sso

func Login ¶

func Login(url string, opts ...Option) (*Client, error)

Login simulates a browser session to log in with the provided URL, using the SPNEGO protocol.

package main

import (
	"fmt"
	"log"

	sso "github.com/sbinet/cern-sso"
)

func main() {
	const url = "https://openstack.cern.ch"

	cli, err := sso.Login(url)
	if err != nil {
		log.Fatalf("could not log into %q: %+v", url, err)
	}
	defer cli.Close()

	for _, c := range cli.Cookies() {
		scheme := "http"
		if c.Secure {
			scheme = "https"
		}
		fmt.Printf("%-20s %s\n", c.Name+":", scheme+"://"+c.Domain+c.Path)
	}
}

func NewClient ¶

func NewClient(login string, opts ...Option) (*Client, error)

NewClient creates a new SSO client that will authenticate with the provided login page. The returned client is not yet authenticated: one should use the Login method to do so.

func WithAuthServer ¶

func WithAuthServer(srv string) Option

WithAuthServer configures the authentication to use the passed authentication server name.

ex:

"auth.cern.ch"

func WithClient ¶

func WithClient(cli *http.Client) Option

WithClient configures the authentication to use the passed HTTP client.

func WithCookieExpiration ¶ added in v0.4.0

func WithCookieExpiration(exp time.Duration) Option

WithCookieExpiration configures the default expiration for the SSO cookie.

func WithKrb5 ¶

func WithKrb5(cli *krb5cli.Client) Option

WithKrb5 configures the authentication to user the provided kerberos5 client.

func WithLogger ¶

func WithLogger(msg *log.Logger) Option

WithLogger configures the authentication to use the passed logger.