gelada

type AuthGuard interface {
	Check(username string, req *http.Request) bool
	Complaint(username string, req *http.Request)
}

type AuthProviderType func(user, password string) bool

type Client struct {
	Username   string
	UserAgent  string
	UserHost   string
	LoginDate  time.Time
	ExpireDate time.Time
	// contains filtered or unexported fields
}

type Gelada struct {
	// contains filtered or unexported fields
}

type Options struct {
	// http.Cookie options
	// Please, look at http://golang.org/pkg/net/http/#Cookie
	Path     string
	Domain   string
	MaxAge   int
	Secure   bool
	HTTPOnly bool

	// Cookie session name.
	// Default: "gelada-session"
	SessionName string

	// Duration of session. In seconds.
	// Default: 86400 (24 hours)
	SessionLifeTime int

	// Authentication and encryption keys. This is required for encoding and
	// decoding authenticated and optionally encrypted cookie values.
	//
	// Recommended to use a key with 32 or 64 bytes, and block key
	// length must correspond to the block size of the encryption algorithm.
	// For AES, used by default, valid lengths are 16, 24, or 32 bytes to select
	// AES-128, AES-192, or AES-256.
	//
	// For more information, please refer to http://www.gorillatoolkit.org/pkg/securecookie
	//
	// Default: 261AD9502C583BD7D8AA03083598653B, E9F6FDFAC2772D33FC5C7B3D6E4DDAFF
	// But use the default key only for testing. It's not secure.
	SessionKeys [][]byte

	// Assign a user's session with his browser user agent value.
	// Default: false
	BindUserAgent bool

	// Assign a user's session with his host value (IP address).
	// Default: false
	BindUserHost bool

	// Path to login handler, for redirect the client to authentication page.
	LoginRoute string

	// HTML field names, to retrieve 'user' and 'password' data from login form.
	// Deafult: "login" and "password"
	LoginUserFieldName     string
	LoginPasswordFieldName string

	// Path for redirect a client after authentication.
	// If option does not set - clients will be redirected to URL's, which
	// they tried to open before the authentication.
	PostLoginRoute string

	// Evil twin brother of LoginRoute. He ends the client session.
	LogoutRoute string

	// Similarly to PostLoginRoute.
	PostLogoutRoute string

	// Gelada can use an existing Gorilla session (CookieStore).
	// If GorillaCookieStore was set - SessionKeys will be ignored.
	GorillaCookieStore *sessions.CookieStore

	// AuthProvider provide opportunity to handle auth data.
	// It's take a login and password data, check it,
	// and return 'true' on success and 'false' on fail.
	AuthProvider AuthProviderType

	// Exceptions is a list of rules to be able to create exceptions for some
	// auth-free routes.
	//
	// Example. We set GlobalAuth on whole project. But we want provide some
	// zone without auth (all /noauth/... for example). Then we add "/noauth/.*"
	// to Exceptions. Bingo! All places will require authorization, except pages
	// on /noauth/... .
	Exceptions []string

	// AuthGuard is a tool for handle and processing login attempts.
	AuthGuard AuthGuard

	// UnauthorizedHeaderName - heder which will be sent to the client if the
	// user is not authorized.
	// Sends only if it was selected.
	UnauthorizedHeaderName string
}