auth
2015-06-29
Parent:3223a8e679db
auth/doc.go
Create Docker image for authd. Create a Dockerfile for authd, which will wrap the compiled Go binary up into a tiny little Docker image. Create an authd/build-docker.sh script that will build the statically-linked binary in a Docker container, so the authd Docker image can use it. We had to include ca-certificates.crt in the Dockerfile, as well, so we could communicate over SSL with things. A wrapper.sh file is included that will pull the JWT_SECRET environment variable out of a kubernetes secrets file, which is a handy wrapper to have. Finally, we added the authd/docker-authd binary to the .hgignore.
| paddy@57 | 1 /* |
| paddy@57 | 2 Package auth provides an authentication service for managing user accounts and an OAuth2 provider. |
| paddy@57 | 3 |
| paddy@57 | 4 The service is an opinionated implementation of authentication using passphrases and the |
| paddy@57 | 5 code.secondbit.org/pass package to implement user credentials and accounts. Additionally, users |
| paddy@158 | 6 are permitted to login using any email address they have on record. Care is also taken to be able |
| paddy@158 | 7 to mitigate attacks that have already happened and plan ahead for the worst case scenarios. |
| paddy@57 | 8 |
| paddy@57 | 9 An OAuth2 provider is also built-in and provided, complete with client registration and management, |
| paddy@57 | 10 as well as a specification-based set of handlers for managing the issuing of grants and tokens. Token |
| paddy@57 | 11 validiity may be asserted through an API, or a proxy service is provided for stripping auth-specific |
| paddy@57 | 12 information from requests and replacing it with a trusted header containing information about the user |
| paddy@57 | 13 and client that authorized the request. |
| paddy@57 | 14 */ |
| paddy@57 | 15 package auth |