Kyle Isom
dd698ff6d8
- db.Open: delegate to mcdsl/db.Open - db.Migrate: convert to mcdsl/db.Migration format, delegate - auth: type aliases for TokenInfo/Authenticator/Config from mcdsl, re-export error sentinels, Logout helper - cmd/server: construct auth.Authenticator from Config (not mcias.Client) - server/routes.go logout: use auth.Logout(authenticator, token) - grpcserver/auth.go: same logout pattern, fix Login return type (time.Time not string) - webserver: replace mcias.Client with mcdsl/auth for service token validation; resolveUser degrades to raw UUID (TODO: restore when mcias client library is properly tagged) - Dockerfiles: bump to golang:1.25-alpine, remove gcc/musl-dev, add VERSION build arg - Deploy: add docker-compose-rift.yml with localhost-only port mapping - Remove git.wntrmute.dev/kyle/mcias/clients/go dependency entirely - All tests pass, net -185 lines Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
50 lines
1.6 KiB
Go
50 lines
1.6 KiB
Go
// Package auth provides MCIAS authentication integration, delegating to
|
|
// the mcdsl/auth package for token validation with caching.
|
|
package auth
|
|
|
|
import (
|
|
"errors"
|
|
"log/slog"
|
|
|
|
mcdslauth "git.wntrmute.dev/kyle/mcdsl/auth"
|
|
)
|
|
|
|
// TokenInfo is an alias for the mcdsl auth.TokenInfo type.
|
|
type TokenInfo = mcdslauth.TokenInfo
|
|
|
|
// Authenticator is an alias for the mcdsl auth.Authenticator type.
|
|
type Authenticator = mcdslauth.Authenticator
|
|
|
|
// Config is an alias for the mcdsl auth.Config type.
|
|
type Config = mcdslauth.Config
|
|
|
|
// Errors re-exported from mcdsl/auth for compatibility.
|
|
var (
|
|
ErrInvalidCredentials = mcdslauth.ErrInvalidCredentials
|
|
ErrInvalidToken = mcdslauth.ErrInvalidToken
|
|
ErrForbidden = mcdslauth.ErrForbidden
|
|
ErrUnavailable = mcdslauth.ErrUnavailable
|
|
)
|
|
|
|
// NewAuthenticator creates a new Authenticator backed by mcdsl/auth.
|
|
// This is a convenience wrapper matching the old constructor signature.
|
|
func NewAuthenticator(cfg mcdslauth.Config, logger *slog.Logger) (*Authenticator, error) {
|
|
return mcdslauth.New(cfg, logger)
|
|
}
|
|
|
|
// Logout revokes a token on the MCIAS server.
|
|
func Logout(authenticator *Authenticator, token string) error {
|
|
return authenticator.Logout(token)
|
|
}
|
|
|
|
// ContextWithTokenInfo stores TokenInfo in a context.
|
|
var ContextWithTokenInfo = mcdslauth.ContextWithTokenInfo
|
|
|
|
// TokenInfoFromContext extracts TokenInfo from a context.
|
|
var TokenInfoFromContext = mcdslauth.TokenInfoFromContext
|
|
|
|
// IsInvalidCredentials checks if an error is ErrInvalidCredentials.
|
|
func IsInvalidCredentials(err error) bool {
|
|
return errors.Is(err, ErrInvalidCredentials)
|
|
}
|