auth.proto
path mgmt/v1alpha1/auth.proto
package mgmt.v1alpha1
Messages
AccessToken
A decoded representation of an Access token from the backing auth server
Name | Type | Description |
---|
access_token | string | |
refresh_token | optional string | |
expires_in | int64 | |
scope | string | |
id_token | optional string | |
token_type | string | |
GetAuthStatusRequest
GetAuthStatusResponse
Name | Type | Description |
---|
is_enabled | bool | Whether or not the server has authentication enabled.
This tells the client if it is expected to send access tokens. |
GetAuthorizeUrlRequest
Name | Type | Description |
---|
state | string | The state that's generated by the client that is passed along to prevent tampering |
redirect_uri | string | The redirect uri that the client will be redirected back to during the auth request |
scope | string | The scopes the client is requesting as a part of the oauth login request |
GetAuthorizeUrlResponse
Name | Type | Description |
---|
url | string | The generated url that is the client will be redirected to during the Oauth flow |
GetCliIssuerRequest
GetCliIssuerResponse
Name | Type | Description |
---|
issuer_url | string | The backing authentication issuer url |
audience | string | The audience that will be used in the access token. This corresponds to the "aud" claim |
LoginCliRequest
Name | Type | Description |
---|
code | string | The oauth code |
redirect_uri | string | The oauth redirect uri that the client uses during the oauth request |
LoginCliResponse
Name | Type | Description |
---|
access_token | AccessToken | The access token that is returned on successful login |
Services
AuthService
Service that handles generic Authentication for Neosync
Today this is mostly used by the CLI to receive authentication information
LoginCli
GetCliIssuer
GetAuthorizeUrl
GetAuthStatus
Method | GetAuthStatus |
---|
Request | GetAuthStatusRequest |
---|
Response | GetAuthStatusResponse |
---|
Description | Returns the auth status of the API server. Whether or not the backend has authentication enabled.
This is used by clients to make decisions on whether or not they should send access tokens to the API. |
---|