oauth2

package module

Go to main page

Versions in this module

v0

v0.1.17

Sep 1, 2024

Changes in this version

+ type AllowedJWTAssertionAudiencesProvider interface

+ GetAllowedJWTAssertionAudiences func(ctx context.Context) (audiences []string)

type Config

+ AllowedJWTAssertionAudiences []string

+ func (c *Config) GetAllowedJWTAssertionAudiences(ctx context.Context) []string

v0.1.16

Aug 30, 2024

v0.1.15

Aug 29, 2024

Changes in this version

+ type DefaultJARClient struct

+ IntrospectionEndpointAuthMethod string

+ IntrospectionEndpointAuthSigningAlg string

+ JSONWebKeys *jose.JSONWebKeySet

+ JSONWebKeysURI string

+ RequestObjectEncryptionAlg string

+ RequestObjectEncryptionEnc string

+ RequestObjectEncryptionKeyID string

+ RequestObjectSigningAlg string

+ RequestObjectSigningKeyID string

+ RequestURIs []string

+ RevocationEndpointAuthMethod string

+ RevocationEndpointAuthSigningAlg string

+ TokenEndpointAuthMethod string

+ TokenEndpointAuthSigningAlg string

+ func (c *DefaultJARClient) GetIntrospectionEndpointAuthMethod() string

+ func (c *DefaultJARClient) GetIntrospectionEndpointAuthSigningAlg() string

+ func (c *DefaultJARClient) GetJSONWebKeys() *jose.JSONWebKeySet

+ func (c *DefaultJARClient) GetJSONWebKeysURI() string

+ func (c *DefaultJARClient) GetRequestObjectEncryptionAlg() string

+ func (c *DefaultJARClient) GetRequestObjectEncryptionEnc() string

+ func (c *DefaultJARClient) GetRequestObjectEncryptionKeyID() string

+ func (c *DefaultJARClient) GetRequestObjectSigningAlg() string

+ func (c *DefaultJARClient) GetRequestObjectSigningKeyID() string

+ func (c *DefaultJARClient) GetRequestURIs() []string

+ func (c *DefaultJARClient) GetRevocationEndpointAuthMethod() string

+ func (c *DefaultJARClient) GetRevocationEndpointAuthSigningAlg() string

+ func (c *DefaultJARClient) GetTokenEndpointAuthMethod() string

+ func (c *DefaultJARClient) GetTokenEndpointAuthSigningAlg() string

+ type IDTokenClient interface

+ GetIDTokenEncryptedResponseAlg func() (alg string)

+ GetIDTokenEncryptedResponseEnc func() (enc string)

+ GetIDTokenEncryptedResponseKeyID func() (kid string)

+ GetIDTokenSignedResponseAlg func() (alg string)

+ GetIDTokenSignedResponseKeyID func() (kid string)

type IntrospectionJWTResponseClient

+ GetIntrospectionEncryptedResponseAlg func() (alg string)

+ GetIntrospectionEncryptedResponseEnc func() (enc string)

+ GetIntrospectionEncryptedResponseKeyID func() (kid string)

+ type JARClient interface

+ GetRequestObjectEncryptionAlg func() (alg string)

+ GetRequestObjectEncryptionEnc func() (enc string)

+ GetRequestObjectEncryptionKeyID func() (kid string)

+ GetRequestObjectSigningAlg func() (alg string)

+ GetRequestObjectSigningKeyID func() (kid string)

+ GetRequestURIs func() (requestURIs []string)

type JARMClient

+ GetAuthorizationEncryptedResponseEnc func() (alg string)

+ GetAuthorizationEncryptedResponseKeyID func() (kid string)

type JWTProfileClient

+ GetAccessTokenEncryptedResponseAlg func() (alg string)

+ GetAccessTokenEncryptedResponseEnc func() (alg string)

+ GetAccessTokenEncryptedResponseKeyID func() (kid string)

+ type UserInfoClient interface

+ GetUserinfoEncryptedResponseAlg func() (alg string)

+ GetUserinfoEncryptedResponseEnc func() (enc string)

+ GetUserinfoEncryptedResponseKeyID func() (kid string)

+ GetUserinfoSignedResponseAlg func() (alg string)

+ GetUserinfoSignedResponseKeyID func() (kid string)

v0.1.14

Jun 9, 2024

v0.1.13

Jun 5, 2024

v0.1.12

Apr 22, 2024

Changes in this version

type AuthenticationMethodClient

+ GetRevocationEndpointAuthMethod func() (method string)

+ GetRevocationEndpointAuthSigningAlg func() (alg string)

type DefaultJWTSecuredAuthorizationRequest

+ RevocationEndpointAuthMethod string

+ RevocationEndpointAuthSigningAlg string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetRevocationEndpointAuthMethod() string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetRevocationEndpointAuthSigningAlg() string

+ type EndpointClientAuthHandler interface

+ AllowAuthMethodAny func() bool

+ GetAuthMethod func(client AuthenticationMethodClient) string

+ GetAuthSigningAlg func(client AuthenticationMethodClient) string

+ Name func() string

type Fosite

+ func (f *Fosite) AuthenticateClientWithAuthHandler(ctx context.Context, r *http.Request, form url.Values, ...) (client Client, method string, err error)

+ type IntrospectionEndpointClientAuthHandler struct

+ func (h *IntrospectionEndpointClientAuthHandler) AllowAuthMethodAny() bool

+ func (h *IntrospectionEndpointClientAuthHandler) GetAuthMethod(client AuthenticationMethodClient) string

+ func (h *IntrospectionEndpointClientAuthHandler) GetAuthSigningAlg(client AuthenticationMethodClient) string

+ func (h *IntrospectionEndpointClientAuthHandler) Name() string

+ type RevocationEndpointClientAuthHandler struct

+ func (h *RevocationEndpointClientAuthHandler) AllowAuthMethodAny() bool

+ func (h *RevocationEndpointClientAuthHandler) GetAuthMethod(client AuthenticationMethodClient) string

+ func (h *RevocationEndpointClientAuthHandler) GetAuthSigningAlg(client AuthenticationMethodClient) string

+ func (h *RevocationEndpointClientAuthHandler) Name() string

+ type TokenEndpointClientAuthHandler struct

+ func (h *TokenEndpointClientAuthHandler) AllowAuthMethodAny() bool

+ func (h *TokenEndpointClientAuthHandler) GetAuthMethod(client AuthenticationMethodClient) string

+ func (h *TokenEndpointClientAuthHandler) GetAuthSigningAlg(client AuthenticationMethodClient) string

+ func (h *TokenEndpointClientAuthHandler) Name() string

v0.1.11

Apr 22, 2024

Changes in this version

+ type AllowedClientAuthenticationMethodHandler interface

+ GetAuthMethod func(client AuthenticationMethodClient) string

+ GetAuthSigningAlg func(client AuthenticationMethodClient) string

+ type AuthenticationMethodClient interface

+ GetIntrospectionEndpointAuthMethod func() (method string)

+ GetIntrospectionEndpointAuthSigningAlg func() (alg string)

+ GetTokenEndpointAuthMethod func() (method string)

+ GetTokenEndpointAuthSigningAlg func() (alg string)

type DefaultJWTSecuredAuthorizationRequest

+ IntrospectionEndpointAuthMethod string

+ IntrospectionEndpointAuthSigningAlg string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetIntrospectionEndpointAuthMethod() string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetIntrospectionEndpointAuthSigningAlg() string

type Fosite

+ func (f *Fosite) AuthenticateClientWithResolver(ctx context.Context, r *http.Request, form url.Values, ...) (client Client, method string, err error)

+ type IntrospectionEndpointAllowedClientAuthenticationMethodHandler struct

+ func (h *IntrospectionEndpointAllowedClientAuthenticationMethodHandler) GetAuthMethod(client AuthenticationMethodClient) string

+ func (h *IntrospectionEndpointAllowedClientAuthenticationMethodHandler) GetAuthSigningAlg(client AuthenticationMethodClient) string

+ type JSONWebKeysClient interface

+ GetJSONWebKeys func() (jwks *jose.JSONWebKeySet)

+ GetJSONWebKeysURI func() (uri string)

+ type TokenEndpointAllowedClientAuthenticationMethodHandler struct

+ func (h *TokenEndpointAllowedClientAuthenticationMethodHandler) GetAuthMethod(client AuthenticationMethodClient) string

+ func (h *TokenEndpointAllowedClientAuthenticationMethodHandler) GetAuthSigningAlg(client AuthenticationMethodClient) string

v0.1.10

Apr 11, 2024

Changes in this version

type BCryptClientSecret

+ func (s *BCryptClientSecret) Valid() (valid bool)

type ClientSecret

+ Valid func() (valid bool)

v0.1.9

Apr 7, 2024

Changes in this version

+ type DeviceUserAuthorizeResponder interface

+ AddHeader func(key, value string)

+ AddParameter func(key, value string)

+ GetExtra func(key string) (extra any)

+ GetHeader func() (header http.Header)

+ GetParameters func() (query url.Values)

+ GetStatus func() (status string)

+ SetExtra func(key string, value any)

+ SetStatus func(status string)

+ ToMap func() (values map[string]any)

v0.1.8

Apr 6, 2024

v0.1.7

Apr 5, 2024

v0.1.6

Apr 2, 2024

v0.1.5

Apr 1, 2024

Changes in this version

+ type DefaultJWTSecuredAuthorizationRequest struct

+ JSONWebKeys *jose.JSONWebKeySet

+ JSONWebKeysURI string

+ RequestObjectSigningAlg string

+ RequestURIs []string

+ TokenEndpointAuthMethod string

+ TokenEndpointAuthSigningAlg string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetJSONWebKeys() *jose.JSONWebKeySet

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetJSONWebKeysURI() string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetRequestObjectSigningAlg() string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetRequestURIs() []string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetTokenEndpointAuthMethod() string

+ func (c *DefaultJWTSecuredAuthorizationRequest) GetTokenEndpointAuthSigningAlg() string

+ type JWTSecuredAuthorizationRequestClient interface

+ GetJSONWebKeys func() (jwks *jose.JSONWebKeySet)

+ GetJSONWebKeysURI func() (uri string)

+ GetRequestObjectSigningAlg func() (alg string)

+ GetRequestURIs func() (requestURIs []string)

+ GetTokenEndpointAuthMethod func() (method string)

+ GetTokenEndpointAuthSigningAlg func() (alg string)

v0.1.4

Mar 31, 2024

Changes in this version

+ func IsMatchingRedirectURI(uri string, haystack []string) (string, bool)

type Config

+ IntrospectionIssuer string

+ IntrospectionJWTResponseSigner jwt.Signer

+ func (c *Config) GetIntrospectionIssuer(ctx context.Context) string

+ func (c *Config) GetIntrospectionJWTResponseSigner(ctx context.Context) jwt.Signer

+ type IntrospectionIssuerProvider interface

+ GetIntrospectionIssuer func(ctx context.Context) (issuer string)

+ type IntrospectionJWTResponseClient interface

+ GetIntrospectionSignedResponseAlg func() (alg string)

+ GetIntrospectionSignedResponseKeyID func() (kid string)

+ type IntrospectionJWTResponseSignerProvider interface

+ GetIntrospectionJWTResponseSigner func(ctx context.Context) jwt.Signer

v0.1.3

Mar 27, 2024

Changes in this version

+ type ClientAssertion struct

+ Algorithm string

+ Client Client

+ ID string

+ Method string

+ Parsed bool

+ Raw string

+ Type string

+ func NewClientAssertion(ctx context.Context, store ClientManager, raw, assertionType string) (assertion *ClientAssertion, err error)

type Config

+ ResponseModeParameterHandlers ResponseModeParameterHandlers

+ func (c *Config) GetResponseModeParameterHandlers(ctx context.Context) ResponseModeParameterHandlers

+ type RFC9207ResponseModeParameterHandler struct

+ Config interface{ ... }

+ func (h *RFC9207ResponseModeParameterHandler) ResponseModes() ResponseModeTypes

+ func (h *RFC9207ResponseModeParameterHandler) WriteParameters(ctx context.Context, requester AuthorizeRequester, parameters url.Values)

+ type ResponseModeHandlers []ResponseModeHandler

+ func (a *ResponseModeHandlers) Append(h ResponseModeHandler)

+ type ResponseModeParameterHandler interface

+ ResponseModes func() ResponseModeTypes

+ WriteParameters func(ctx context.Context, requester AuthorizeRequester, parameters url.Values)

+ type ResponseModeParameterHandlerProvider interface

+ GetResponseModeParameterHandlers func(ctx context.Context) (handlers ResponseModeParameterHandlers)

+ type ResponseModeParameterHandlers []ResponseModeParameterHandler

+ func (a *ResponseModeParameterHandlers) Append(h ResponseModeParameterHandler)

v0.1.2

Mar 16, 2024

v0.1.1

Mar 15, 2024

v0.1.0

Mar 13, 2024

Changes in this version

+ const AccessRequestContextKey

+ const AccessResponseContextKey

+ const AccessToken

+ const AuthorizeCode

+ const AuthorizeRequestContextKey

+ const AuthorizeResponseContextKey

+ const BearerAccessToken

+ const DebugPARConfigMissing

+ const DebugPARRequestsHandlerMissing

+ const DebugPARStorageInvalid

+ const DefaultBCryptWorkFactor

+ const DeviceCode

+ const ErrorPARNotSupported

+ const GrantTypeAuthorizationCode

+ const GrantTypeClientCredentials

+ const GrantTypeDeviceCode

+ const GrantTypeImplicit

+ const GrantTypeJWTBearer

+ const GrantTypePassword

+ const GrantTypeRefreshToken

+ const GrantTypeTokenExchange

+ const IDToken

+ const MinParameterEntropy

+ const PushedAuthorizeRequestContext

+ const PushedAuthorizeResponseContextKey

+ const RefreshToken

+ const RequestContextKey

+ const ResponseModeDefault

+ const ResponseModeFormPost

+ const ResponseModeFormPostJWT

+ const ResponseModeFragment

+ const ResponseModeFragmentJWT

+ const ResponseModeJWT

+ const ResponseModeQuery

+ const ResponseModeQueryJWT

+ const UserCode

+ var DefaultFormPostTemplate = template.Must(template.New("form_post").Parse(...))

+ var ErrAccessDenied = &RFC6749Error

+ var ErrAuthorizationPending = &RFC6749Error

+ var ErrClientSecretNotRegistered = errors.New(...)

+ var ErrConsentRequired = &RFC6749Error

+ var ErrDeviceExpiredToken = &RFC6749Error

+ var ErrInactiveToken = &RFC6749Error

+ var ErrInsufficientEntropy = &RFC6749Error

+ var ErrInteractionRequired = &RFC6749Error

+ var ErrInvalidClient = &RFC6749Error

+ var ErrInvalidGrant = &RFC6749Error

+ var ErrInvalidRequest = &RFC6749Error

+ var ErrInvalidRequestObject = &RFC6749Error

+ var ErrInvalidRequestURI = &RFC6749Error

+ var ErrInvalidScope = &RFC6749Error

+ var ErrInvalidState = &RFC6749Error

+ var ErrInvalidTokenFormat = &RFC6749Error

+ var ErrInvalidatedAuthorizeCode = errors.New("Authorization code has ben invalidated")

+ var ErrInvalidatedDeviceCode = errors.New("Device code has been invalidated")

+ var ErrInvalidatedUserCode = errors.New("user code has been invalidated")

+ var ErrJTIKnown = &RFC6749Error

+ var ErrLoginRequired = &RFC6749Error

+ var ErrMisconfiguration = &RFC6749Error

+ var ErrNotFound = &RFC6749Error

+ var ErrRegistrationNotSupported = &RFC6749Error

+ var ErrRequestForbidden = &RFC6749Error

+ var ErrRequestNotSupported = &RFC6749Error

+ var ErrRequestURINotSupported = &RFC6749Error

+ var ErrRequestUnauthorized = &RFC6749Error

+ var ErrScopeNotGranted = &RFC6749Error

+ var ErrSerializationFailure = errors.New("The request could not be completed due to concurrent access")

+ var ErrServerError = &RFC6749Error

+ var ErrSlowDown = &RFC6749Error

+ var ErrTemporarilyUnavailable = &RFC6749Error

+ var ErrTokenClaim = &RFC6749Error

+ var ErrTokenExpired = &RFC6749Error

+ var ErrTokenSignatureMismatch = &RFC6749Error

+ var ErrUnauthorizedClient = &RFC6749Error

+ var ErrUnknownRequest = &RFC6749Error

+ var ErrUnsupportedGrantType = &RFC6749Error

+ var ErrUnsupportedResponseMode = &RFC6749Error

+ var ErrUnsupportedResponseType = &RFC6749Error

+ var RegexSpecificationNQCHAR = regexp.MustCompile(`^[\pL\pM\pN\pS!#-@_\[\]{}]+$`)

+ var RegexSpecificationNQSCHAR = regexp.MustCompile(`^[\pL\pM\pN\pS!#-@_\[\]{}]+$`)

+ var RegexSpecificationVSCHAR = regexp.MustCompile(`^[\pL\pM\pN\pP\pS ]+$`)

+ func AccessTokenFromRequest(req *http.Request) string

+ func AddLocalizerToErr(catalog i18n.MessageCatalog, err error, requester Requester) error

+ func AddLocalizerToErrWithLang(catalog i18n.MessageCatalog, lang language.Tag, err error) error

+ func CompareClientSecret(ctx context.Context, client Client, rawSecret []byte) (err error)

+ func DefaultAudienceMatchingStrategy(haystack []string, needle []string) error

+ func DefaultFormPostResponseWriter(rw io.Writer, template *template.Template, redirectURL string, ...)

+ func DeviceAuthorizeStatusToString(status DeviceAuthorizeStatus) string

+ func ErrorToDebugRFC6749Error(err error) (rfc error)

+ func EscapeJSONString(str string) string

+ func ExactAudienceMatchingStrategy(haystack []string, needle []string) error

+ func ExactScopeStrategy(haystack []string, needle string) bool

+ func FindClientPublicJWK(ctx context.Context, provider JWKSFetcherStrategyProvider, ...) (key any, err error)

+ func GetAudiences(form url.Values) []string

+ func GetEffectiveLifespan(c Client, gt GrantType, tt TokenType, fallback time.Duration) (lifespan time.Duration)

+ func GetPostFormHTMLTemplate(ctx context.Context, c FormPostHTMLTemplateProvider) *template.Template

+ func HierarchicScopeStrategy(haystack []string, needle string) bool

+ func IsLocalhost(redirectURI *url.URL) bool

+ func IsRedirectURISecure(ctx context.Context, redirectURI *url.URL) bool

+ func IsRedirectURISecureStrict(redirectURI *url.URL) bool

+ func IsValidRedirectURI(redirectURI *url.URL) bool

+ func JKWKSFetcherWithDefaultTTL(ttl time.Duration) func(*DefaultJWKSFetcherStrategy)

+ func JWKSFetcherWithCache(cache *ristretto.Cache) func(*DefaultJWKSFetcherStrategy)

+ func JWKSFetcherWithHTTPClient(client *retryablehttp.Client) func(*DefaultJWKSFetcherStrategy)

+ func JWKSFetcherWithHTTPClientSource(clientSourceFunc func(ctx context.Context) *retryablehttp.Client) func(*DefaultJWKSFetcherStrategy)

+ func MatchRedirectURIWithClientRedirectURIs(rawurl string, client Client) (*url.URL, error)

+ func NewContext() context.Context

+ func RemoveEmpty(args []string) (ret []string)

+ func StringInSlice(needle string, haystack []string) bool

+ func StringInSliceFold(needle string, haystack []string) bool

+ func WildcardScopeStrategy(matchers []string, needle string) bool

+ type AccessRequest struct

+ GrantTypes Arguments

+ HandledGrantType Arguments

+ func NewAccessRequest(session Session) *AccessRequest

+ func (a *AccessRequest) GetGrantTypes() Arguments

+ func (a *AccessRequest) SanitizeRestoreRefreshTokenOriginalRequester(requester Requester) Requester

+ func (a *AccessRequest) SetGrantedScopes(scopes Arguments)

+ type AccessRequester interface

+ GetGrantTypes func() (grantTypes Arguments)

+ type AccessResponder interface

+ GetAccessToken func() (token string)

+ GetExtra func(key string) any

+ GetTokenType func() (token string)

+ SetAccessToken func(token string)

+ SetExpiresIn func(time.Duration)

+ SetExtra func(key string, value any)

+ SetScopes func(scopes Arguments)

+ SetTokenType func(tokenType string)

+ ToMap func() map[string]any

+ type AccessResponse struct

+ AccessToken string

+ Extra map[string]any

+ TokenType string

+ func NewAccessResponse() *AccessResponse

+ func (a *AccessResponse) GetAccessToken() string

+ func (a *AccessResponse) GetExtra(key string) any

+ func (a *AccessResponse) GetTokenType() string

+ func (a *AccessResponse) SetAccessToken(token string)

+ func (a *AccessResponse) SetExpiresIn(expiresIn time.Duration)

+ func (a *AccessResponse) SetExtra(key string, value any)

+ func (a *AccessResponse) SetScopes(scopes Arguments)

+ func (a *AccessResponse) SetTokenType(name string)

+ func (a *AccessResponse) ToMap() map[string]any

+ type AccessTokenIssuerProvider interface

+ GetAccessTokenIssuer func(ctx context.Context) string

+ type AccessTokenLifespanProvider interface

+ GetAccessTokenLifespan func(ctx context.Context) time.Duration

+ type AllowedPromptValuesProvider interface

+ GetAllowedPromptValues func(ctx context.Context) int

+ type AllowedPromptsProvider interface

+ GetAllowedPrompts func(ctx context.Context) (prompts []string)

+ type Arguments []string

+ func (r Arguments) ExactOne(name string) bool

+ func (r Arguments) Has(items ...string) bool

+ func (r Arguments) HasFold(items ...string) bool

+ func (r Arguments) HasOneOf(items ...string) bool

+ func (r Arguments) HasOneOfFold(items ...string) bool

+ func (r Arguments) Matches(items ...string) bool

+ func (r Arguments) MatchesExact(items ...string) bool

+ func (r Arguments) MatchesFold(items ...string) bool

+ type AudienceMatchingStrategy func(haystack []string, needle []string) error

+ type AudienceStrategyProvider interface

+ GetAudienceStrategy func(ctx context.Context) AudienceMatchingStrategy

+ type AuthorizationServerIssuerIdentificationProvider interface

+ GetAuthorizationServerIdentificationIssuer func(ctx context.Context) (issuer string)

+ type AuthorizeCodeLifespanProvider interface

+ GetAuthorizeCodeLifespan func(ctx context.Context) time.Duration

+ type AuthorizeEndpointHandler interface

+ HandleAuthorizeEndpointRequest func(ctx context.Context, requester AuthorizeRequester, ...) error

+ type AuthorizeEndpointHandlers []AuthorizeEndpointHandler

+ func (a *AuthorizeEndpointHandlers) Append(h AuthorizeEndpointHandler)

+ type AuthorizeEndpointHandlersProvider interface

+ GetAuthorizeEndpointHandlers func(ctx context.Context) (handlers AuthorizeEndpointHandlers)

+ type AuthorizeRequest struct

+ DefaultResponseMode ResponseModeType

+ HandledResponseTypes Arguments

+ RedirectURI *url.URL

+ ResponseMode ResponseModeType

+ ResponseTypes Arguments

+ State string

+ func NewAuthorizeRequest() *AuthorizeRequest

+ func (d *AuthorizeRequest) DidHandleAllResponseTypes() bool

+ func (d *AuthorizeRequest) GetDefaultResponseMode() ResponseModeType

+ func (d *AuthorizeRequest) GetRedirectURI() *url.URL

+ func (d *AuthorizeRequest) GetResponseMode() ResponseModeType

+ func (d *AuthorizeRequest) GetResponseTypes() Arguments

+ func (d *AuthorizeRequest) GetState() string

+ func (d *AuthorizeRequest) IsRedirectURIValid() bool

+ func (d *AuthorizeRequest) SetDefaultResponseMode(defaultResponseMode ResponseModeType)

+ func (d *AuthorizeRequest) SetResponseTypeHandled(name string)

+ type AuthorizeRequester interface

+ DidHandleAllResponseTypes func() (didHandle bool)

+ GetDefaultResponseMode func() ResponseModeType

+ GetRedirectURI func() (redirectURL *url.URL)

+ GetResponseMode func() ResponseModeType

+ GetResponseTypes func() (responseTypes Arguments)

+ GetState func() (state string)

+ IsRedirectURIValid func() (isValid bool)

+ SetDefaultResponseMode func(responseMode ResponseModeType)

+ SetResponseTypeHandled func(responseType string)

+ type AuthorizeResponder interface

+ AddHeader func(key, value string)

+ AddParameter func(key, value string)

+ GetCode func() string

+ GetHeader func() (header http.Header)

+ GetParameters func() (query url.Values)

+ type AuthorizeResponse struct

+ Header http.Header

+ Parameters url.Values

+ func NewAuthorizeResponse() *AuthorizeResponse

+ func (a *AuthorizeResponse) AddHeader(key, value string)

+ func (a *AuthorizeResponse) AddParameter(key, value string)

+ func (a *AuthorizeResponse) GetCode() string

+ func (a *AuthorizeResponse) GetHeader() http.Header

+ func (a *AuthorizeResponse) GetParameters() url.Values

+ type BCryptClientSecret struct

+ func NewBCryptClientSecret(hash string) *BCryptClientSecret

+ func NewBCryptClientSecretPlain(rawSecret string, cost int) (secret *BCryptClientSecret, err error)

+ func (s *BCryptClientSecret) Compare(ctx context.Context, secret []byte) (err error)

+ func (s *BCryptClientSecret) GetPlainTextValue() (secret []byte, err error)

+ func (s *BCryptClientSecret) IsPlainText() (is bool)

+ type Client interface

+ GetAudience func() (audience Arguments)

+ GetClientSecret func() (secret ClientSecret)

+ GetGrantTypes func() (types Arguments)

+ GetID func() (id string)

+ GetRedirectURIs func() []string

+ GetResponseTypes func() (types Arguments)

+ GetScopes func() (scopes Arguments)

+ IsPublic func() (public bool)

+ type ClientAuthenticationLegacyStrategy func(context.Context, *http.Request, url.Values) (Client, error)

+ type ClientAuthenticationPolicyClient interface

+ GetAllowMultipleAuthenticationMethods func(ctx context.Context) (allow bool)

+ type ClientAuthenticationStrategy interface

+ AuthenticateClient func(ctx context.Context, r *http.Request, form url.Values) (client Client, method string, err error)

+ type ClientAuthenticationStrategyProvider interface

+ GetClientAuthenticationStrategy func(ctx context.Context) (strategy ClientAuthenticationStrategy)

+ type ClientCredentialsFlowRequestedScopeImplicitClient interface

+ GetClientCredentialsFlowRequestedScopeImplicit func() (implicit bool)

+ type ClientCredentialsImplicitProvider interface

+ GetClientCredentialsFlowImplicitGrantRequested func(ctx context.Context) (implicit bool)

+ type ClientLifespanConfig struct

+ AuthorizationCodeGrantAccessTokenLifespan *time.Duration

+ AuthorizationCodeGrantIDTokenLifespan *time.Duration

+ AuthorizationCodeGrantRefreshTokenLifespan *time.Duration

+ ClientCredentialsGrantAccessTokenLifespan *time.Duration

+ ImplicitGrantAccessTokenLifespan *time.Duration

+ ImplicitGrantIDTokenLifespan *time.Duration

+ JwtBearerGrantAccessTokenLifespan *time.Duration

+ PasswordGrantAccessTokenLifespan *time.Duration

+ PasswordGrantRefreshTokenLifespan *time.Duration

+ RefreshTokenGrantAccessTokenLifespan *time.Duration

+ RefreshTokenGrantIDTokenLifespan *time.Duration

+ RefreshTokenGrantRefreshTokenLifespan *time.Duration

+ type ClientManager interface

+ ClientAssertionJWTValid func(ctx context.Context, jti string) error

+ GetClient func(ctx context.Context, id string) (Client, error)

+ SetClientAssertionJWT func(ctx context.Context, jti string, exp time.Time) error

+ type ClientSecret interface

+ Compare func(ctx context.Context, secret []byte) (err error)

+ GetPlainTextValue func() (secret []byte, err error)

+ IsPlainText func() (is bool)

+ type Config struct

+ AccessTokenIssuer string

+ AccessTokenLifespan time.Duration

+ AllowedPromptValues []string

+ AudienceMatchingStrategy AudienceMatchingStrategy

+ AuthorizationServerIdentificationIssuer string

+ AuthorizeCodeLifespan time.Duration

+ AuthorizeEndpointHandlers AuthorizeEndpointHandlers

+ ClientAuthenticationStrategy ClientAuthenticationStrategy

+ ClientCredentialsFlowImplicitGrantRequested bool

+ DefaultRequestedTokenType string

+ DisableRefreshTokenValidation bool

+ EnablePKCEPlainChallengeMethod bool

+ EnforceJWTProfileAccessTokens bool

+ EnforcePKCE bool

+ EnforcePKCEForPublicClients bool

+ EnforceRevokeFlowRevokeRefreshTokensExplicitClient bool

+ FormPostHTMLTemplate *template.Template

+ FormPostResponseWriter FormPostResponseWriter

+ GlobalSecret []byte

+ GrantTypeJWTBearerCanSkipClientAuth bool

+ GrantTypeJWTBearerIDOptional bool

+ GrantTypeJWTBearerIssuedDateOptional bool

+ GrantTypeJWTBearerMaxDuration time.Duration

+ HMACHasher func() hash.Hash

+ HTTPClient *retryablehttp.Client

+ HashCost int

+ IDTokenIssuer string

+ IDTokenLifespan time.Duration

+ JWKSFetcherStrategy JWKSFetcherStrategy

+ JWTScopeClaimKey jwt.JWTScopeFieldEnum

+ JWTSecuredAuthorizeResponseModeIssuer string

+ JWTSecuredAuthorizeResponseModeLifespan time.Duration

+ JWTSecuredAuthorizeResponseModeSigner jwt.Signer

+ MessageCatalog i18n.MessageCatalog

+ MinParameterEntropy int

+ OmitRedirectScopeParam bool

+ PushedAuthorizeContextLifespan time.Duration

+ PushedAuthorizeEndpointHandlers PushedAuthorizeEndpointHandlers

+ PushedAuthorizeRequestURIPrefix string

+ RFC8628CodeLifespan time.Duration

+ RFC8628DeviceAuthorizeEndpointHandlers RFC8628DeviceAuthorizeEndpointHandlers

+ RFC8628TokenPollingInterval time.Duration

+ RFC8628UserAuthorizeEndpointHandlers RFC8628UserAuthorizeEndpointHandlers

+ RFC8628UserVerificationURL string

+ RFC8693TokenTypes map[string]RFC8693TokenType

+ RedirectSecureChecker func(context.Context, *url.URL) bool

+ RefreshTokenLifespan time.Duration

+ RefreshTokenScopes []string

+ RequirePushedAuthorizationRequests bool

+ ResponseModeHandlers []ResponseModeHandler

+ RevocationHandlers RevocationHandlers

+ RevokeRefreshTokensExplicit bool

+ RotatedGlobalSecrets [][]byte

+ SanitationWhiteList []string

+ ScopeStrategy ScopeStrategy

+ SendDebugMessagesToClients bool

+ TokenEndpointHandlers TokenEndpointHandlers

+ TokenEntropy int

+ TokenIntrospectionHandlers TokenIntrospectionHandlers

+ TokenURL string

+ UseLegacyErrorFormat bool

+ VerifiableCredentialsNonceLifespan time.Duration

+ func (c *Config) GetAccessTokenIssuer(ctx context.Context) string

+ func (c *Config) GetAccessTokenLifespan(_ context.Context) time.Duration

+ func (c *Config) GetAllowedPrompts(_ context.Context) []string

+ func (c *Config) GetAudienceStrategy(_ context.Context) AudienceMatchingStrategy

+ func (c *Config) GetAuthorizationServerIdentificationIssuer(ctx context.Context) (issuer string)

+ func (c *Config) GetAuthorizeCodeLifespan(_ context.Context) time.Duration

+ func (c *Config) GetAuthorizeEndpointHandlers(ctx context.Context) AuthorizeEndpointHandlers

+ func (c *Config) GetBCryptCost(_ context.Context) int

+ func (c *Config) GetClientAuthenticationStrategy(_ context.Context) ClientAuthenticationStrategy

+ func (c *Config) GetClientCredentialsFlowImplicitGrantRequested(_ context.Context) bool

+ func (c *Config) GetDefaultRFC8693RequestedTokenType(ctx context.Context) string

+ func (c *Config) GetDisableRefreshTokenValidation(_ context.Context) bool

+ func (c *Config) GetEnablePKCEPlainChallengeMethod(ctx context.Context) bool

+ func (c *Config) GetEnforceJWTProfileAccessTokens(ctx context.Context) (enable bool)

+ func (c *Config) GetEnforcePKCE(ctx context.Context) bool

+ func (c *Config) GetEnforcePKCEForPublicClients(ctx context.Context) bool

+ func (c *Config) GetEnforceRevokeFlowRevokeRefreshTokensExplicitClient(ctx context.Context) bool

+ func (c *Config) GetFormPostHTMLTemplate(ctx context.Context) *template.Template

+ func (c *Config) GetFormPostResponseWriter(ctx context.Context) FormPostResponseWriter

+ func (c *Config) GetGlobalSecret(ctx context.Context) ([]byte, error)

+ func (c *Config) GetGrantTypeJWTBearerCanSkipClientAuth(ctx context.Context) bool

+ func (c *Config) GetGrantTypeJWTBearerIDOptional(ctx context.Context) bool

+ func (c *Config) GetGrantTypeJWTBearerIssuedDateOptional(ctx context.Context) bool

+ func (c *Config) GetHMACHasher(ctx context.Context) func() hash.Hash

+ func (c *Config) GetHTTPClient(ctx context.Context) *retryablehttp.Client

+ func (c *Config) GetIDTokenIssuer(ctx context.Context) string

+ func (c *Config) GetIDTokenLifespan(_ context.Context) time.Duration

+ func (c *Config) GetJWKSFetcherStrategy(_ context.Context) JWKSFetcherStrategy

+ func (c *Config) GetJWTMaxDuration(_ context.Context) time.Duration

+ func (c *Config) GetJWTScopeField(ctx context.Context) jwt.JWTScopeFieldEnum

+ func (c *Config) GetJWTSecuredAuthorizeResponseModeIssuer(ctx context.Context) string

+ func (c *Config) GetJWTSecuredAuthorizeResponseModeLifespan(_ context.Context) time.Duration

+ func (c *Config) GetJWTSecuredAuthorizeResponseModeSigner(ctx context.Context) jwt.Signer

+ func (c *Config) GetMessageCatalog(ctx context.Context) i18n.MessageCatalog

+ func (c *Config) GetMinParameterEntropy(_ context.Context) int

+ func (c *Config) GetOmitRedirectScopeParam(ctx context.Context) bool

+ func (c *Config) GetPushedAuthorizeContextLifespan(ctx context.Context) time.Duration

+ func (c *Config) GetPushedAuthorizeEndpointHandlers(ctx context.Context) PushedAuthorizeEndpointHandlers

+ func (c *Config) GetPushedAuthorizeRequestURIPrefix(ctx context.Context) string

+ func (c *Config) GetRFC8628CodeLifespan(_ context.Context) time.Duration

+ func (c *Config) GetRFC8628DeviceAuthorizeEndpointHandlers(_ context.Context) RFC8628DeviceAuthorizeEndpointHandlers

+ func (c *Config) GetRFC8628TokenPollingInterval(_ context.Context) time.Duration

+ func (c *Config) GetRFC8628UserAuthorizeEndpointHandlers(_ context.Context) RFC8628UserAuthorizeEndpointHandlers

+ func (c *Config) GetRFC8628UserVerificationURL(_ context.Context) string

+ func (c *Config) GetRFC8693TokenTypes(ctx context.Context) map[string]RFC8693TokenType

+ func (c *Config) GetRedirectSecureChecker(_ context.Context) func(context.Context, *url.URL) bool

+ func (c *Config) GetRefreshTokenLifespan(_ context.Context) time.Duration

+ func (c *Config) GetRefreshTokenScopes(_ context.Context) []string

+ func (c *Config) GetRequirePushedAuthorizationRequests(ctx context.Context) bool

+ func (c *Config) GetResponseModeHandlers(ctx context.Context) []ResponseModeHandler

+ func (c *Config) GetRevocationHandlers(ctx context.Context) RevocationHandlers

+ func (c *Config) GetRevokeRefreshTokensExplicit(ctx context.Context) bool

+ func (c *Config) GetRotatedGlobalSecrets(ctx context.Context) ([][]byte, error)

+ func (c *Config) GetSanitationWhiteList(ctx context.Context) []string

+ func (c *Config) GetScopeStrategy(_ context.Context) ScopeStrategy

+ func (c *Config) GetSendDebugMessagesToClients(ctx context.Context) bool

+ func (c *Config) GetTokenEndpointHandlers(ctx context.Context) TokenEndpointHandlers

+ func (c *Config) GetTokenEntropy(_ context.Context) int

+ func (c *Config) GetTokenIntrospectionHandlers(ctx context.Context) TokenIntrospectionHandlers

+ func (c *Config) GetTokenURL(ctx context.Context) string

+ func (c *Config) GetUseLegacyErrorFormat(ctx context.Context) bool

+ func (c *Config) GetVerifiableCredentialsNonceLifespan(_ context.Context) time.Duration

+ type Configurator interface

+ type ContextKey string

+ type CustomTokenLifespansClient interface

+ GetEffectiveLifespan func(gt GrantType, tt TokenType, fallback time.Duration) (lifespan time.Duration)

+ type DebugRFC6749Error struct

+ func (err *DebugRFC6749Error) Error() string

+ type DefaultClient struct

+ Audience []string

+ ClientSecret ClientSecret

+ GrantTypes []string

+ ID string

+ Public bool

+ RedirectURIs []string

+ ResponseTypes []string

+ RotatedClientSecrets []ClientSecret

+ Scopes []string

+ func (c *DefaultClient) GetAudience() Arguments

+ func (c *DefaultClient) GetClientSecret() (secret ClientSecret)

+ func (c *DefaultClient) GetGrantTypes() Arguments

+ func (c *DefaultClient) GetID() string

+ func (c *DefaultClient) GetRedirectURIs() []string

+ func (c *DefaultClient) GetResponseTypes() Arguments

+ func (c *DefaultClient) GetRotatedClientSecrets() (secrets []ClientSecret)

+ func (c *DefaultClient) GetScopes() Arguments

+ func (c *DefaultClient) IsPublic() bool

+ type DefaultClientAuthenticationStrategy struct

+ Config interface{ ... }

+ Store interface{ ... }

+ func (s *DefaultClientAuthenticationStrategy) AuthenticateClient(ctx context.Context, r *http.Request, form url.Values) (client Client, method string, err error)

+ type DefaultClientWithCustomTokenLifespans struct

+ TokenLifespans *ClientLifespanConfig

+ func (c *DefaultClientWithCustomTokenLifespans) GetEffectiveLifespan(gt GrantType, tt TokenType, fallback time.Duration) time.Duration

+ func (c *DefaultClientWithCustomTokenLifespans) GetTokenLifespans() *ClientLifespanConfig

+ func (c *DefaultClientWithCustomTokenLifespans) SetTokenLifespans(lifespans *ClientLifespanConfig)

+ type DefaultJWKSFetcherStrategy struct

+ func (s *DefaultJWKSFetcherStrategy) Resolve(ctx context.Context, location string, ignoreCache bool) (*jose.JSONWebKeySet, error)

+ func (s *DefaultJWKSFetcherStrategy) WaitForCache()

+ type DefaultOpenIDConnectClient struct

+ JSONWebKeys *jose.JSONWebKeySet

+ JSONWebKeysURI string

+ RequestObjectSigningAlg string

+ RequestURIs []string

+ TokenEndpointAuthMethod string

+ TokenEndpointAuthSigningAlg string

+ func (c *DefaultOpenIDConnectClient) GetJSONWebKeys() *jose.JSONWebKeySet

+ func (c *DefaultOpenIDConnectClient) GetJSONWebKeysURI() string

+ func (c *DefaultOpenIDConnectClient) GetRequestObjectSigningAlg() string

+ func (c *DefaultOpenIDConnectClient) GetRequestURIs() []string

+ func (c *DefaultOpenIDConnectClient) GetTokenEndpointAuthMethod() string

+ func (c *DefaultOpenIDConnectClient) GetTokenEndpointAuthSigningAlg() string

+ type DefaultResponseModeClient struct

+ ResponseModes []ResponseModeType

+ func (c *DefaultResponseModeClient) GetResponseModes() []ResponseModeType

+ type DefaultResponseModeHandler struct

+ Config ResponseModeHandlerConfigurator

+ func (h *DefaultResponseModeHandler) EncodeResponseForm(ctx context.Context, rm ResponseModeType, requester AuthorizeRequester, ...) (form url.Values, err error)

+ func (h *DefaultResponseModeHandler) ResponseModes() ResponseModeTypes

+ func (h *DefaultResponseModeHandler) WriteAuthorizeError(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ func (h *DefaultResponseModeHandler) WriteAuthorizeResponse(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ type DefaultSession struct

+ ExpiresAt map[TokenType]time.Time

+ Extra map[string]any

+ Subject string

+ Username string

+ func (s *DefaultSession) Clone() Session

+ func (s *DefaultSession) GetExpiresAt(key TokenType) time.Time

+ func (s *DefaultSession) GetExtraClaims() map[string]any

+ func (s *DefaultSession) GetSubject() string

+ func (s *DefaultSession) GetUsername() string

+ func (s *DefaultSession) SetExpiresAt(key TokenType, exp time.Time)

+ func (s *DefaultSession) SetSubject(subject string)

+ type DeviceAuthorizeRequest struct

+ DeviceCodeSignature string

+ LastChecked time.Time

+ Status DeviceAuthorizeStatus

+ UserCodeSignature string

+ func NewDeviceAuthorizeRequest() *DeviceAuthorizeRequest

+ func (d *DeviceAuthorizeRequest) GetDeviceCodeSignature() string

+ func (d *DeviceAuthorizeRequest) GetLastChecked() time.Time

+ func (d *DeviceAuthorizeRequest) GetStatus() DeviceAuthorizeStatus

+ func (d *DeviceAuthorizeRequest) GetUserCodeSignature() string

+ func (d *DeviceAuthorizeRequest) Merge(requester Requester)

+ func (d *DeviceAuthorizeRequest) SetDeviceCodeSignature(signature string)

+ func (d *DeviceAuthorizeRequest) SetLastChecked(lastChecked time.Time)

+ func (d *DeviceAuthorizeRequest) SetStatus(status DeviceAuthorizeStatus)

+ func (d *DeviceAuthorizeRequest) SetUserCodeSignature(signature string)

+ type DeviceAuthorizeRequester interface

+ GetDeviceCodeSignature func() string

+ GetLastChecked func() time.Time

+ GetStatus func() DeviceAuthorizeStatus

+ GetUserCodeSignature func() string

+ SetDeviceCodeSignature func(signature string)

+ SetLastChecked func(lastChecked time.Time)

+ SetStatus func(status DeviceAuthorizeStatus)

+ SetUserCodeSignature func(signature string)

+ type DeviceAuthorizeResponder interface

+ AddHeader func(key, value string)

+ GetDeviceCode func() string

+ GetExpiresIn func() int64

+ GetExtra func(key string) any

+ GetHeader func() (header http.Header)

+ GetInterval func() int

+ GetUserCode func() string

+ GetVerificationURI func() string

+ GetVerificationURIComplete func() string

+ SetDeviceCode func(code string)

+ SetExpiresIn func(seconds int64)

+ SetExtra func(key string, value any)

+ SetInterval func(seconds int)

+ SetUserCode func(code string)

+ SetVerificationURI func(uri string)

+ SetVerificationURIComplete func(uri string)

+ ToMap func() map[string]any

+ type DeviceAuthorizeResponse struct

+ DeviceCode string

+ ExpiresIn int64

+ Extra map[string]any

+ Header http.Header

+ Interval int

+ UserCode string

+ VerificationURI string

+ VerificationURIComplete string

+ func NewDeviceAuthorizeResponse() *DeviceAuthorizeResponse

+ func (d *DeviceAuthorizeResponse) AddHeader(key, value string)

+ func (d *DeviceAuthorizeResponse) FromJson(r io.Reader) error

+ func (d *DeviceAuthorizeResponse) GetDeviceCode() string

+ func (d *DeviceAuthorizeResponse) GetExpiresIn() int64

+ func (d *DeviceAuthorizeResponse) GetExtra(key string) any

+ func (d *DeviceAuthorizeResponse) GetHeader() http.Header

+ func (d *DeviceAuthorizeResponse) GetInterval() int

+ func (d *DeviceAuthorizeResponse) GetUserCode() string

+ func (d *DeviceAuthorizeResponse) GetVerificationURI() string

+ func (d *DeviceAuthorizeResponse) GetVerificationURIComplete() string

+ func (d *DeviceAuthorizeResponse) SetDeviceCode(code string)

+ func (d *DeviceAuthorizeResponse) SetExpiresIn(seconds int64)

+ func (d *DeviceAuthorizeResponse) SetExtra(key string, value any)

+ func (d *DeviceAuthorizeResponse) SetInterval(seconds int)

+ func (d *DeviceAuthorizeResponse) SetUserCode(code string)

+ func (d *DeviceAuthorizeResponse) SetVerificationURI(uri string)

+ func (d *DeviceAuthorizeResponse) SetVerificationURIComplete(uri string)

+ func (d *DeviceAuthorizeResponse) ToMap() map[string]any

+ type DeviceAuthorizeStatus int

+ const DeviceAuthorizeStatusApproved

+ const DeviceAuthorizeStatusDenied

+ const DeviceAuthorizeStatusNew

+ type DisableRefreshTokenValidationProvider interface

+ GetDisableRefreshTokenValidation func(ctx context.Context) bool

+ type EnablePKCEPlainChallengeMethodProvider interface

+ GetEnablePKCEPlainChallengeMethod func(ctx context.Context) (enable bool)

+ type EnforcePKCEForPublicClientsProvider interface

+ GetEnforcePKCEForPublicClients func(ctx context.Context) (enforce bool)

+ type EnforcePKCEProvider interface

+ GetEnforcePKCE func(ctx context.Context) (enforce bool)

+ type ExtraClaimsSession interface

+ GetExtraClaims func() map[string]any

+ type FormPostHTMLTemplateProvider interface

+ GetFormPostHTMLTemplate func(ctx context.Context) (tmpl *template.Template)

+ type FormPostResponseProvider interface

+ GetFormPostResponseWriter func(ctx context.Context) FormPostResponseWriter

+ type FormPostResponseWriter func(wr io.Writer, template *template.Template, redirectURL string, ...)

+ type Fosite struct

+ Config Configurator

+ Store Storage

+ func New(store Storage, config Configurator) *Fosite

+ func (f *Fosite) AuthenticateClient(ctx context.Context, r *http.Request, form url.Values) (client Client, err error)

+ func (f *Fosite) DefaultClientAuthenticationStrategy(ctx context.Context, r *http.Request, form url.Values) (client Client, err error)

+ func (f *Fosite) GetDefaultClientAuthenticationStrategy(ctx context.Context) ClientAuthenticationStrategy

+ func (f *Fosite) GetMinParameterEntropy(ctx context.Context) int

+ func (f *Fosite) IntrospectToken(ctx context.Context, token string, tokenUse TokenUse, session Session, ...) (TokenUse, AccessRequester, error)

+ func (f *Fosite) NewAccessRequest(ctx context.Context, r *http.Request, session Session) (AccessRequester, error)

+ func (f *Fosite) NewAccessResponse(ctx context.Context, requester AccessRequester) (AccessResponder, error)

+ func (f *Fosite) NewAuthorizeRequest(ctx context.Context, r *http.Request) (AuthorizeRequester, error)

+ func (f *Fosite) NewAuthorizeResponse(ctx context.Context, requester AuthorizeRequester, session Session) (responder AuthorizeResponder, err error)

+ func (f *Fosite) NewIntrospectionRequest(ctx context.Context, r *http.Request, session Session) (responder IntrospectionResponder, err error)

+ func (f *Fosite) NewPushedAuthorizeRequest(ctx context.Context, r *http.Request) (AuthorizeRequester, error)

+ func (f *Fosite) NewPushedAuthorizeResponse(ctx context.Context, requester AuthorizeRequester, session Session) (responder PushedAuthorizeResponder, err error)

+ func (f *Fosite) NewRFC8628UserAuthorizeRequest(ctx context.Context, req *http.Request) (DeviceAuthorizeRequester, error)

+ func (f *Fosite) NewRFC8628UserAuthorizeResponse(ctx context.Context, requester DeviceAuthorizeRequester, session Session) (RFC8628UserAuthorizeResponder, error)

+ func (f *Fosite) NewRFC862DeviceAuthorizeRequest(ctx context.Context, req *http.Request) (DeviceAuthorizeRequester, error)

+ func (f *Fosite) NewRFC862DeviceAuthorizeResponse(ctx context.Context, r DeviceAuthorizeRequester, session Session) (DeviceAuthorizeResponder, error)

+ func (f *Fosite) NewRevocationRequest(ctx context.Context, r *http.Request) error

+ func (f *Fosite) ParseResponseMode(ctx context.Context, r *http.Request, request *AuthorizeRequest) error

+ func (f *Fosite) ResponseModeHandlers(ctx context.Context) []ResponseModeHandler

+ func (f *Fosite) WriteAccessError(ctx context.Context, rw http.ResponseWriter, req AccessRequester, err error)

+ func (f *Fosite) WriteAccessResponse(ctx context.Context, rw http.ResponseWriter, requester AccessRequester, ...)

+ func (f *Fosite) WriteAuthorizeError(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ func (f *Fosite) WriteAuthorizeResponse(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ func (f *Fosite) WriteIntrospectionError(ctx context.Context, rw http.ResponseWriter, err error)

+ func (f *Fosite) WriteIntrospectionResponse(ctx context.Context, rw http.ResponseWriter, r IntrospectionResponder)

+ func (f *Fosite) WritePushedAuthorizeError(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ func (f *Fosite) WritePushedAuthorizeResponse(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ func (f *Fosite) WriteRFC8628UserAuthorizeError(ctx context.Context, rw http.ResponseWriter, req DeviceAuthorizeRequester, ...)

+ func (f *Fosite) WriteRFC8628UserAuthorizeResponse(_ context.Context, rw http.ResponseWriter, _ DeviceAuthorizeRequester, ...)

+ func (f *Fosite) WriteRFC862DeviceAuthorizeResponse(_ context.Context, rw http.ResponseWriter, _ DeviceAuthorizeRequester, ...)

+ func (f *Fosite) WriteRevocationResponse(ctx context.Context, rw http.ResponseWriter, err error)

+ type G11NContext interface

+ GetLang func() language.Tag

+ type GetJWTMaxDurationProvider interface

+ GetJWTMaxDuration func(ctx context.Context) (max time.Duration)

+ type GlobalSecretProvider interface

+ GetGlobalSecret func(ctx context.Context) (secret []byte, err error)

+ type GrantType string

+ type GrantTypeJWTBearerCanSkipClientAuthProvider interface

+ GetGrantTypeJWTBearerCanSkipClientAuth func(ctx context.Context) (permitted bool)

+ type GrantTypeJWTBearerIDOptionalProvider interface

+ GetGrantTypeJWTBearerIDOptional func(ctx context.Context) (optional bool)

+ type GrantTypeJWTBearerIssuedDateOptionalProvider interface

+ GetGrantTypeJWTBearerIssuedDateOptional func(ctx context.Context) (optional bool)

+ type HMACHashingProvider interface

+ GetHMACHasher func(ctx context.Context) func() (hasher hash.Hash)

+ type HTTPClientProvider interface

+ GetHTTPClient func(ctx context.Context) (client *retryablehttp.Client)

+ type Hasher interface

+ Compare func(ctx context.Context, hash, data []byte) error

+ Hash func(ctx context.Context, data []byte) ([]byte, error)

+ type IDTokenIssuerProvider interface

+ GetIDTokenIssuer func(ctx context.Context) string

+ type IDTokenLifespanProvider interface

+ GetIDTokenLifespan func(ctx context.Context) time.Duration

+ type IntrospectionResponder interface

+ GetAccessRequester func() AccessRequester

+ GetAccessTokenType func() string

+ GetTokenUse func() TokenUse

+ IsActive func() bool

+ ToMap func() (audience []string, introspection map[string]any)

+ type IntrospectionResponse struct

+ AccessRequester AccessRequester

+ AccessTokenType string

+ Active bool

+ Client Client

+ Lang language.Tag

+ TokenUse TokenUse

+ func (r *IntrospectionResponse) GetAccessRequester() AccessRequester

+ func (r *IntrospectionResponse) GetAccessTokenType() string

+ func (r *IntrospectionResponse) GetClient() Client

+ func (r *IntrospectionResponse) GetTokenUse() TokenUse

+ func (r *IntrospectionResponse) IsActive() bool

+ func (r *IntrospectionResponse) ToMap() (audience []string, introspection map[string]any)

+ type JARMClient interface

+ GetAuthorizationEncryptedResponseAlg func() (alg string)

+ GetAuthorizationEncryptedResponseEncryptionAlg func() (alg string)

+ GetAuthorizationSignedResponseAlg func() (alg string)

+ GetAuthorizationSignedResponseKeyID func() (kid string)

+ type JWKSFetcherStrategy interface

+ Resolve func(ctx context.Context, location string, ignoreCache bool) (*jose.JSONWebKeySet, error)

+ func NewDefaultJWKSFetcherStrategy(opts ...func(*DefaultJWKSFetcherStrategy)) JWKSFetcherStrategy

+ type JWKSFetcherStrategyProvider interface

+ GetJWKSFetcherStrategy func(ctx context.Context) (strategy JWKSFetcherStrategy)

+ type JWTProfileAccessTokensProvider interface

+ GetEnforceJWTProfileAccessTokens func(ctx context.Context) (enable bool)

+ type JWTProfileClient interface

+ GetAccessTokenSignedResponseAlg func() (alg string)

+ GetAccessTokenSignedResponseKeyID func() (kid string)

+ GetEnableJWTProfileOAuthAccessTokens func() (enforce bool)

+ type JWTScopeFieldProvider interface

+ GetJWTScopeField func(ctx context.Context) jwt.JWTScopeFieldEnum

+ type JWTSecuredAuthorizeResponseModeIssuerProvider interface

+ GetJWTSecuredAuthorizeResponseModeIssuer func(ctx context.Context) string

+ type JWTSecuredAuthorizeResponseModeLifespanProvider interface

+ GetJWTSecuredAuthorizeResponseModeLifespan func(ctx context.Context) time.Duration

+ type JWTSecuredAuthorizeResponseModeSignerProvider interface

+ GetJWTSecuredAuthorizeResponseModeSigner func(ctx context.Context) jwt.Signer

+ type MessageCatalogProvider interface

+ GetMessageCatalog func(ctx context.Context) (catalog i18n.MessageCatalog)

+ type MinParameterEntropyProvider interface

+ GetMinParameterEntropy func(_ context.Context) (min int)

+ type OmitRedirectScopeParamProvider interface

+ GetOmitRedirectScopeParam func(ctx context.Context) (omit bool)

+ type OpenIDConnectClient interface

+ GetJSONWebKeys func() (jwks *jose.JSONWebKeySet)

+ GetJSONWebKeysURI func() (uri string)

+ GetRequestObjectSigningAlg func() (alg string)

+ GetRequestURIs func() (requestURIs []string)

+ GetTokenEndpointAuthMethod func() (method string)

+ GetTokenEndpointAuthSigningAlg func() (alg string)

+ type PARStorage interface

+ CreatePARSession func(ctx context.Context, requestURI string, request AuthorizeRequester) error

+ DeletePARSession func(ctx context.Context, requestURI string) (err error)

+ GetPARSession func(ctx context.Context, requestURI string) (AuthorizeRequester, error)

+ type PrivateKey interface

+ Equal func(x crypto.PrivateKey) bool

+ Public func() crypto.PublicKey

+ type ProofKeyCodeExchangeClient interface

+ GetEnforcePKCE func() (enforce bool)

+ GetEnforcePKCEChallengeMethod func() (enforce bool)

+ GetPKCEChallengeMethod func() (method string)

+ type Provider interface

+ IntrospectToken func(ctx context.Context, token string, tokenUse TokenUse, session Session, ...) (TokenUse, AccessRequester, error)

+ NewAccessRequest func(ctx context.Context, r *http.Request, session Session) (AccessRequester, error)

+ NewAccessResponse func(ctx context.Context, requester AccessRequester) (AccessResponder, error)

+ NewAuthorizeRequest func(ctx context.Context, r *http.Request) (AuthorizeRequester, error)

+ NewAuthorizeResponse func(ctx context.Context, requester AuthorizeRequester, session Session) (AuthorizeResponder, error)

+ NewIntrospectionRequest func(ctx context.Context, r *http.Request, session Session) (IntrospectionResponder, error)

+ NewPushedAuthorizeRequest func(ctx context.Context, r *http.Request) (AuthorizeRequester, error)

+ NewPushedAuthorizeResponse func(ctx context.Context, requester AuthorizeRequester, session Session) (PushedAuthorizeResponder, error)

+ NewRFC8628UserAuthorizeRequest func(ctx context.Context, req *http.Request) (DeviceAuthorizeRequester, error)

+ NewRFC8628UserAuthorizeResponse func(ctx context.Context, requester DeviceAuthorizeRequester, session Session) (RFC8628UserAuthorizeResponder, error)

+ NewRFC862DeviceAuthorizeRequest func(ctx context.Context, req *http.Request) (DeviceAuthorizeRequester, error)

+ NewRFC862DeviceAuthorizeResponse func(ctx context.Context, requester DeviceAuthorizeRequester, session Session) (DeviceAuthorizeResponder, error)

+ NewRevocationRequest func(ctx context.Context, r *http.Request) error

+ WriteAccessError func(ctx context.Context, rw http.ResponseWriter, requester AccessRequester, ...)

+ WriteAccessResponse func(ctx context.Context, rw http.ResponseWriter, requester AccessRequester, ...)

+ WriteAuthorizeError func(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ WriteAuthorizeResponse func(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ WriteIntrospectionError func(ctx context.Context, rw http.ResponseWriter, err error)

+ WriteIntrospectionResponse func(ctx context.Context, rw http.ResponseWriter, r IntrospectionResponder)

+ WritePushedAuthorizeError func(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ WritePushedAuthorizeResponse func(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ WriteRFC8628UserAuthorizeError func(_ context.Context, rw http.ResponseWriter, requester DeviceAuthorizeRequester, ...)

+ WriteRFC8628UserAuthorizeResponse func(cxt context.Context, rw http.ResponseWriter, ...)

+ WriteRFC862DeviceAuthorizeResponse func(ctx context.Context, rw http.ResponseWriter, ...)

+ WriteRevocationResponse func(ctx context.Context, rw http.ResponseWriter, err error)

+ type PushedAuthorizationRequestClient interface

+ GetPushedAuthorizeContextLifespan func() (lifespan time.Duration)

+ GetRequirePushedAuthorizationRequests func() (require bool)

+ type PushedAuthorizeEndpointHandler interface

+ HandlePushedAuthorizeEndpointRequest func(ctx context.Context, requester AuthorizeRequester, ...) error

+ type PushedAuthorizeEndpointHandlers []PushedAuthorizeEndpointHandler

+ func (a *PushedAuthorizeEndpointHandlers) Append(h PushedAuthorizeEndpointHandler)

+ type PushedAuthorizeRequestConfigProvider interface

+ GetPushedAuthorizeContextLifespan func(ctx context.Context) (lifespan time.Duration)

+ GetPushedAuthorizeRequestURIPrefix func(ctx context.Context) (prefix string)

+ GetRequirePushedAuthorizationRequests func(ctx context.Context) (enforce bool)

+ type PushedAuthorizeRequestHandlersProvider interface

+ GetPushedAuthorizeEndpointHandlers func(ctx context.Context) (handlers PushedAuthorizeEndpointHandlers)

+ type PushedAuthorizeResponder interface

+ AddHeader func(key, value string)

+ GetExpiresIn func() int

+ GetExtra func(key string) any

+ GetHeader func() (header http.Header)

+ GetRequestURI func() string

+ SetExpiresIn func(seconds int)

+ SetExtra func(key string, value any)

+ SetRequestURI func(requestURI string)

+ ToMap func() map[string]any

+ type PushedAuthorizeResponse struct

+ ExpiresIn int

+ Extra map[string]any

+ Header http.Header

+ RequestURI string

+ func (a *PushedAuthorizeResponse) AddHeader(key, value string)

+ func (a *PushedAuthorizeResponse) GetExpiresIn() int

+ func (a *PushedAuthorizeResponse) GetExtra(key string) any

+ func (a *PushedAuthorizeResponse) GetHeader() http.Header

+ func (a *PushedAuthorizeResponse) GetRequestURI() string

+ func (a *PushedAuthorizeResponse) SetExpiresIn(seconds int)

+ func (a *PushedAuthorizeResponse) SetExtra(key string, value any)

+ func (a *PushedAuthorizeResponse) SetRequestURI(requestURI string)

+ func (a *PushedAuthorizeResponse) ToMap() map[string]any

+ type RFC6749Error struct

+ CodeField int

+ DebugField string

+ DescriptionField string

+ ErrorField string

+ HintField string

+ func ErrorToRFC6749Error(err error) *RFC6749Error

+ func ErrorToRFC6749ErrorFallback(err error, fallback *RFC6749Error) *RFC6749Error

+ func (e *RFC6749Error) Cause() error

+ func (e *RFC6749Error) Debug() string

+ func (e *RFC6749Error) Details() map[string]any

+ func (e *RFC6749Error) GetDescription() string

+ func (e *RFC6749Error) Reason() string

+ func (e *RFC6749Error) RequestID() string

+ func (e *RFC6749Error) Sanitize() *RFC6749Error

+ func (e *RFC6749Error) StackTrace() (trace errors.StackTrace)

+ func (e *RFC6749Error) Status() string

+ func (e *RFC6749Error) StatusCode() int

+ func (e *RFC6749Error) ToValues() url.Values

+ func (e *RFC6749Error) UnmarshalJSON(b []byte) error

+ func (e *RFC6749Error) WithDebug(debug string) *RFC6749Error

+ func (e *RFC6749Error) WithDebugError(debug error) *RFC6749Error

+ func (e *RFC6749Error) WithDebugf(debug string, args ...any) *RFC6749Error

+ func (e *RFC6749Error) WithDescription(description string) *RFC6749Error

+ func (e *RFC6749Error) WithExposeDebug(exposeDebug bool) *RFC6749Error

+ func (e *RFC6749Error) WithHint(hint string) *RFC6749Error

+ func (e *RFC6749Error) WithHintIDOrDefaultf(id string, def string, args ...any) *RFC6749Error

+ func (e *RFC6749Error) WithHintTranslationID(id string) *RFC6749Error

+ func (e *RFC6749Error) WithHintf(hint string, args ...any) *RFC6749Error

+ func (e *RFC6749Error) WithLocalizer(catalog i18n.MessageCatalog, lang language.Tag) *RFC6749Error

+ func (e *RFC6749Error) WithTrace(err error) *RFC6749Error

+ func (e *RFC6749Error) Wrap(err error)

+ func (e RFC6749Error) Error() string

+ func (e RFC6749Error) Is(err error) bool

+ func (e RFC6749Error) IsEmpty() bool

+ func (e RFC6749Error) MarshalJSON() ([]byte, error)

+ func (e RFC6749Error) Unwrap() error

+ func (e RFC6749Error) WithLegacyFormat(useLegacyFormat bool) *RFC6749Error

+ func (e RFC6749Error) WithWrap(cause error) *RFC6749Error

+ type RFC6749ErrorJson struct

+ Code int

+ Debug string

+ Description string

+ Hint string

+ Name string

+ type RFC8628DeviceAuthorizeEndpointHandler interface

+ HandleRFC8628DeviceAuthorizeEndpointRequest func(ctx context.Context, requester DeviceAuthorizeRequester, ...) error

+ type RFC8628DeviceAuthorizeEndpointHandlers []RFC8628DeviceAuthorizeEndpointHandler

+ func (a *RFC8628DeviceAuthorizeEndpointHandlers) Append(h RFC8628DeviceAuthorizeEndpointHandler)

+ type RFC8628DeviceAuthorizeEndpointHandlersProvider interface

+ GetRFC8628DeviceAuthorizeEndpointHandlers func(ctx context.Context) (handlers RFC8628DeviceAuthorizeEndpointHandlers)

+ type RFC8628UserAuthorizeEndpointHandler interface

+ HandleRFC8628UserAuthorizeEndpointRequest func(ctx context.Context, request DeviceAuthorizeRequester) error

+ PopulateRFC8628UserAuthorizeEndpointResponse func(ctx context.Context, requester DeviceAuthorizeRequester, ...) error

+ type RFC8628UserAuthorizeEndpointHandlers []RFC8628UserAuthorizeEndpointHandler

+ func (a *RFC8628UserAuthorizeEndpointHandlers) Append(h RFC8628UserAuthorizeEndpointHandler)

+ type RFC8628UserAuthorizeEndpointHandlersProvider interface

+ GetRFC8628UserAuthorizeEndpointHandlers func(ctx context.Context) (handlers RFC8628UserAuthorizeEndpointHandlers)

+ type RFC8628UserAuthorizeResponder interface

+ AddHeader func(key, value string)

+ AddParameter func(key, value string)

+ GetExtra func(key string) any

+ GetHeader func() (header http.Header)

+ GetParameters func() (query url.Values)

+ GetStatus func() string

+ SetExtra func(key string, value any)

+ SetStatus func(status string)

+ ToMap func() map[string]any

+ type RFC8628UserAuthorizeResponse struct

+ Extra map[string]any

+ Header http.Header

+ Parameters url.Values

+ Status string

+ func NewRFC8628UserAuthorizeResponse() *RFC8628UserAuthorizeResponse

+ func (d *RFC8628UserAuthorizeResponse) AddHeader(key, value string)

+ func (d *RFC8628UserAuthorizeResponse) AddParameter(key, value string)

+ func (d *RFC8628UserAuthorizeResponse) FromJson(r io.Reader) error

+ func (d *RFC8628UserAuthorizeResponse) GetExtra(key string) any

+ func (d *RFC8628UserAuthorizeResponse) GetHeader() http.Header

+ func (d *RFC8628UserAuthorizeResponse) GetParameters() url.Values

+ func (d *RFC8628UserAuthorizeResponse) GetStatus() string

+ func (d *RFC8628UserAuthorizeResponse) SetExtra(key string, value any)

+ func (d *RFC8628UserAuthorizeResponse) SetStatus(status string)

+ func (d *RFC8628UserAuthorizeResponse) ToJson(rw io.Writer) error

+ func (d *RFC8628UserAuthorizeResponse) ToMap() map[string]any

+ type RFC8693ConfigProvider interface

+ GetDefaultRFC8693RequestedTokenType func(ctx context.Context) (tokenType string)

+ GetRFC8693TokenTypes func(ctx context.Context) (types map[string]RFC8693TokenType)

+ type RFC8693TokenType interface

+ GetName func(ctx context.Context) string

+ GetType func(ctx context.Context) string

+ type RFC9628DeviceAuthorizeConfigProvider interface

+ GetRFC8628CodeLifespan func(ctx context.Context) (lifespan time.Duration)

+ GetRFC8628TokenPollingInterval func(ctx context.Context) (interval time.Duration)

+ GetRFC8628UserVerificationURL func(ctx context.Context) (url string)

+ type RedirectSecureCheckerProvider interface

+ GetRedirectSecureChecker func(ctx context.Context) func(context.Context, *url.URL) bool

+ type RefreshFlowScopeClient interface

+ GetRefreshFlowIgnoreOriginalGrantedScopes func(ctx context.Context) (ignoreOriginalGrantedScopes bool)

+ type RefreshTokenAccessRequester interface

+ SanitizeRestoreRefreshTokenOriginalRequester func(requester Requester) Requester

+ type RefreshTokenLifespanProvider interface

+ GetRefreshTokenLifespan func(ctx context.Context) time.Duration

+ type RefreshTokenScopesProvider interface

+ GetRefreshTokenScopes func(ctx context.Context) []string

+ type Request struct

+ Client Client

+ Form url.Values

+ GrantedAudience Arguments

+ GrantedScope Arguments

+ ID string

+ Lang language.Tag

+ RequestedAt time.Time

+ RequestedAudience Arguments

+ RequestedScope Arguments

+ Session Session

+ func NewRequest() *Request

+ func (a *Request) AppendRequestedAudience(audience string)

+ func (a *Request) AppendRequestedScope(scope string)

+ func (a *Request) GetClient() Client

+ func (a *Request) GetGrantedAudience() Arguments

+ func (a *Request) GetGrantedScopes() Arguments

+ func (a *Request) GetID() string

+ func (a *Request) GetLang() language.Tag

+ func (a *Request) GetRequestForm() url.Values

+ func (a *Request) GetRequestedAt() time.Time

+ func (a *Request) GetRequestedAudience() (audience Arguments)

+ func (a *Request) GetRequestedScopes() Arguments

+ func (a *Request) GetSession() Session

+ func (a *Request) GrantAudience(audience string)

+ func (a *Request) GrantScope(scope string)

+ func (a *Request) Merge(request Requester)

+ func (a *Request) Sanitize(allowedParameters []string) Requester

+ func (a *Request) SetID(id string)

+ func (a *Request) SetRequestedAudience(s Arguments)

+ func (a *Request) SetRequestedScopes(s Arguments)

+ func (a *Request) SetSession(session Session)

+ type RequestedAudienceImplicitClient interface

+ GetRequestedAudienceImplicit func() (implicit bool)

+ type Requester interface

+ AppendRequestedScope func(scope string)

+ GetClient func() (client Client)

+ GetGrantedAudience func() (grantedAudience Arguments)

+ GetGrantedScopes func() (grantedScopes Arguments)

+ GetID func() string

+ GetRequestForm func() url.Values

+ GetRequestedAt func() (requestedAt time.Time)

+ GetRequestedAudience func() (audience Arguments)

+ GetRequestedScopes func() (scopes Arguments)

+ GetSession func() (session Session)

+ GrantAudience func(audience string)

+ GrantScope func(scope string)

+ Merge func(requester Requester)

+ Sanitize func(allowedParameters []string) Requester

+ SetID func(id string)

+ SetRequestedAudience func(audience Arguments)

+ SetRequestedScopes func(scopes Arguments)

+ SetSession func(session Session)

+ type ResponseModeClient interface

+ GetResponseModes func() (modes []ResponseModeType)

+ type ResponseModeHandler interface

+ ResponseModes func() ResponseModeTypes

+ WriteAuthorizeError func(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ WriteAuthorizeResponse func(ctx context.Context, rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ type ResponseModeHandlerConfigurator interface

+ type ResponseModeHandlerProvider interface

+ GetResponseModeHandlers func(ctx context.Context) (handlers []ResponseModeHandler)

+ type ResponseModeType string

+ type ResponseModeTypes []ResponseModeType

+ func (rs ResponseModeTypes) Has(item ResponseModeType) bool

+ type RevocationHandler interface

+ RevokeToken func(ctx context.Context, token string, tokenType TokenType, client Client) error

+ type RevocationHandlers []RevocationHandler

+ func (t *RevocationHandlers) Append(h RevocationHandler)

+ type RevocationHandlersProvider interface

+ GetRevocationHandlers func(ctx context.Context) (handlers RevocationHandlers)

+ type RevokeFlowRevokeRefreshTokensExplicitClient interface

+ GetRevokeRefreshTokensExplicit func(ctx context.Context) (explicit bool)

+ type RevokeRefreshTokensExplicitlyProvider interface

+ GetEnforceRevokeFlowRevokeRefreshTokensExplicitClient func(ctx context.Context) (explicit bool)

+ GetRevokeRefreshTokensExplicit func(ctx context.Context) (explicit bool)

+ type RotatedClientSecretsClient interface

+ GetRotatedClientSecrets func() (secrets []ClientSecret)

+ type RotatedGlobalSecretsProvider interface

+ GetRotatedGlobalSecrets func(ctx context.Context) (secrets [][]byte, err error)

+ type SanitationAllowedProvider interface

+ GetSanitationWhiteList func(ctx context.Context) (whitelist []string)

+ type ScopeStrategy func(haystack []string, needle string) bool

+ type ScopeStrategyProvider interface

+ GetScopeStrategy func(ctx context.Context) ScopeStrategy

+ type SendDebugMessagesToClientsProvider interface

+ GetSendDebugMessagesToClients func(ctx context.Context) (send bool)

+ type Session interface

+ Clone func() Session

+ GetExpiresAt func(key TokenType) time.Time

+ GetSubject func() string

+ GetUsername func() string

+ SetExpiresAt func(key TokenType, exp time.Time)

+ type Storage interface

+ type TokenEndpointHandler interface

+ CanHandleTokenEndpointRequest func(ctx context.Context, requester AccessRequester) bool

+ CanSkipClientAuth func(ctx context.Context, requester AccessRequester) bool

+ HandleTokenEndpointRequest func(ctx context.Context, requester AccessRequester) error

+ PopulateTokenEndpointResponse func(ctx context.Context, requester AccessRequester, responder AccessResponder) error

+ type TokenEndpointHandlers []TokenEndpointHandler

+ func (t *TokenEndpointHandlers) Append(h TokenEndpointHandler)

+ type TokenEndpointHandlersProvider interface

+ GetTokenEndpointHandlers func(ctx context.Context) (handlers TokenEndpointHandlers)

+ type TokenEntropyProvider interface

+ GetTokenEntropy func(ctx context.Context) (entropy int)

+ type TokenIntrospectionHandlers []TokenIntrospector

+ func (t *TokenIntrospectionHandlers) Append(h TokenIntrospector)

+ type TokenIntrospectionHandlersProvider interface

+ GetTokenIntrospectionHandlers func(ctx context.Context) (handlers TokenIntrospectionHandlers)

+ type TokenIntrospector interface

+ IntrospectToken func(ctx context.Context, token string, tokenUse TokenUse, ...) (TokenUse, error)

+ type TokenType string

+ type TokenURLProvider interface

+ GetTokenURL func(ctx context.Context) (url string)

+ type TokenUse = TokenType

+ type UseLegacyErrorFormatProvider interface

+ GetUseLegacyErrorFormat func(ctx context.Context) (use bool)

+ type VerifiableCredentialsNonceLifespanProvider interface

+ GetVerifiableCredentialsNonceLifespan func(ctx context.Context) time.Duration

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL