auth

Paddy 2015-06-29 Parent:3223a8e679db

175:aa14e29b666f Go to Latest

auth/doc.go

Create Docker image for authd. Create a Dockerfile for authd, which will wrap the compiled Go binary up into a tiny little Docker image. Create an authd/build-docker.sh script that will build the statically-linked binary in a Docker container, so the authd Docker image can use it. We had to include ca-certificates.crt in the Dockerfile, as well, so we could communicate over SSL with things. A wrapper.sh file is included that will pull the JWT_SECRET environment variable out of a kubernetes secrets file, which is a handy wrapper to have. Finally, we added the authd/docker-authd binary to the .hgignore.

History
paddy@57 1 /*
paddy@57 2 Package auth provides an authentication service for managing user accounts and an OAuth2 provider.
paddy@57 3
paddy@57 4 The service is an opinionated implementation of authentication using passphrases and the
paddy@57 5 code.secondbit.org/pass package to implement user credentials and accounts. Additionally, users
paddy@158 6 are permitted to login using any email address they have on record. Care is also taken to be able
paddy@158 7 to mitigate attacks that have already happened and plan ahead for the worst case scenarios.
paddy@57 8
paddy@57 9 An OAuth2 provider is also built-in and provided, complete with client registration and management,
paddy@57 10 as well as a specification-based set of handlers for managing the issuing of grants and tokens. Token
paddy@57 11 validiity may be asserted through an API, or a proxy service is provided for stripping auth-specific
paddy@57 12 information from requests and replacing it with a trusted header containing information about the user
paddy@57 13 and client that authorized the request.
paddy@57 14 */
paddy@57 15 package auth