auth.go RawHistoryFolder

1package in
2
3import (
4	"context"
5	"time"
6
7	"gordon/internal/domain"
8)
9
10// AuthService defines the contract for registry authentication operations.
11type AuthService interface {
12	// GetAuthType returns the configured authentication type.
13	GetAuthType() domain.AuthType
14
15	// IsEnabled returns whether authentication is enabled.
16	IsEnabled() bool
17
18	// Password authentication
19	// ValidatePassword checks if the username and password are valid.
20	ValidatePassword(ctx context.Context, username, password string) bool
21
22	// Token authentication
23	// ValidateToken validates a JWT token and returns its claims.
24	ValidateToken(ctx context.Context, tokenString string) (*domain.TokenClaims, error)
25
26	// GenerateToken creates a new JWT token for the given subject and stores it.
27	// If expiry is 0, the token never expires.
28	GenerateToken(ctx context.Context, subject string, scopes []string, expiry time.Duration) (string, error)
29
30	// GenerateAccessToken creates a short-lived JWT for registry access without storing it.
31	// Used by /v2/token endpoint for Docker client sessions.
32	GenerateAccessToken(ctx context.Context, subject string, scopes []string, expiry time.Duration) (string, error)
33
34	// RevokeToken revokes a token by its ID.
35	RevokeToken(ctx context.Context, tokenID string) error
36
37	// ListTokens returns all stored tokens.
38	ListTokens(ctx context.Context) ([]domain.Token, error)
39
40	// GeneratePasswordHash generates a bcrypt hash for a password.
41	GeneratePasswordHash(password string) (string, error)
42}