server

type Authenticator interface {
	// Socks5Authenticate provide authentication of users. Return socks5.ErrAuthMethodNotSupported if the method is
	// not supported by the authenticator. For non-anonymous methods, the returned username must not be the
	// empty string.
	Socks5Authenticate(rw io.ReadWriter, am socks5.AuthMethod, address string) (username string, err error)
}

type CredentialsValidator interface {
	ValidateCredentials(username, password, address string) bool
}

type DialerSelector interface {
	// SelectDialer returns the ContextDialer to use.
	//
	// When called, client has already logged in. If username is the empty string, AuthMethodNone was used.
	// In case of error, it is recommended to return one of the socks5.ErrReply... errors,
	// as those will be mapped to SOCKS5 error codes in the reply to the client.
	SelectDialer(username, network, address string) (cd socks5.ContextDialer, err error)
}

type NoAuthAuthenticator struct{}

type Request struct {
	Addr socks5.Addr
	Cmd  socks5.CommandType
}

type Response struct {
	Addr  socks5.Addr
	Reply socks5.ReplyCode
}

type Server struct {
	// List of authentication providers. If nil, uses NoAuthAuthenticator.
	// Order matters; they are tried in the given order.
	Authenticators []Authenticator

	// DialerSelector is called to get the ContextDialer to use for an outgoing connection.
	// If nil, socks5.DefaultDialer will be used, which if not changed is a net.Dialer.
	DialerSelector

	Logger socks5.Logger // If not nil, use this Logger (compatible with log/slog)
	Debug  bool          // If true, output debug logging using Logger.Info
	// contains filtered or unexported fields
}

type StaticCredentials map[string]string

type UserPassAuthenticator struct {
	Credentials CredentialsValidator
}