auth

Documentation

Index

• func IsUserInGroup(kcURL, accessToken, groupName string) (bool, error)
• func ReadPasswordWithOTP() (string, string, error)
• func RequestJWT(username, password, otp, tokenUrl, clientid, clientsecret, clientscope string) (string, error)
• type OIDCProviderInfo
  • func GetProviderInfo(providerEndpoint string) (*OIDCProviderInfo, error)
  • func (provider *OIDCProviderInfo) VerifyToken(aToken string) error
• type Token
• type Userinfo

Functions

func IsUserInGroup

func IsUserInGroup(kcURL, accessToken, groupName string) (bool, error)

func ReadPasswordWithOTP

func ReadPasswordWithOTP() (string, string, error)

func RequestJWT

func RequestJWT(username, password, otp, tokenUrl, clientid, clientsecret, clientscope string) (string, error)

Types

type OIDCProviderInfo

type OIDCProviderInfo struct {
	Issuer      string      `json:"issuer"`
	AuthURL     string      `json:"authorization_endpoint"`
	TokenURL    string      `json:"token_endpoint"`
	JWKSURL     string      `json:"jwks_uri"`
	UserInfoURL string      `json:"userinfo_endpoint"`
	Algorithms  []string    `json:"id_token_signing_alg_values_supported"`
	KeySet      oidc.KeySet `json:",omitempty"`
}

func GetProviderInfo

func GetProviderInfo(providerEndpoint string) (*OIDCProviderInfo, error)

func (*OIDCProviderInfo) VerifyToken

func (provider *OIDCProviderInfo) VerifyToken(aToken string) error

type Token

type Token struct {
	// AccessToken is the token that authorizes and authenticates
	// the requests.
	AccessToken  string    `json:"access_token"`
	TokenType    string    `json:"token_type,omitempty"`
	RefreshToken string    `json:"refresh_token,omitempty"`
	Expiry       time.Time `json:"expiry,omitempty"`
}

type Userinfo

type Userinfo struct {
	Id                string   `json:"sub"`
	EmailVerified     bool     `json:"email_verified"`
	Name              string   `json:"name"`
	Groups            []string `json:"groups"`
	PreferredUsername string   `json:"preferred_username"`
	GivenName         string   `json:"given_name"`
	FamilyName        string   `json:"family_name"`
	Email             string   `json:"email"`
}