auth

package module

v0.0.0-...-9093dfe Latest Latest Go to latest Published: Feb 3, 2026 License: MIT Imports: 12 Imported by: 1

Details

ed25519 (EdDSA) based verification
payload is encoded/decoded using
- GO - msgpack
- ZIG - json
ttl enforced to expire tokens
optional AES encryption
- GO - https://github.com/gtank/cryptopasta
- ZIG - TODO
format: {timestamp}.{payload}.{signature}

Provides symmetric authenticated encryption using 256-bit AES-GCM with a random nonce.

This section is empty.

View Source

var (
	ErrExpired  = errors.New("authentication expired")
	ErrModified = errors.New("payload or signature was modified")
)

func NewEncryptionKey() *[32]byte

NewEncryptionKey generates a random 256-bit key for Encrypt() and Decrypt(). It panics if the source of randomness fails.

type Authenticator[A any] struct {
	// Required
	Public  ed25519.PublicKey
	Private ed25519.PrivateKey

	// Optional
	EncryptionKey *[32]byte
}

func (this *Authenticator[A]) Decode(token []byte, ttl int64) (*A, error)

func (this *Authenticator[A]) Generate(src *A) ([]byte, error)

func (this *Authenticator[A]) GenerateStr(src *A) (string, error)

func (this *Authenticator[A]) Parse(token []byte, dst *A, ttl int64) error

Path	Synopsis
cmd
main command