auth

package
v2.1.0+incompatible Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 27, 2018 License: MIT Imports: 7 Imported by: 7

Documentation

Overview

Package auth provides interfaces for implementing authentication logic that the WAMP router can use.

In addition in authentication and challenge-response authentication interface, this package provides default implementations for the following authentication methods: "wampcra", ticket", "anonymous".

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AnonymousAuth

type AnonymousAuth struct {
	AuthRole string
}

AnonymousAuth implements Authenticator interface.

To use anonymous authentication, supply an anstance of AnonymousAuth with the AuthRole of choice to the RealmConfig:

RealmConfigs: []*router.RealmConfig{
    {
        Authenticators:  []auth.Authenticator{
            &auth.AnonymousAuth{ AuthRole: "guest" },
        },
        ...
    },

Or, set AnonymousAuth=ture in the RealmConfig and let the router create an instance with the AuthRole of "anonymous".

func (*AnonymousAuth) AuthMethod

func (a *AnonymousAuth) AuthMethod() string

AuthMethod retruns description of authentication method.

func (*AnonymousAuth) Authenticate

func (a *AnonymousAuth) Authenticate(sid wamp.ID, details wamp.Dict, client wamp.Peer) (*wamp.Welcome, error)

Authenticate an anonymous client. This always succeeds, and provides the authmethod and authrole for the WELCOME message.

type Authenticator

type Authenticator interface {
	// Authenticate takes HELLO details and returns a WELCOME message if
	// successful, otherwise it returns an error.
	//
	// If the client is a websocket peer, and request capture is enabled, then
	// the HTTP request is stored in details.  If cookie tracking is enabled,
	// then the cookie from the request, and the next cookie to expect, are
	// also stored in details.
	//
	// These websocket data items are available as:
	//
	//     details.auth.request|*http.Request
	//     details.transport.auth.cookie|*http.Cookie
	//     details.transport.auth.nextcookie|*http.Cookie
	//
	// The tracking cookie can be used to tell if a client was previously
	// connected to the router, and look up information about that client, such
	// as whether it was successfully authenticated.
	Authenticate(sid wamp.ID, details wamp.Dict, client wamp.Peer) (*wamp.Welcome, error)

	// AuthMethod returns a string describing the authentication method.
	AuthMethod() string
}

Authenticator is implemented by a type that handles authentication using only the HELLO message.

type BypassKeyStore

type BypassKeyStore interface {
	KeyStore

	// AlreadyAuth takes information about a HELLO request including transport
	// details.  If the client is a websocket client, then information from the
	// HTTP upgrade request, the tracking cookie ID from the request, and next
	// tracking cookie ID (if enabled) are available in
	// details.transport.auth|Dict.
	//
	// If the client is recognized and already authenticated, then AlreadyAuth
	// returns true.  Otherwise, false is returned if not authenticated.
	AlreadyAuth(authid string, details wamp.Dict) bool

	// OnWelcome is called when a client is successfully authenticated.  This
	// allows the KeyStore to update any information about the authenticated
	// client, to modify the welcome message, and to store the next tracking
	// cookie ID to expect from the client.  The request information and the
	// next cookie ID are available from in details.transport.auth|Dict.
	OnWelcome(authid string, welcome *wamp.Welcome, details wamp.Dict) error
}

BypassKeyStore is a KeyStore with additional functionality for looking at HELLO.Details, including transport.auth information, to recognize clients that have been previously authenticated.

When used with the provided CR and ticket authenticators, if AlreadyAuth returns true, then the normal authentication method is bypassed.

type CRAuthenticator

type CRAuthenticator struct {
	// contains filtered or unexported fields
}

CRAuthenticator is a challenge-response authenticator.

func NewCRAuthenticator

func NewCRAuthenticator(keyStore KeyStore, timeout time.Duration) *CRAuthenticator

NewCRAuthenticator creates a new CRAuthenticator with the given key store and the maximum time to wait for a client to respond to a CHALLENGE message.

func (*CRAuthenticator) AuthMethod

func (cr *CRAuthenticator) AuthMethod() string

func (*CRAuthenticator) Authenticate

func (cr *CRAuthenticator) Authenticate(sid wamp.ID, details wamp.Dict, client wamp.Peer) (*wamp.Welcome, error)

type KeyStore

type KeyStore interface {
	// AuthKey returns the user's key appropriate for the specified authmethod.
	AuthKey(authid, authmethod string) ([]byte, error)

	// PasswordInfo returns salting info for the user's password.  This
	// information must be available when using keys computed with PBKDF2.
	PasswordInfo(authid string) (salt string, keylen int, iterations int)

	// Returns the authrole for the user.
	AuthRole(authid string) (string, error)

	// Returns name of this KeyStore instance.
	Provider() string
}

KeyStore is used to retrieve keys and information about a user.

type TicketAuthenticator

type TicketAuthenticator struct {
	CRAuthenticator
}

ticketAuthenticator implements CRAuthenticator

func NewTicketAuthenticator

func NewTicketAuthenticator(keyStore KeyStore, timeout time.Duration) *TicketAuthenticator

NewTicketAuthenticator creates a ticket-based CR authenticator.

Caution: This scheme is extremely simple and flexible, but the resulting security may be limited. E.g., the ticket value will be sent over the wire. If the transport WAMP is running over is not encrypted, a man-in-the-middle can sniff and possibly hijack the ticket. If the ticket value is reused, that might enable replay attacks.

func (*TicketAuthenticator) AuthMethod

func (t *TicketAuthenticator) AuthMethod() string

func (*TicketAuthenticator) Authenticate

func (t *TicketAuthenticator) Authenticate(sid wamp.ID, details wamp.Dict, client wamp.Peer) (*wamp.Welcome, error)

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL