macaroon v3.0.4

macaroon

A JavaScript implementation of macaroons compatible with the Go, Python, and C implementations. Including functionality to interact with third party caveat dischargers implemented by the Go macaroon bakery. It supports both version 1 and 2 macaroons in JSON and binary formats.

• macaroon
  • Macaroon#caveats ⇒ Array ⏏
  • Macaroon#location ⇒ string ⏏
  • Macaroon#identifier ⇒ Uint8Array ⏏
  • Macaroon#signature ⇒ Uint8Array ⏏
  • base64ToBytes(s) ⇒ Uint8Array ⏏
  • bytesToBase64(bytes) ⇒ string ⏏
  • Macaroon#addThirdPartyCaveat(rootKeyBytes, caveatIdBytes, [locationStr]) ⏏
  • Macaroon#addFirstPartyCaveat(caveatIdBytes) ⏏
  • Macaroon#bindToRoot(rootSig) ⏏
  • Macaroon#clone() ⇒ Macaroon ⏏
  • Macaroon#verify(rootKeyBytes, check, discharges) ⏏
  • Macaroon#exportJSON() ⇒ Object ⏏
  • Macaroon#exportBinary() ⇒ Uint8Array ⏏
  • importMacaroon(obj) ⇒ Macaroon | Array.<Macaroon> ⏏
  • importMacaroons(obj) ⇒ Array.<Macaroon> ⏏
  • newMacaroon() ⇒ Macaroon ⏏
  • dischargeMacaroon(macaroon, getDischarge, onOk, onError) ⏏

Macaroon#caveats ⇒ Array ⏏

Return the caveats associated with the macaroon, as an array of caveats. A caveat is represented as an object with an identifier field (Uint8Array) and (for third party caveats) a location field (string), and verification id (Uint8Array).

Kind: Exported member
Returns: Array - - The macaroon's caveats.

Macaroon#location ⇒ string ⏏

Return the location of the macaroon.

Kind: Exported member
Returns: string - - The macaroon's location.

Macaroon#identifier ⇒ Uint8Array ⏏

Return the macaroon's identifier.

Kind: Exported member
Returns: Uint8Array - - The macaroon's identifier.

Macaroon#signature ⇒ Uint8Array ⏏

Return the signature of the macaroon.

Kind: Exported member
Returns: Uint8Array - - The macaroon's signature.

base64ToBytes(s) ⇒ Uint8Array ⏏

Convert a base64 string to a Uint8Array by decoding it. It copes with unpadded and URL-safe base64 encodings.

Kind: Exported function
Returns: Uint8Array - - The decoded bytes.

bytesToBase64(bytes) ⇒ string ⏏

Convert a Uint8Array to a base64-encoded string using URL-safe, unpadded encoding.

Kind: Exported function
Returns: string - - The base64-encoded result.

Macaroon#addThirdPartyCaveat(rootKeyBytes, caveatIdBytes, locationStr) ⏏

Adds a third party caveat to the macaroon. Using the given shared root key, caveat id and location hint. The caveat id should encode the root key in some way, either by encrypting it with a key known to the third party or by holding a reference to it stored in the third party's storage.

Kind: Exported function

Macaroon#addFirstPartyCaveat(caveatIdBytes) ⏏

Adds a caveat that will be verified by the target service.

Kind: Exported function

Macaroon#bindToRoot(rootSig) ⏏

Binds the macaroon signature to the given root signature. This must be called on discharge macaroons with the primary macaroon's signature before sending the macaroons in a request.

Kind: Exported function

Macaroon#clone() ⇒ Macaroon ⏏

Returns a copy of the macaroon. Any caveats added to the returned macaroon will not effect the original.

Kind: Exported function
Returns: Macaroon - - The cloned macaroon.

Macaroon#verify(rootKeyBytes, check, discharges) ⏏

Verifies that the macaroon is valid. Throws exception if verification fails.

Kind: Exported function

Macaroon#exportJSON() ⇒ Object ⏏

Exports the macaroon to a JSON-serializable object. The version used depends on what version the macaroon was created with or imported from.

Kind: Exported function

Macaroon#exportBinary() ⇒ Uint8Array ⏏

Exports the macaroon using binary format. The version will be the same as the version that the macaroon was created with or imported from.

Kind: Exported function

importMacaroon(obj) ⇒ Macaroon | Array.<Macaroon> ⏏

Returns a macaroon instance based on the object passed in. If obj is a string, it is assumed to be a base64-encoded macaroon in binary or JSON format. If obj is a Uint8Array, it is assumed to be a macaroon in binary format, as produced by the exportBinary method. Otherwise obj is assumed to be a object decoded from JSON, and will be unmarshaled as such.

Kind: Exported function

importMacaroons(obj) ⇒ Array.<Macaroon> ⏏

Returns an array of macaroon instances based on the object passed in. If obj is a string, it is assumed to be a set of base64-encoded macaroons in binary or JSON format. If obj is a Uint8Array, it is assumed to be set of macaroons in binary format, as produced by the exportBinary method. If obj is an array, it is assumed to be an array of macaroon objects decoded from JSON. Otherwise obj is assumed to be a macaroon object decoded from JSON.

This function accepts a strict superset of the formats accepted by importMacaroons. When decoding a single macaroon, it will return an array with one macaroon element.

Kind: Exported function

newMacaroon() ⇒ Macaroon ⏏

Create a new Macaroon with the given root key, identifier, location and signature and return it.

Kind: Exported function

dischargeMacaroon(macaroon, getDischarge, onOk, onError) ⏏

Gathers discharge macaroons for all third party caveats in the supplied macaroon (and any subsequent caveats required by those) calling getDischarge to acquire each discharge macaroon.

Kind: Exported function