OpenSSH (rfc6187)
OpenVPN
sshuttle

Supporting authentication from (and restricting by)...

GitHub - organization, team, user
Google - email, email domain, Cloud project+role
HTTP Basic

Supporting certificate authority keys stored in...

In-memory
Local filesystem

Supported technically by...

authentication being delegated to an external service (like Okta, UAA, GitHub, OAuth), and
external services being configured to trust a particular certificate authority, with
ssoca validating authentication and signing short-lived certificates.

Details

License

MIT License

Directories ¶

Path	Synopsis
auth
authn
authn/oauth2/client
authn/oauth2/internal/tests
authn/oauth2/server
authn/oauth2/server/config
authn/oauth2/server/req
authn/selfsignedjwt
authz
authz/filter
authz/filter/and
authz/filter/authenticated
authz/filter/filterfakes Code generated by counterfeiter.	Code generated by counterfeiter.
authz/filter/or
authz/filter/public
authz/filter/remote_ip
authz/filter/scope
authz/filter/username
authz/service
internal
certauth certauth helps manage usages and invocations of Certificate Authority related tasks.	certauth helps manage usages and invocations of Certificate Authority related tasks.
certauthfakes Code generated by counterfeiter.	Code generated by counterfeiter.
fs
memory
memory/memoryfakes
cli
client
errors
server
client
auth
clientfakes Code generated by counterfeiter.	Code generated by counterfeiter.
cmd
config
config/configfakes Code generated by counterfeiter.	Code generated by counterfeiter.
goflags
goflags/cmd
httpclient
service
service/servicefakes Code generated by counterfeiter.	Code generated by counterfeiter.
config
configfakes Code generated by counterfeiter.	Code generated by counterfeiter.
storage
storage/storagefakes Code generated by counterfeiter.	Code generated by counterfeiter.
httpclient
httpclientfakes Code generated by counterfeiter.	Code generated by counterfeiter.
internal
nettest
tools +build tools	+build tools
server
api
api/errors
config
requtil
service
service/dynamicvalue
service/dynamicvalue/dynamicvaluefakes Code generated by counterfeiter.	Code generated by counterfeiter.
service/req
service/req/reqfakes Code generated by counterfeiter.	Code generated by counterfeiter.
service/servicefakes Code generated by counterfeiter.	Code generated by counterfeiter.
service
auth
auth/client
auth/client/cli
auth/server
docroot
docroot/server
docroot/server/config
env
env/api
env/client
env/client/cli
env/httpclient
env/httpclient/httpclientfakes Code generated by counterfeiter.	Code generated by counterfeiter.
env/server
env/server/config
env/server/req
file
file/api
file/client
file/client/cli
file/httpclient
file/httpclient/httpclientfakes Code generated by counterfeiter.	Code generated by counterfeiter.
file/server
file/server/config
file/server/req
githubauth
githubauth/client
githubauth/server
githubauth/server/config
googleauth
googleauth/client
googleauth/server
googleauth/server/config
httpauth
httpauth/client
httpauth/server
httpauth/server/config
openvpn
openvpn/api
openvpn/client
openvpn/client/cli
openvpn/client/executable/finder
openvpn/client/internal
openvpn/client/management
openvpn/client/management/managementfakes Code generated by counterfeiter.	Code generated by counterfeiter.
openvpn/client/profile
openvpn/client/profile/profilefakes Code generated by counterfeiter.	Code generated by counterfeiter.
openvpn/httpclient
openvpn/httpclient/httpclientfakes Code generated by counterfeiter.	Code generated by counterfeiter.
openvpn/server
openvpn/server/config
openvpn/server/req
ssh
ssh/api
ssh/client
ssh/client/cli
ssh/httpclient
ssh/httpclient/httpclientfakes Code generated by counterfeiter.	Code generated by counterfeiter.
ssh/server
ssh/server/config
ssh/server/req
uaaauth
uaaauth/api
uaaauth/client
uaaauth/helper
uaaauth/helper/helperfakes Code generated by counterfeiter.	Code generated by counterfeiter.
uaaauth/internal
uaaauth/internal/tests
uaaauth/server
uaaauth/server/config
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL