soju/auth/auth.go
Simon Ser 36d6cb19a4 Move authError to auth package
This allows auth backends to customize the error message displayed
to the user.
2023-02-23 22:32:24 +01:00

58 lines
1.3 KiB
Go

package auth
import (
"context"
"fmt"
"git.sr.ht/~emersion/soju/database"
)
type Authenticator interface{}
type PlainAuthenticator interface {
AuthPlain(ctx context.Context, db database.Database, username, password string) error
}
type OAuthBearerAuthenticator interface {
AuthOAuthBearer(ctx context.Context, db database.Database, token string) (username string, err error)
}
func New(driver, source string) (Authenticator, error) {
switch driver {
case "internal":
return NewInternal(), nil
case "oauth2":
return newOAuth2(source)
case "pam":
return newPAM()
default:
return nil, fmt.Errorf("unknown auth driver %q", driver)
}
}
// Error is an authentication error.
type Error struct {
// Internal error cause. This will not be revealed to the user.
InternalErr error
// Message which can safely be sent to the user without compromising
// security.
ExternalMsg string
}
func (err *Error) Error() string {
return err.InternalErr.Error()
}
func (err *Error) Unwrap() error {
return err.InternalErr
}
// newInvalidCredentialsError wraps the provided error into an Error and
// indicates to the user that the provided credentials were invalid.
func newInvalidCredentialsError(err error) *Error {
return &Error{
InternalErr: err,
ExternalMsg: "Invalid credentials",
}
}