fosite

Jun 23, 2018

Changes in this version

+ var ErrInvalidRequestObject = &RFC6749Error

+ var ErrInvalidRequestURI = &RFC6749Error

+ var ErrRegistrationNotSupported = &RFC6749Error

+ var ErrRequestNotSupported = &RFC6749Error

+ var ErrRequestURINotSupported = &RFC6749Error

+ type DefaultJWKSFetcherStrategy struct

+ func (s *DefaultJWKSFetcherStrategy) Resolve(location string, forceRefresh bool) (*jose.JSONWebKeySet, error)

+ type DefaultOpenIDConnectClient struct

+ JSONWebKeys *jose.JSONWebKeySet

+ JSONWebKeysURI string

+ RequestObjectSigningAlgorithm string

+ RequestURIs []string

+ TokenEndpointAuthMethod string

+ func (c *DefaultOpenIDConnectClient) GetJSONWebKeys() *jose.JSONWebKeySet

+ func (c *DefaultOpenIDConnectClient) GetJSONWebKeysURI() string

+ func (c *DefaultOpenIDConnectClient) GetRequestObjectSigningAlgorithm() string

+ func (c *DefaultOpenIDConnectClient) GetRequestURIs() []string

+ func (c *DefaultOpenIDConnectClient) GetTokenEndpointAuthMethod() string

+ func (c *DefaultOpenIDConnectClient) GetTokenEndpointAuthSigningAlgorithm() string

type Fosite

+ HTTPClient *http.Client

+ JWKSFetcherStrategy JWKSFetcherStrategy

+ TokenURL string

+ func (f *Fosite) AuthenticateClient(ctx context.Context, r *http.Request, form url.Values) (Client, error)

+ type JWKSFetcherStrategy interface

+ Resolve func(location string, forceRefresh bool) (*jose.JSONWebKeySet, error)

+ func NewDefaultJWKSFetcherStrategy() JWKSFetcherStrategy

+ type OpenIDConnectClient interface

+ GetJSONWebKeys func() *jose.JSONWebKeySet

+ GetJSONWebKeysURI func() string

+ GetRequestObjectSigningAlgorithm func() string

+ GetRequestURIs func() []string

+ GetTokenEndpointAuthMethod func() string

+ GetTokenEndpointAuthSigningAlgorithm func() string

type RFC6749Error

+ func (e *RFC6749Error) WithDebugf(debug string, args ...interface{}) *RFC6749Error

+ func (e *RFC6749Error) WithHint(hint string) *RFC6749Error

+ func (e *RFC6749Error) WithHintf(hint string, args ...interface{}) *RFC6749Error

May 28, 2018

Changes in this version

+ var ErrInvalidatedAuthorizeCode = errors.New("Authorization code has ben invalidated")

Apr 30, 2018

Changes in this version

type IntrospectionResponder

+ GetTokenType func() TokenType

type IntrospectionResponse

+ TokenType TokenType

+ func (r *IntrospectionResponse) GetTokenType() TokenType

Apr 22, 2018

Changes in this version

+ func ExactScopeStrategy(haystack []string, needle string) bool

Apr 8, 2018

Changes in this version

type Request

+ func (a *Request) Sanitize(allowedParameters []string) Requester

type Requester

+ Sanitize func(allowedParameters []string) Requester

Feb 7, 2018

Changes in this version

type RFC6749Error

+ func (e *RFC6749Error) WithDescription(description string) *RFC6749Error

Dec 23, 2017

Changes in this version

type Fosite

+ SendDebugMessagesToClients bool

Dec 21, 2017

Changes in this version

type Arguments

+ func (r Arguments) HasOneOf(items ...string) bool

Dec 10, 2017

Changes in this version

+ var ErrConsentRequired = &RFC6749Error

+ var ErrInteractionRequired = &RFC6749Error

+ var ErrLoginRequired = &RFC6749Error

Dec 9, 2017

Changes in this version

+ var ErrInactiveAuthorizationCode = &RFC6749Error

type RFC6749Error

+ func (e *RFC6749Error) WithDebug(debug string) *RFC6749Error

type Request

+ func (a *Request) SetID(id string)

type Requester

+ SetID func(id string)

Dec 4, 2017

Changes in this version

+ var ErrRevokationClientMismatch = errors.New("Token was not issued to the client making the revokation request")

Jul 9, 2017

Changes in this version

+ func WildcardScopeStrategy(haystack []string, needle string) bool

Jun 4, 2017

Changes in this version

+ func AssertObjectKeysEqual(t *testing.T, a, b interface{}, keys ...string)

+ func AssertObjectKeysNotEqual(t *testing.T, a, b interface{}, keys ...string)

+ func RequireObjectKeysEqual(t *testing.T, a, b interface{}, keys ...string)

+ func RequireObjectKeysNotEqual(t *testing.T, a, b interface{}, keys ...string)

May 3, 2017

Changes in this version

type RFC6749Error

+ Code int

+ func (e *RFC6749Error) Details() []map[string]interface{}

+ func (e *RFC6749Error) Error() string

+ func (e *RFC6749Error) Reason() string

+ func (e *RFC6749Error) RequestID() string

+ func (e *RFC6749Error) Status() string

Dec 6, 2016

Changes in this version

+ var ErrInactiveToken = errors.New("Token is inactive because it is malformed, expired or otherwise invalid")

Nov 17, 2016

Changes in this version

type DefaultSession

+ func (s *DefaultSession) Clone() Session

type Session

+ Clone func() Session

Oct 17, 2016

Changes in this version

+ type DefaultSession struct

+ ExpiresAt map[TokenType]time.Time

+ Subject string

+ Username string

+ func (s *DefaultSession) GetExpiresAt(key TokenType) time.Time

+ func (s *DefaultSession) GetSubject() string

+ func (s *DefaultSession) GetUsername() string

+ func (s *DefaultSession) SetExpiresAt(key TokenType, exp time.Time)

+ type Session interface

+ GetExpiresAt func(key TokenType) time.Time

+ GetSubject func() string

+ GetUsername func() string

+ SetExpiresAt func(key TokenType, exp time.Time)

Oct 16, 2016

Changes in this version

+ type BCrypt struct

+ WorkFactor int

+ func (b *BCrypt) Compare(hash, data []byte) error

+ func (b *BCrypt) Hash(data []byte) ([]byte, error)

type Client

+ IsPublic func() bool

type DefaultClient

+ Public bool

+ func (c *DefaultClient) IsPublic() bool

type Fosite

+ RevocationHandlers RevocationHandlers

+ TokenIntrospectionHandlers TokenIntrospectionHandlers

+ func (f *Fosite) IntrospectToken(ctx context.Context, token string, tokenType TokenType, session interface{}, ...) (AccessRequester, error)

+ func (f *Fosite) NewIntrospectionRequest(ctx context.Context, r *http.Request, session interface{}) (IntrospectionResponder, error)

+ func (f *Fosite) NewRevocationRequest(ctx context.Context, r *http.Request) error

+ func (f *Fosite) WriteIntrospectionError(rw http.ResponseWriter, err error)

+ func (f *Fosite) WriteIntrospectionResponse(rw http.ResponseWriter, r IntrospectionResponder)

+ func (f *Fosite) WriteRevocationResponse(rw http.ResponseWriter, err error)

+ type Hasher interface

+ Compare func(hash, data []byte) error

+ Hash func(data []byte) ([]byte, error)

+ type IntrospectionResponder interface

+ GetAccessRequester func() AccessRequester

+ GetExpiresAt func() time.Time

+ IsActive func() bool

+ type IntrospectionResponse struct

+ AccessRequester AccessRequester

+ Active bool

+ ExpiresAt time.Time

+ func (r *IntrospectionResponse) GetAccessRequester() AccessRequester

+ func (r *IntrospectionResponse) GetExpiresAt() time.Time

+ func (r *IntrospectionResponse) IsActive() bool

type OAuth2Provider

+ IntrospectToken func(ctx context.Context, token string, tokenType TokenType, session interface{}, ...) (AccessRequester, error)

+ NewIntrospectionRequest func(ctx context.Context, r *http.Request, session interface{}) (IntrospectionResponder, error)

+ NewRevocationRequest func(ctx context.Context, r *http.Request) error

+ WriteIntrospectionError func(rw http.ResponseWriter, err error)

+ WriteIntrospectionResponse func(rw http.ResponseWriter, r IntrospectionResponder)

+ WriteRevocationResponse func(rw http.ResponseWriter, err error)

type Request

+ ID string

+ func (a *Request) GetID() string

type Requester

+ GetID func() string

+ type RevocationHandler interface

+ RevokeToken func(ctx context.Context, token string, tokenType TokenType) error

+ type RevocationHandlers []RevocationHandler

+ func (t *RevocationHandlers) Append(h RevocationHandler)

+ type TokenIntrospectionHandlers []TokenIntrospector

+ func (t *TokenIntrospectionHandlers) Append(h TokenIntrospector)

+ type TokenIntrospector interface

+ IntrospectToken func(ctx context.Context, token string, tokenType TokenType, ...) error

Sep 22, 2016

Changes in this version

+ const UnknownErrorName

+ var ErrInvalidTokenFormat = errors.New("Invalid token format")

+ var ErrScopeNotGranted = errors.New("The token was not granted the requested scope")

+ var ErrTokenClaim = errors.New("The token failed validation due to a claim mismatch")

+ var ErrTokenExpired = errors.New("Token expired")

+ var ErrTokenSignatureMismatch = errors.New("Token signature mismatch")

Aug 6, 2016

Changes in this version

+ func AccessTokenFromRequest(req *http.Request) string

+ func HierarchicScopeStrategy(haystack []string, needle string) bool

type Client

+ GetScopes func() Arguments

type DefaultClient

+ Scopes []string

+ func (c *DefaultClient) GetScopes() Arguments

type Fosite

+ ScopeStrategy ScopeStrategy

+ TokenValidators TokenValidators

+ func (f *Fosite) ValidateToken(ctx context.Context, token string, tokenType TokenType, session interface{}, ...) (AccessRequester, error)

type OAuth2Provider

+ ValidateToken func(ctx context.Context, token string, tokenType TokenType, session interface{}, ...) (AccessRequester, error)

type Request

+ func (a *Request) AppendRequestedScope(scope string)

+ func (a *Request) GetRequestedScopes() Arguments

+ func (a *Request) SetRequestedScopes(s Arguments)

type Requester

+ AppendRequestedScope func(scope string)

+ GetRequestedScopes func() (scopes Arguments)

+ SetRequestedScopes func(scopes Arguments)

+ type ScopeStrategy func(haystack []string, needle string) bool

+ type TokenType string

+ const AccessToken

+ const AuthorizeCode

+ const IDToken

+ const RefreshToken

+ type TokenValidator interface

+ ValidateToken func(ctx context.Context, token string, tokenType TokenType, ...) error

+ type TokenValidators []TokenValidator

+ func (t *TokenValidators) Append(h TokenValidator)

Aug 1, 2016

Changes in this version

+ const MinParameterEntropy

+ var DefaultMandatoryScope = "fosite"

+ var ErrAccessDenied = errors.New("The resource owner or authorization server denied the request")

+ var ErrInsufficientEntropy = errors.Errorf(...)

+ var ErrInvalidClient = errors.New(...)

+ var ErrInvalidGrant = errors.New(...)

+ var ErrInvalidRequest = errors.New(...)

+ var ErrInvalidScope = errors.New("The requested scope is invalid, unknown, or malformed")

+ var ErrInvalidState = errors.Errorf(...)

+ var ErrMisconfiguration = errors.New("The request failed because of a misconfiguration")

+ var ErrNotFound = errors.New("Could not find the requested resource(s)")

+ var ErrRequestForbidden = errors.New("The request is not allowed")

+ var ErrRequestUnauthorized = errors.New("The request could not be authorized")

+ var ErrServerError = errors.New(...)

+ var ErrTemporarilyUnavailable = errors.New(...)

+ var ErrUnauthorizedClient = errors.New("The client is not authorized to request a token using this method")

+ var ErrUnknownRequest = errors.New("The handler is not responsible for this request.")

+ var ErrUnsupportedGrantType = errors.New("The authorization grant type is not supported by the authorization server")

+ var ErrUnsupportedResponseType = errors.New(...)

+ func GetRedirectURIFromRequestValues(values url.Values) (string, error)

+ func IsRedirectURISecure(redirectURI *url.URL) bool

+ func IsValidRedirectURI(redirectURI *url.URL) bool

+ func MatchRedirectURIWithClientRedirectURIs(rawurl string, client Client) (*url.URL, error)

+ func NewContext() context.Context

+ func StringInSlice(needle string, haystack []string) bool

+ type AccessRequest struct

+ GrantTypes Arguments

+ HandledGrantType Arguments

+ func NewAccessRequest(session interface{}) *AccessRequest

+ func (a *AccessRequest) GetGrantTypes() Arguments

+ type AccessRequester interface

+ GetGrantTypes func() (grantTypes Arguments)

+ type AccessResponder interface

+ GetAccessToken func() (token string)

+ GetExtra func(key string) interface{}

+ GetTokenType func() (token string)

+ SetAccessToken func(token string)

+ SetExpiresIn func(time.Duration)

+ SetExtra func(key string, value interface{})

+ SetScopes func(scopes Arguments)

+ SetTokenType func(tokenType string)

+ ToMap func() map[string]interface{}

+ func NewAccessResponse() AccessResponder

+ type AccessResponse struct

+ AccessToken string

+ Extra map[string]interface{}

+ TokenType string

+ func (a *AccessResponse) GetAccessToken() string

+ func (a *AccessResponse) GetExtra(key string) interface{}

+ func (a *AccessResponse) GetTokenType() string

+ func (a *AccessResponse) SetAccessToken(token string)

+ func (a *AccessResponse) SetExpiresIn(expiresIn time.Duration)

+ func (a *AccessResponse) SetExtra(key string, value interface{})

+ func (a *AccessResponse) SetScopes(scopes Arguments)

+ func (a *AccessResponse) SetTokenType(name string)

+ func (a *AccessResponse) ToMap() map[string]interface{}

+ type Arguments []string

+ func (r Arguments) Exact(name string) bool

+ func (r Arguments) Has(items ...string) bool

+ func (r Arguments) Matches(items ...string) bool

+ type AuthorizeEndpointHandler interface

+ HandleAuthorizeEndpointRequest func(ctx context.Context, req *http.Request, requester AuthorizeRequester, ...) error

+ type AuthorizeEndpointHandlers []AuthorizeEndpointHandler

+ func (a *AuthorizeEndpointHandlers) Append(h AuthorizeEndpointHandler)

+ type AuthorizeRequest struct

+ HandledResponseTypes Arguments

+ RedirectURI *url.URL

+ ResponseTypes Arguments

+ State string

+ func NewAuthorizeRequest() *AuthorizeRequest

+ func (d *AuthorizeRequest) DidHandleAllResponseTypes() bool

+ func (d *AuthorizeRequest) GetRedirectURI() *url.URL

+ func (d *AuthorizeRequest) GetResponseTypes() Arguments

+ func (d *AuthorizeRequest) GetState() string

+ func (d *AuthorizeRequest) IsRedirectURIValid() bool

+ func (d *AuthorizeRequest) SetResponseTypeHandled(name string)

+ type AuthorizeRequester interface

+ DidHandleAllResponseTypes func() (didHandle bool)

+ GetRedirectURI func() (redirectURL *url.URL)

+ GetResponseTypes func() (responseTypes Arguments)

+ GetState func() (state string)

+ IsRedirectURIValid func() (isValid bool)

+ SetResponseTypeHandled func(responseType string)

+ type AuthorizeResponder interface

+ AddFragment func(key, value string)

+ AddHeader func(key, value string)

+ AddQuery func(key, value string)

+ GetCode func() string

+ GetFragment func() (fragment url.Values)

+ GetHeader func() (header http.Header)

+ GetQuery func() (query url.Values)

+ type AuthorizeResponse struct

+ Fragment url.Values

+ Header http.Header

+ Query url.Values

+ func NewAuthorizeResponse() *AuthorizeResponse

+ func (a *AuthorizeResponse) AddFragment(key, value string)

+ func (a *AuthorizeResponse) AddHeader(key, value string)

+ func (a *AuthorizeResponse) AddQuery(key, value string)

+ func (a *AuthorizeResponse) GetCode() string

+ func (a *AuthorizeResponse) GetFragment() url.Values

+ func (a *AuthorizeResponse) GetHeader() http.Header

+ func (a *AuthorizeResponse) GetQuery() url.Values

+ type AuthorizedRequestValidator interface

+ ValidateRequest func(ctx context.Context, req *http.Request, accessRequest AccessRequester) error

+ type AuthorizedRequestValidators []AuthorizedRequestValidator

+ func (t *AuthorizedRequestValidators) Append(h AuthorizedRequestValidator)

+ type Client interface

+ GetGrantTypes func() Arguments

+ GetGrantedScopes func() Scopes

+ GetHashedSecret func() []byte

+ GetID func() string

+ GetOwner func() string

+ GetRedirectURIs func() []string

+ GetResponseTypes func() Arguments

+ type ClientManager interface

+ GetClient func(id string) (Client, error)

+ type DefaultClient struct

+ ClientURI string

+ Contacts []string

+ GrantTypes []string

+ GrantedScopes []string

+ ID string

+ LogoURI string

+ Name string

+ Owner string

+ PolicyURI string

+ RedirectURIs []string

+ ResponseTypes []string

+ Secret []byte

+ TermsOfServiceURI string

+ func (c *DefaultClient) GetGrantTypes() Arguments

+ func (c *DefaultClient) GetGrantedScopes() Scopes

+ func (c *DefaultClient) GetHashedSecret() []byte

+ func (c *DefaultClient) GetID() string

+ func (c *DefaultClient) GetOwner() string

+ func (c *DefaultClient) GetRedirectURIs() []string

+ func (c *DefaultClient) GetResponseTypes() Arguments

+ type DefaultScopes struct

+ Scopes []string

+ func (s *DefaultScopes) Grant(requestScope string) bool

+ type Fosite struct

+ AuthorizeEndpointHandlers AuthorizeEndpointHandlers

+ AuthorizedRequestValidators AuthorizedRequestValidators

+ Hasher hash.Hasher

+ Logger logrus.StdLogger

+ MandatoryScope string

+ Store Storage

+ TokenEndpointHandlers TokenEndpointHandlers

+ func NewFosite(store Storage) *Fosite

+ func (c *Fosite) NewAuthorizeRequest(ctx context.Context, r *http.Request) (AuthorizeRequester, error)

+ func (c *Fosite) WriteAccessError(rw http.ResponseWriter, _ AccessRequester, err error)

+ func (c *Fosite) WriteAccessResponse(rw http.ResponseWriter, requester AccessRequester, responder AccessResponder)

+ func (c *Fosite) WriteAuthorizeError(rw http.ResponseWriter, ar AuthorizeRequester, err error)

+ func (c *Fosite) WriteAuthorizeResponse(rw http.ResponseWriter, ar AuthorizeRequester, resp AuthorizeResponder)

+ func (f *Fosite) GetMandatoryScope() string

+ func (f *Fosite) NewAccessRequest(ctx context.Context, r *http.Request, session interface{}) (AccessRequester, error)

+ func (f *Fosite) NewAccessResponse(ctx context.Context, req *http.Request, requester AccessRequester) (AccessResponder, error)

+ func (f *Fosite) ValidateRequestAuthorization(ctx context.Context, req *http.Request, session interface{}, scopes ...string) (AccessRequester, error)

+ func (o *Fosite) NewAuthorizeResponse(ctx context.Context, r *http.Request, ar AuthorizeRequester, ...) (AuthorizeResponder, error)

+ type OAuth2Provider interface

+ GetMandatoryScope func() string

+ NewAccessRequest func(ctx context.Context, req *http.Request, session interface{}) (AccessRequester, error)

+ NewAccessResponse func(ctx context.Context, req *http.Request, requester AccessRequester) (AccessResponder, error)

+ NewAuthorizeRequest func(ctx context.Context, req *http.Request) (AuthorizeRequester, error)

+ NewAuthorizeResponse func(ctx context.Context, req *http.Request, requester AuthorizeRequester, ...) (AuthorizeResponder, error)

+ ValidateRequestAuthorization func(ctx context.Context, req *http.Request, session interface{}, scope ...string) (AccessRequester, error)

+ WriteAccessError func(rw http.ResponseWriter, requester AccessRequester, err error)

+ WriteAccessResponse func(rw http.ResponseWriter, requester AccessRequester, responder AccessResponder)

+ WriteAuthorizeError func(rw http.ResponseWriter, requester AuthorizeRequester, err error)

+ WriteAuthorizeResponse func(rw http.ResponseWriter, requester AuthorizeRequester, ...)

+ type RFC6749Error struct

+ Debug string

+ Description string

+ Hint string

+ Name string

+ StatusCode int

+ func ErrorToRFC6749Error(err error) *RFC6749Error

+ type Request struct

+ Client Client

+ Form url.Values

+ GrantedScopes Arguments

+ RequestedAt time.Time

+ Scopes Arguments

+ Session interface{}

+ func NewRequest() *Request

+ func (a *Request) GetClient() Client

+ func (a *Request) GetGrantedScopes() Arguments

+ func (a *Request) GetRequestForm() url.Values

+ func (a *Request) GetRequestedAt() time.Time

+ func (a *Request) GetScopes() Arguments

+ func (a *Request) GetSession() interface{}

+ func (a *Request) GrantScope(scope string)

+ func (a *Request) Merge(request Requester)

+ func (a *Request) SetScopes(s Arguments)

+ func (a *Request) SetSession(session interface{})

+ type Requester interface

+ GetClient func() (client Client)

+ GetGrantedScopes func() (grantedScopes Arguments)

+ GetRequestForm func() url.Values

+ GetRequestedAt func() (requestedAt time.Time)

+ GetScopes func() (scopes Arguments)

+ GetSession func() (session interface{})

+ GrantScope func(scope string)

+ Merge func(requester Requester)

+ SetScopes func(scopes Arguments)

+ SetSession func(session interface{})

+ type Scopes interface

+ Grant func(requestScope string) bool

+ type Storage interface

+ type TokenEndpointHandler interface

+ HandleTokenEndpointRequest func(ctx context.Context, req *http.Request, requester AccessRequester) error

+ PopulateTokenEndpointResponse func(ctx context.Context, req *http.Request, requester AccessRequester, ...) error

+ type TokenEndpointHandlers []TokenEndpointHandler

+ func (t *TokenEndpointHandlers) Append(h TokenEndpointHandler)