# Functions
CheckTaskIsRunning verifies that the TaskID corresponds to a running task.
DeleteSource deletes a AuthSource record in DB.
GetOAuthAccessTokenScopeAndUserID returns access token scope and user id.
Init should be called exactly once when the application starts to allow plugins to allocate necessary resources.
NewGroup creates a new auth group.
SyncExternalUsers is used to synchronize users with external authorization source.
UserSignIn validates user name and password.
VerifyCert verifies the validity of the ssh certificate and returns the publickey of the signer We verify that the certificate is signed with the correct CA We verify that the http request is signed with the private key (of the public key mentioned in the certificate).
# Constants
BasicMethodName is the constant name of the basic authentication method.
BasicMethodName is the constant name of the basic authentication method.
BasicMethodName is the constant name of the basic authentication method.
BasicMethodName is the constant name of the basic authentication method.
ReverseProxyMethodName is the constant name of the ReverseProxy authentication method.
# Structs
Basic implements the Auth interface and authenticates requests (API requests only) by looking for Basic authentication data or "x-oauth-basic" token in the "Authorization" header.
Group implements the Auth interface with serval Auth.
HTTPSign implements the Auth interface and authenticates requests (API requests only) by looking for http signature data in the "Signature" header.
OAuth2 implements the Auth interface and authenticates requests (API requests only) by looking for an OAuth token in query parameters or the "Authorization" header.
ReverseProxy implements the Auth interface, but actually relies on a reverse proxy for authentication of users.
Session checks if there is a user uid stored in the session and returns the user object for that uid.
SSPI implements the SingleSignOn interface and authenticates requests via the built-in SSPI module in Windows for SPNEGO authentication.
# Interfaces
LocalTwoFASkipper represents a source of authentication that can skip local 2fa.
Method represents an authentication method (plugin) for HTTP requests.
PasswordAuthenticator represents a source of authentication.
SynchronizableSource represents a source that can synchronize users.