monkey.ci.web.auth — com.monkeyci/app 0.5.3.1

Authentication and authorization functions

augment-payload clj

(augment-payload payload)

build-token clj

Creates token contents for a build, to be used by a build script.

config->keypair clj

(config->keypair conf)

Loads private and public keys from the app config, returns a map that can be used in the context :jwk.

customer-authorization clj

(customer-authorization h)

Middleware that verifies the identity token to check if the user or build has access to the given customer.

default-token-expiration clj

expired? clj

(expired? {:keys [exp]})

Returns true if token has expired

generate-jwt clj

(generate-jwt req payload)

Signs a JWT using the keypair from the request context.

generate-jwt-from-rt clj

(generate-jwt-from-rt rt payload)

Generates a JWT from the private key in the runtime

generate-keypair clj

(generate-keypair)

Generates a new RSA keypair

generate-secret-key clj

(generate-secret-key)

Generates a random secret key object

jwks clj

(jwks req)

JWKS endpoint handler

keypair->rt clj

(keypair->rt kp)

kid clj

make-jwk clj

(make-jwk pub)

Creates a JWK object from a public key that can be exposed for external verification.

resolve-token clj multimethod

role-build clj

role-user clj

rt->pub-key clj

secure-ring-app clj

(secure-ring-app app rt)

Wraps the ring handler so it verifies the JWT authorization header

sign-jwt clj

(sign-jwt payload pk)

user-token clj

Creates token contents for an authenticated user