auth

Documentation

Index

• type Authoriser
  • func NewAuthoriser(config openid.Configuration, ssa, aud, kid, issuer string, ...) Authoriser
  • func NewClientPrivateKeyJwt(tokenEndpoint string, signingAlgorithm jwt.SigningMethod, ...) Authoriser
  • func NewClientSecretBasic(tokenEndpoint string, signer Signer) Authoriser
  • func NewClientSecretJWT(tokenEndpoint string, signer Signer) Authoriser
  • func NewTlsClientAuth(tokenEndpoint string, singer Signer) Authoriser
• type AuthoriserBuilder
  • func NewAuthoriserBuilder() AuthoriserBuilder
  • func (b AuthoriserBuilder) Build() (Authoriser, error)
  • func (b AuthoriserBuilder) WithAud(aud string) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithIssuer(issuer string) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithJwtExpiration(jwtExpiration time.Duration) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithKID(kID string) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithOpenIDConfig(cfg openid.Configuration) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithPrivateKey(privateKey *rsa.PrivateKey) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithRedirectURIs(redirectURIs []string) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithResponseTypes(responseTypes []string) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithSSA(ssa string) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithTokenEndpointAuthMethod(alg jwt.SigningMethod) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithTransportCert(transportCert *x509.Certificate) AuthoriserBuilder
  • func (b AuthoriserBuilder) WithTransportCertSubjectDn(transportSubjectDn string) AuthoriserBuilder
• type CredentialsGrantResponse
• type GrantToken
• type OBClientRegistrationResponse
• type Signer
  • func NewJwtSigner(signingAlgorithm jwt.SigningMethod, ...) Signer

Types

type Authoriser

type Authoriser interface {
	Claims() (string, error)
	Client(response []byte) (client.Client, error)
}

Double dispatch Signing method/Client abstract factory

func NewAuthoriser

func NewAuthoriser(
	config openid.Configuration,
	ssa, aud, kid, issuer string, tokenEndpointSignMethod jwt.SigningMethod,
	redirectURIs []string,
	responseTypes []string,
	privateKey *rsa.PrivateKey,
	jwtExpiration time.Duration,
	transportCert *x509.Certificate,
	transportSubjectDn string,
) Authoriser

func NewClientPrivateKeyJwt

func NewClientPrivateKeyJwt(
	tokenEndpoint string,
	signingAlgorithm jwt.SigningMethod,
	privateKey *rsa.PrivateKey,
	signer Signer,
) Authoriser

func NewClientSecretBasic

func NewClientSecretBasic(tokenEndpoint string, signer Signer) Authoriser

func NewClientSecretJWT

func NewClientSecretJWT(tokenEndpoint string, signer Signer) Authoriser

func NewTlsClientAuth

func NewTlsClientAuth(tokenEndpoint string, singer Signer) Authoriser

type AuthoriserBuilder

type AuthoriserBuilder struct {
	// contains filtered or unexported fields
}

func NewAuthoriserBuilder

func NewAuthoriserBuilder() AuthoriserBuilder

func (AuthoriserBuilder) Build

func (b AuthoriserBuilder) Build() (Authoriser, error)

func (AuthoriserBuilder) WithAud

func (b AuthoriserBuilder) WithAud(aud string) AuthoriserBuilder

func (AuthoriserBuilder) WithIssuer

func (b AuthoriserBuilder) WithIssuer(issuer string) AuthoriserBuilder

func (AuthoriserBuilder) WithJwtExpiration

func (b AuthoriserBuilder) WithJwtExpiration(jwtExpiration time.Duration) AuthoriserBuilder

func (AuthoriserBuilder) WithKID

func (b AuthoriserBuilder) WithKID(kID string) AuthoriserBuilder

func (AuthoriserBuilder) WithOpenIDConfig

func (b AuthoriserBuilder) WithOpenIDConfig(cfg openid.Configuration) AuthoriserBuilder

func (AuthoriserBuilder) WithPrivateKey

func (b AuthoriserBuilder) WithPrivateKey(privateKey *rsa.PrivateKey) AuthoriserBuilder

func (AuthoriserBuilder) WithRedirectURIs

func (b AuthoriserBuilder) WithRedirectURIs(redirectURIs []string) AuthoriserBuilder

func (AuthoriserBuilder) WithResponseTypes

func (b AuthoriserBuilder) WithResponseTypes(responseTypes []string) AuthoriserBuilder

func (AuthoriserBuilder) WithSSA

func (b AuthoriserBuilder) WithSSA(ssa string) AuthoriserBuilder

func (AuthoriserBuilder) WithTokenEndpointAuthMethod

func (b AuthoriserBuilder) WithTokenEndpointAuthMethod(alg jwt.SigningMethod) AuthoriserBuilder

func (AuthoriserBuilder) WithTransportCert

func (b AuthoriserBuilder) WithTransportCert(transportCert *x509.Certificate) AuthoriserBuilder

func (AuthoriserBuilder) WithTransportCertSubjectDn

func (b AuthoriserBuilder) WithTransportCertSubjectDn(transportSubjectDn string) AuthoriserBuilder

type CredentialsGrantResponse

type CredentialsGrantResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
	ExpiresIn   int64  `json:"expires_in"`
}

type GrantToken

type GrantToken CredentialsGrantResponse

type OBClientRegistrationResponse

type OBClientRegistrationResponse struct {
	ClientID     string `json:"client_id"`
	ClientSecret string `json:"client_secret,omitempty"`
}

type Signer

type Signer interface {
	Claims() (string, error)
}

func NewJwtSigner

func NewJwtSigner(
	signingAlgorithm jwt.SigningMethod,
	ssa,
	issuer,
	audience,
	kID,
	tokenEndpointAuthMethod string,
	requestObjectSignAlg string,
	redirectURIs []string,
	responseTypes []string,
	privateKey *rsa.PrivateKey,
	jwtExpiration time.Duration,
	transportCert *x509.Certificate,
	transportSubjectDn string,
) Signer