auth

func AdminOnly ¶

func AdminOnly(opts *Opts) func(http.Handler) http.Handler

func CreateAccessToken ¶

func CreateAccessToken(opts *CreateTokenOpts) (string, error)

CreateAccessToken generates an access token.

func CreateRefreshToken ¶

func CreateRefreshToken(opts *CreateTokenOpts) (string, error)

CreateRefreshToken generates a refresh token.

func CreateServiceJwt ¶

func CreateServiceJwt(params *ServiceJwtOpts) (tokenJwt string, err error)

func CreateTokens ¶

func CreateTokens(opts *CreateTokenOpts) (access, refresh string, err error)

func ExtractToken ¶

func ExtractToken(jwtSecret []byte) func(http.Handler) http.Handler

ExtractToken is a middleware function that will store a jwt token in the request context if one is present. It will not fail if the jwt token is invalid or not found.

func GenerateJTI ¶

func GenerateJTI() (string, error)

func GenerateRandomToken ¶

func GenerateRandomToken() (string, error)

GenerateRandomToken generates a random token formatted as xxxxx-xxxxx

func GetRefreshTokenID ¶

func GetRefreshTokenID() (string, error)

getRefreshTokenID generates a unique identifier for the refresh token.

func GetResolverSigningKey ¶

func GetResolverSigningKey(
	ctx context.Context,
	resolver indigodid.Resolver,
	iss string,
) (crypto.PublicKey, error)

func RefreshTokenOnly ¶

func RefreshTokenOnly(opts *Opts) func(http.Handler) http.Handler

func Required ¶

func Required(opts *Opts) func(http.Handler) http.Handler

AuthRequired will extract a jwt token and store it in the request context. It will fail hard if the token is invalid or not found.

func StashUser ¶

func StashUser(ctx context.Context, auth *xrpc.Auth) context.Context

func TokenFromContext ¶

func TokenFromContext(ctx context.Context) *jwt.Token

func UserFromContext ¶

func UserFromContext(ctx context.Context) *xrpc.Auth