dpop

Documentation

Index

• Constants
• Variables
• func GetDPoPProofJKT(ctx context.Context) (string, bool)
• func IsSupportedAlgorithms(alg string) bool
• func WithDPoPProof(ctx context.Context, proof *DPoPProof) context.Context
• type DPoPProof
  • func GetDPoPProof(ctx context.Context) *DPoPProof
• type Middleware
  • func (m *Middleware) Handle(next http.Handler) http.Handler
• type Provider
  • func (p *Provider) CompareHTM(proof *DPoPProof, requestMethod string) error
  • func (p *Provider) CompareHTU(proof *DPoPProof, req *http.Request) error
  • func (p *Provider) ParseProof(jwtStr string) (*DPoPProof, error)

Constants

const (
	DPoPJWTTyp = "dpop+jwt"
)

Variables

var DependencySet = wire.NewSet(
	wire.Struct(new(Provider), "*"),
	wire.Struct(new(Middleware), "*"),
)

var ErrInvalidHTU = newInvalidDPoPProofError("htu in the DPoP proof is not a valid URI")

var ErrInvalidJwk = newInvalidDPoPProofError("invalid DPoP jwk")

var ErrInvalidJwt = newInvalidDPoPProofError("invalid DPoP jwt")

var ErrInvalidJwtPayload = newInvalidDPoPProofError("invalid DPoP jwt payload")

var ErrInvalidJwtSignature = newInvalidDPoPProofError("invalid DPoP jwt signature")

var ErrInvalidJwtType = newInvalidDPoPProofError("invalid DPoP jwt typ")

var ErrMalformedJwt = newInvalidDPoPProofError("malformed DPoP jwt")

var ErrProofExpired = newInvalidDPoPProofError("DPoP proof expired")

var ErrUnmatchedMethod = newInvalidDPoPProofError("htm in the DPoP proof does not match request method")

var ErrUnmatchedURI = newInvalidDPoPProofError("htu in the DPoP proof does not match request uri")

var ErrUnsupportedAlg = newInvalidDPoPProofError("unsupported alg in DPoP jwt")

var InvalidDPoPProof = "invalid_dpop_proof"

From https://datatracker.ietf.org/doc/html/rfc9449#section-12.2

var SupportedAlgorithms = []string{"ES256", "RS256"}

Functions

func GetDPoPProofJKT

func GetDPoPProofJKT(ctx context.Context) (string, bool)

func IsSupportedAlgorithms

func IsSupportedAlgorithms(alg string) bool

func WithDPoPProof

func WithDPoPProof(ctx context.Context, proof *DPoPProof) context.Context

Types

type DPoPProof

type DPoPProof struct {
	JTI string   `json:"jti"` // An unique identifier of the DPoP jwt
	HTM string   `json:"htm"` // The request method
	HTU *url.URL `json:"htu"` // The request uri

	// https://datatracker.ietf.org/doc/html/rfc9449#section-6.1
	JKT string `json:"jkt"` // base64url encoding of the JWK SHA-256 Thumbprint
}

https://datatracker.ietf.org/doc/html/rfc9449#section-4.2

func GetDPoPProof

func GetDPoPProof(ctx context.Context) *DPoPProof

type Middleware

type Middleware struct {
	DPoPProvider *Provider
}

func (*Middleware) Handle

func (m *Middleware) Handle(next http.Handler) http.Handler

type Provider

type Provider struct {
	Clock      clock.Clock
	HTTPOrigin httputil.HTTPOrigin
}

func (*Provider) CompareHTM

func (p *Provider) CompareHTM(proof *DPoPProof, requestMethod string) error

func (*Provider) CompareHTU

func (p *Provider) CompareHTU(proof *DPoPProof, req *http.Request) error

func (*Provider) ParseProof

func (p *Provider) ParseProof(jwtStr string) (*DPoPProof, error)