oidc

Documentation

Index

• func TokenFromIDToken(idToken *oidc.IDToken, rawIDToken, refreshToken string) (*oauth2.Token, error)
• type Client
  • func New(cfg Config, retrySec int, certs *certs.ServiceCerts, l OIDCLogger) (Client, error)
• type Config
• type OIDCLogger

Functions

func TokenFromIDToken

func TokenFromIDToken(idToken *oidc.IDToken, rawIDToken, refreshToken string) (*oauth2.Token, error)

TokenFromIDToken creates a synthetic oauth2.Token instance with which the standard TokenSource implementation can be used (for handing refresh).

Types

type Client

type Client interface {
	TokenSource(context.Context, *oauth2.Token) oauth2.TokenSource
	AuthCodeURL(string, ...oauth2.AuthCodeOption) string
	Exchange(context.Context, string) (*oauth2.Token, error)
	Verify(context.Context, string) (*oidc.IDToken, error)
	RefreshTokenValidator(string) (*http.Response, error)
	Client() *http.Client
}

Client captures the pieces we care about of *oauth2.Config

func New

func New(cfg Config, retrySec int, certs *certs.ServiceCerts, l OIDCLogger) (Client, error)

New initializes an OIDC client for our purposes

type Config

type Config struct {
	ClientID     string
	ClientSecret string
	RedirectURL  *url.URL
	IssuerURL    *url.URL
	DexURL       *url.URL
}

Config contains necessary elements for initializing OIDC client

type OIDCLogger

type OIDCLogger interface {
	Warn(...interface{})
}

OIDCLogger captures this package's logging needs