d621548120
Implement the Auth interface, with JWT and service implementations. * Update Auth Interface * Define Auth Service Implementation * Support Service Auth * Add Auth Service Proto * Remove erronious files * Implement Auth Service Package * Update Auth Interface * Update Auth Interface. Add Validate, remove Add/Remove roles * Make Revoke interface more explicit * Refactor serializing and deserializing service accounts * Fix srv name & update interface to be more explicit * Require jwt public key for auth * Rename Variables (Resource.ID => Resource.Name & ServiceAccount => Account) * Implement JWT Auth Package * Remove parent, add ID * Update auth imports to v2. Add String() to auth interface
51 lines
1.2 KiB
Go
51 lines
1.2 KiB
Go
// Package auth provides authentication and authorization capability
|
|
package auth
|
|
|
|
import (
|
|
"time"
|
|
)
|
|
|
|
// Auth providers authentication and authorization
|
|
type Auth interface {
|
|
// String to identify the package
|
|
String() string
|
|
// Init the auth package
|
|
Init(opts ...Option) error
|
|
// Generate a new auth Account
|
|
Generate(id string, opts ...GenerateOption) (*Account, error)
|
|
// Revoke an authorization Account
|
|
Revoke(token string) error
|
|
// Validate an account token
|
|
Validate(token string) (*Account, error)
|
|
}
|
|
|
|
// Resource is an entity such as a user or
|
|
type Resource struct {
|
|
// Name of the resource
|
|
Name string
|
|
// Type of resource, e.g.
|
|
Type string
|
|
}
|
|
|
|
// Role an account has
|
|
type Role struct {
|
|
Name string
|
|
Resource *Resource
|
|
}
|
|
|
|
// Account provided by an auth provider
|
|
type Account struct {
|
|
// ID of the account (UUID or email)
|
|
Id string `json: "id"`
|
|
// Token used to authenticate
|
|
Token string `json: "token"`
|
|
// Time of Account creation
|
|
Created time.Time `json:"created"`
|
|
// Time of Account expiry
|
|
Expiry time.Time `json:"expiry"`
|
|
// Roles associated with the Account
|
|
Roles []*Role `json:"roles"`
|
|
// Any other associated metadata
|
|
Metadata map[string]string `json:"metadata"`
|
|
}
|