monkey.ci.web.auth — com.monkeyci/app 0.10.1

Authentication and authorization functions

augment-payload clj

(augment-payload payload)

build-token clj

Creates token contents for a build, to be used by a build script.

config->keypair clj

(config->keypair conf)

Loads private and public keys from the app config, returns a map that can be used in the context :jwk.

customer-authorization clj

(customer-authorization h)

Middleware that verifies the identity token to check if the user or build has access to the given customer.

default-token-expiration clj

expired? clj

(expired? {:keys [exp]})

Returns true if token has expired

generate-jwt clj

(generate-jwt req payload)

Signs a JWT using the keypair from the request context.

generate-jwt-from-rt clj

(generate-jwt-from-rt rt payload)

Generates a JWT from the private key in the runtime

generate-keypair clj

(generate-keypair)

Generates a new RSA keypair

generate-secret-key clj

(generate-secret-key)

Generates a random secret key object

jwks clj

(jwks req)

JWKS endpoint handler

keypair->rt clj

(keypair->rt kp)

kid clj

make-jwk clj

(make-jwk pub)

Creates a JWK object from a public key that can be exposed for external verification.

parse-signature clj

(parse-signature s)

Parses HMAC signature header, returns the algorithm and the signature.

req->webhook-id clj

resolve-token clj multimethod

role-build clj

role-user clj

rt->pub-key clj

secure-ring-app clj

(secure-ring-app app rt)

Wraps the ring handler so it verifies the JWT authorization header

sign-jwt clj

(sign-jwt payload pk)

user-id clj

Retrieves current user id from request

user-token clj

Creates token contents for an authenticated user

valid-security? clj

(valid-security? {:keys [secret payload x-hub-signature]})

Validates security header

validate-hmac-security clj

(validate-hmac-security h
                        {:keys [get-secret header]
                         :or {header "x-hub-signature-256"}})

Middleware that validates the HMAC security header using a fn that retrieves the secret for the request.