jwtsvid

Documentation

Index

• func GetTokenExpiry(token string) (time.Time, time.Time, error)
• func ValidateToken(ctx context.Context, token string, keyStore KeyStore, audience []string) (spiffeid.ID, map[string]interface{}, error)
• type KeyStore
  • func NewKeyStore(trustDomainKeys map[spiffeid.TrustDomain]map[string]crypto.PublicKey) KeyStore
• type Signer
  • func NewSigner(config SignerConfig) *Signer
  • func (s *Signer) SignToken(id spiffeid.ID, audience []string, expires time.Time, signer crypto.Signer, ...) (string, error)
• type SignerConfig

Functions

func GetTokenExpiry

func GetTokenExpiry(token string) (time.Time, time.Time, error)

func ValidateToken

func ValidateToken(ctx context.Context, token string, keyStore KeyStore, audience []string) (spiffeid.ID, map[string]interface{}, error)

Types

type KeyStore

type KeyStore interface {
	FindPublicKey(ctx context.Context, td spiffeid.TrustDomain, kid string) (crypto.PublicKey, error)
}

func NewKeyStore

func NewKeyStore(trustDomainKeys map[spiffeid.TrustDomain]map[string]crypto.PublicKey) KeyStore

type Signer

type Signer struct {
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(config SignerConfig) *Signer

func (*Signer) SignToken

func (s *Signer) SignToken(id spiffeid.ID, audience []string, expires time.Time, signer crypto.Signer, kid string) (string, error)

type SignerConfig

type SignerConfig struct {
	Clock clock.Clock

	// Issuer is used as the value of the issuer (iss) claim, if set.
	Issuer string
}