rp

Feb 3, 2021

Changes in this version

+ func GenerateJWTProfileToken(assertion *oidc.JWTProfileAssertion) (string, error)

Oct 15, 2020

Changes in this version

+ func CallTokenEndpointAuthorized(request interface{}, rp RelayingParty) (newToken *oauth2.Token, err error)

+ func JWTProfileAssertionExchange(ctx context.Context, assertion *oidc.JWTProfileAssertion, scopes oidc.Scopes, ...) (*oauth2.Token, error)

Sep 21, 2020

Changes in this version

type AuthURLOpt

+ func WithPrompt(prompt oidc.Prompt) AuthURLOpt

Sep 16, 2020

Changes in this version

+ func AuthURL(state string, rp RelayingParty, opts ...AuthURLOpt) string

+ func AuthURLHandler(stateFn func() string, rp RelayingParty) http.HandlerFunc

+ func CallJWTProfileEndpoint(assertion string, rp RelayingParty) (*oauth2.Token, error)

+ func CallTokenEndpoint(request interface{}, rp RelayingParty) (newToken *oauth2.Token, err error)

+ func ClientCredentials(ctx context.Context, rp RelayingParty, scopes ...string) (newToken *oauth2.Token, err error)

+ func CodeExchange(ctx context.Context, code string, rp RelayingParty, opts ...CodeExchangeOpt) (tokens *oidc.Tokens, err error)

+ func CodeExchangeHandler(callback func(http.ResponseWriter, *http.Request, *oidc.Tokens, string), ...) http.HandlerFunc

+ func DelegationTokenExchange(ctx context.Context, subjectToken string, rp RelayingParty, ...) (newToken *oauth2.Token, err error)

+ func GenerateAndStoreCodeChallenge(w http.ResponseWriter, rp RelayingParty) (string, error)

+ func JWTProfileExchange(ctx context.Context, assertion *oidc.JWTProfileAssertion, rp RelayingParty) (*oauth2.Token, error)

+ func TokenExchange(ctx context.Context, request *tokenexchange.TokenExchangeRequest, ...) (newToken *oauth2.Token, err error)

+ func VerifyAccessToken(accessToken, atHash string, sigAlgorithm jose.SignatureAlgorithm) error

+ func VerifyIDToken(ctx context.Context, token string, v IDTokenVerifier) (*oidc.IDTokenClaims, error)

+ func VerifyTokens(ctx context.Context, accessToken, idTokenString string, v IDTokenVerifier) (*oidc.IDTokenClaims, error)

type Endpoints

+ func Discover(issuer string, httpClient *http.Client) (Endpoints, error)

+ type ErrorHandler func(w http.ResponseWriter, r *http.Request, errorType string, errorDesc string, ...)

+ type IDTokenVerifier interface

+ ACR func() oidc.ACRVerifier

+ ClientID func() string

+ KeySet func() oidc.KeySet

+ MaxAge func() time.Duration

+ Nonce func(context.Context) string

+ SupportedSignAlgs func() []string

+ func NewIDTokenVerifier(issuer, clientID string, keySet oidc.KeySet, options ...VerifierOption) IDTokenVerifier

+ type Option func(*relayingParty)

+ func WithErrorHandler(errorHandler ErrorHandler) Option

type RelayingParty

+ func NewRelayingPartyOAuth(config *oauth2.Config, options ...Option) (RelayingParty, error)

+ func NewRelayingPartyOIDC(issuer, clientID, clientSecret, redirectURI string, scopes []string, ...) (RelayingParty, error)

+ CookieHandler func() *utils.CookieHandler

+ ErrorHandler func() func(http.ResponseWriter, *http.Request, string, string, string)

+ HttpClient func() *http.Client

+ IDTokenVerifier func() IDTokenVerifier

+ IsOAuth2Only func() bool

+ IsPKCE func() bool

+ OAuthConfig func() *oauth2.Config

+ type VerifierOption func(*idTokenVerifier)

Sep 10, 2020

Changes in this version

type DefaultRPOpts

+ func WithVerifierOpts(opts ...ConfFunc) DefaultRPOpts

Sep 7, 2020

Changes in this version

type Verifier

+ VerifyIDToken func(ctx context.Context, idTokenString string) (*oidc.IDTokenClaims, error)

Jul 6, 2020

Changes in this version

+ var ErrAtHash = func() *validationError

+ var ErrSignatureMissing = func() *validationError

+ var ErrSignatureMultiple = func() *validationError

+ func WithIgnoreExpiration() func(*verifierConfig)

Apr 30, 2020

Changes in this version

type Config

+ Endpoints oauth2.Endpoint

type DefaultRP

+ func (p *DefaultRP) Client(ctx context.Context, token *oauth2.Token) *http.Client

type RelayingParty

+ Client func(ctx context.Context, token *oauth2.Token) *http.Client

Mar 3, 2020

Changes in this version

+ func WithIgnoreAudience() func(*verifierConfig)

Feb 6, 2020

Changes in this version

+ func CheckKey(keyID string, keys []jose.JSONWebKey, jws *jose.JSONWebSignature) ([]byte, error, bool)

Jan 31, 2020

Changes in this version

+ var DefaultErrorHandler = func(w http.ResponseWriter, r *http.Request, errorType string, errorDesc string, ...)

+ var ErrAcrInvalid = func(expected []string, actual string) *validationError

+ var ErrAudienceMissingClientID = func(clientID string) *validationError

+ var ErrAuthTimeNotPresent = func() *validationError

+ var ErrAuthTimeToOld = func(maxAge, authTime time.Time) *validationError

+ var ErrAzpInvalid = func(azp, clientID string) *validationError

+ var ErrAzpMissing = func() *validationError

+ var ErrExpInvalid = func(exp time.Time) *validationError

+ var ErrIatInFuture = func(exp, now time.Time) *validationError

+ var ErrIatToOld = func(maxAge, iat time.Time) *validationError

+ var ErrIssuerInvalid = func(expected, actual string) *validationError

+ var ErrNonceInvalid = func(expected, actual string) *validationError

+ var ErrSignatureInvalidPayload = func() *validationError

+ func DelegationTokenRequest(subjectToken string, opts ...tokenexchange.TokenExchangeOption) *tokenexchange.TokenExchangeRequest

+ func NewRemoteKeySet(client *http.Client, jwksURL string) oidc.KeySet

+ func ValidationError(message string, args ...interface{}) *validationError

+ func WithACRVerifier(verifier ACRVerifier) func(*verifierConfig)

+ func WithAuthTimeMaxAge(maxAge time.Duration) func(*verifierConfig)

+ func WithIgnoreIssuedAt() func(*verifierConfig)

+ func WithIssuedAtMaxAge(maxAge time.Duration) func(*verifierConfig)

+ func WithIssuedAtOffset(offset time.Duration) func(*verifierConfig)

+ func WithNonce(nonce string) func(*verifierConfig)

+ func WithSupportedSigningAlgorithms(algs ...string) func(*verifierConfig)

+ type ACRVerifier func(string) error

+ func DefaultACRVerifier(possibleValues []string) ACRVerifier

+ type AuthURLOpt func() []oauth2.AuthCodeOption

+ func WithCodeChallenge(codeChallenge string) AuthURLOpt

+ type CodeExchangeOpt func() []oauth2.AuthCodeOption

+ func WithCodeVerifier(codeVerifier string) CodeExchangeOpt

+ type ConfFunc func(*verifierConfig)

+ type Config struct

+ CallbackURL string

+ ClientID string

+ ClientSecret string

+ Issuer string

+ Scopes []string

+ type DefaultRP struct

+ func (p *DefaultRP) AuthURL(state string, opts ...AuthURLOpt) string

+ func (p *DefaultRP) AuthURLHandler(state string) http.HandlerFunc

+ func (p *DefaultRP) ClientCredentials(ctx context.Context, scopes ...string) (newToken *oauth2.Token, err error)

+ func (p *DefaultRP) CodeExchange(ctx context.Context, code string, opts ...CodeExchangeOpt) (tokens *oidc.Tokens, err error)

+ func (p *DefaultRP) CodeExchangeHandler(callback func(http.ResponseWriter, *http.Request, *oidc.Tokens, string)) http.HandlerFunc

+ func (p *DefaultRP) DelegationTokenExchange(ctx context.Context, subjectToken string, ...) (newToken *oauth2.Token, err error)

+ func (p *DefaultRP) TokenExchange(ctx context.Context, request *grants_tx.TokenExchangeRequest) (newToken *oauth2.Token, err error)

+ func (p *DefaultRP) Userinfo()

+ type DefaultRPOpts func(p *DefaultRP)

+ func WithCookieHandler(cookieHandler *utils.CookieHandler) DefaultRPOpts

+ func WithHTTPClient(client *http.Client) DefaultRPOpts

+ func WithPKCE(cookieHandler *utils.CookieHandler) DefaultRPOpts

+ type DefaultVerifier struct

+ func (v *DefaultVerifier) Verify(ctx context.Context, accessToken, idTokenString string) (*oidc.IDTokenClaims, error)

+ func (v *DefaultVerifier) VerifyIDToken(ctx context.Context, idTokenString string) (*oidc.IDTokenClaims, error)

+ type DelegationTokenExchangeRP interface

+ DelegationTokenExchange func(context.Context, string, ...tokenexchange.TokenExchangeOption) (*oauth2.Token, error)

+ func NewDefaultRP(rpConfig *Config, rpOpts ...DefaultRPOpts) (DelegationTokenExchangeRP, error)

+ type Endpoints struct

+ IntrospectURL string

+ JKWsURL string

+ UserinfoURL string

+ func GetEndpoints(discoveryConfig *oidc.DiscoveryConfiguration) Endpoints

+ type OptionFunc func(RelayingParty)

+ type PasswortGrantRP interface

+ PasswordGrant func(context.Context, string, string) (*oauth2.Token, error)

+ type RelayingParty interface

+ AuthURL func(state string, opts ...AuthURLOpt) string

+ AuthURLHandler func(state string) http.HandlerFunc

+ ClientCredentials func(ctx context.Context, scopes ...string) (*oauth2.Token, error)

+ CodeExchange func(ctx context.Context, code string, opts ...CodeExchangeOpt) (*oidc.Tokens, error)

+ CodeExchangeHandler func(callback func(http.ResponseWriter, *http.Request, *oidc.Tokens, string)) http.HandlerFunc

+ Userinfo func()

+ type TokenExchangeRP interface

+ TokenExchange func(context.Context, *tokenexchange.TokenExchangeRequest) (*oauth2.Token, error)

+ type Verifier interface

+ Verify func(ctx context.Context, accessToken, idTokenString string) (*oidc.IDTokenClaims, error)

+ func NewDefaultVerifier(issuer, clientID string, keySet oidc.KeySet, confOpts ...ConfFunc) Verifier