library/xyz.malefic.koven.auth.server/AuthService

AuthService

object AuthService

Shared service for authentication logic, including JWT handling and token issuing.

Types

RefreshTokenCookie

object RefreshTokenCookie : CookieField<String>

HttpOnly cookie for the refresh token.

Properties

val jwtVerifier: JWTVerifier

The JWT verifier used to validate access tokens.

Functions

context(_: Raise<Issue>)
fun authenticate(request: Request): Principal

Shared authentication logic for both OAuth and Password handlers.

createAccessToken

context(auth: AuthType)
fun UserEntity.createAccessToken(): String

Creates an access token for the given user.

context(_: JdbcTransaction)
fun findOAuthUser(provider: String, providerUserId: String): UserEntity?

Finds a user associated with an OAuth provider and user ID.

fun generateSecret(bytes: Int = 32): String

Generates a secure random secret of the given bytes length, encoded as Base64.

fun hash(text: String): ByteArray

Hashes the given text using SHA-256.

context(_: JdbcTransaction, auth: AuthType)
fun UserEntity.issueTokenPair(): TokenModel

Issues a pair of access and refresh tokens for the given user.

linkOrCreateUser

context(_: JdbcTransaction, _: Raise<Issue>)
fun linkOrCreateUser(provider: String, providerUserId: String, preferredUsername: String, email: String, currentPrincipal: Principal? = null): UserEntity

Links a new OAuth account to an existing user or creates a new user.

context(_: Raise<Issue>, req: Request)
fun logout(): Cookie

Shared logic to logout by revoking the refresh token and clearing the cookie.

context(_: Raise<Issue>)
fun logout(refreshToken: String)

Revokes the given refresh token.

context(_: Raise<Issue>, _: AuthType, req: Request)
fun refresh(): ApiResponse<TokenResponseModel, Empty>

context(_: Raise<Issue>, auth: AuthType)
fun refreshTokens(refreshToken: String): TokenModel

Shared logic to refresh a token pair using a refresh token.

verifyRefreshToken

context(_: Raise<Issue>)
fun verifyRefreshToken(refreshToken: String): UserEntity

Verifies the given refreshToken and returns the associated UserEntity if successful.

context(_: Raise<Issue>)
fun verifyToken(token: String): Uuid

Verifies the given token and returns the subject (user ID) if successful.