oauth2

Jan 25, 2024

Changes in this version

type ClientConfig

+ CallbackTLSCert string

+ CallbackTLSKey string

+ Purpose string

Sep 29, 2023

Changes in this version

type ClientConfig

+ BrowserTimeout time.Duration

+ HTTPTimeout time.Duration

Sep 15, 2023

Changes in this version

type ClientConfig

+ ACRValues []string

Sep 12, 2023

Changes in this version

type TokenResponse

+ AuthorizationDetails []map[string]interface{}

Jul 11, 2023

Changes in this version

type ClientConfig

+ RAR string

May 23, 2023

Changes in this version

type ClientConfig

+ Audience []string

+ Timeout time.Duration

May 10, 2023

Changes in this version

type ClientConfig

+ Claims string

Apr 25, 2023

Changes in this version

+ const DPoPHeaderName

+ const DPoPHeaderType

+ func DPoPSignRequest(signingKey string, hc *http.Client, r *http.Request) error

+ func DPoPThumbprint(signingKey string, hc *http.Client) (string, error)

type ClientConfig

+ DPoP bool

+ type DPoPClaims struct

+ Htm string

+ Htu string

+ IssuedAt int64

+ Jti string

Mar 21, 2023

Changes in this version

type ClientConfig

+ IDPHint string

+ IDTokenHint string

+ LoginHint string

+ RedirectURL string

Jan 25, 2023

Changes in this version

type ClientConfig

+ EncryptedRequestObject bool

type Request

+ RequestObject string

Dec 21, 2022

Changes in this version

+ func EncryptJWT(token string, encrypterProvider EncrypterProvider) (nestedJWT string, key interface{}, err error)

+ func PlaintextJWT(claimsProvider ClaimsProvider) (jwt string, key string, err error)

type ClaimsProvider

+ func RequestObjectClaims(params url.Values, serverConfig ServerConfig, clientConfig ClientConfig) ClaimsProvider

type ClientConfig

+ RequestObject bool

+ type EncrypterProvider func() (jose.Encrypter, interface{}, error)

+ func JWEEncrypter(clientConfig ClientConfig, hc *http.Client) EncrypterProvider

type Request

+ EncryptionKey interface{}

+ SigningKey interface{}

+ func (r *Request) AuthorizeRequest(addr string, cconfig ClientConfig, sconfig ServerConfig, hc *http.Client) (codeVerifier string, err error)

Dec 17, 2022

Changes in this version

+ const DeviceGrantType

+ const ErrAuthorizationPending

+ const ErrSlowDown

+ const TokenExchangeGrantType

+ func NewAuthorizationRequest(addr string, cconfig ClientConfig) (values url.Values, codeVerifier string, err error)

+ func RequestDeviceAuthorization(ctx context.Context, cconfig ClientConfig, sconfig ServerConfig, ...) (request Request, response DeviceAuthorizationResponse, err error)

+ func RequestPAR(ctx context.Context, addr string, cconfig ClientConfig, sconfig ServerConfig, ...) (parRequest Request, parResponse PARResponse, authorizeRequest Request, ...)

+ func UnsafeParseJWT(token string) (*jwt.JSONWebToken, map[string]interface{}, error)

+ func WithDeviceCode(deviceCode string) func(*RequestTokenParams)

type ClientConfig

+ ActorToken string

+ ActorTokenType string

+ EncryptionKey string

+ PAR bool

+ SubjectToken string

+ SubjectTokenType string

+ type DeviceAuthorizationResponse struct

+ DeviceCode string

+ ExpiresIn int64

+ Interval int64

+ UserCode string

+ VerificationURI string

+ VerificationURIComplete string

+ type KeyUse string

+ const EncryptionKey

+ const SigningKey

+ type PARResponse struct

+ ExpiresIn int64

+ RequestURI string

type Request

+ JARM map[string]interface{}

+ func (r *Request) AuthenticateClient(endpoint string, mtlsEndpoint string, cconfig ClientConfig, ...) (string, error)

+ func (r *Request) ParseJARM(signingKey interface{}, encryptionKey interface{}) error

type RequestTokenParams

+ DeviceCode string

type ServerConfig

+ DeviceAuthorizationEndpoint string

+ JWKsURI string

+ PushedAuthorizationRequestEndpoint string

Dec 10, 2022

Changes in this version

+ const NoneAuthMethod

Nov 17, 2022

Changes in this version

+ const ClientSecretJwtAuthMethod

+ const JwtBearerClientAssertion

+ const PrivateKeyJwtAuthMethod

+ const SelfSignedTLSAuthMethod

+ const TLSClientAuthMethod

+ func ReadKeyPair(cert string, key string, hc *http.Client) (keyPair tls.Certificate, err error)

+ func ReadRootCA(location string, hc *http.Client) (pool *x509.CertPool, err error)

+ func ReadURL(location string, hc *http.Client) (data []byte, err error)

+ type ClaimsProvider func() (map[string]interface{}, error)

+ func AssertionClaims(serverConfig ServerConfig, clientConfig ClientConfig) ClaimsProvider

+ func ClientAssertionClaims(serverConfig ServerConfig, clientConfig ClientConfig) ClaimsProvider

type ClientConfig

+ TLSCert string

+ TLSKey string

+ TLSRootCA string

type Request

+ Cert *x509.Certificate

+ Key interface{}

type ServerConfig

+ MTLsEndpointAliases struct{ ... }

+ type SignerProvider func() (jose.Signer, interface{}, error)

+ func JWKSigner(clientConfig ClientConfig, hc *http.Client) SignerProvider

+ func SecretSigner(secret []byte) SignerProvider

Nov 15, 2022

Changes in this version

+ const AuthorizationCodeGrantType

+ const ClientCredentialsGrantType

+ const ClientSecretBasicAuthMethod

+ const ClientSecretPostAuthMethod

+ const CodeVerifierLength

+ const ImplicitGrantType

+ const JWTBearerGrantType

+ const OpenIDConfigurationPath

+ const PasswordGrantType

+ const RefreshTokenGrantType

+ var CodeChallengeEncoder = base64.RawURLEncoding

+ func FetchOpenIDConfiguration(ctx context.Context, issuerURL string, hc *http.Client) (request Request, c ServerConfig, err error)

+ func ParseError(resp *http.Response) error

+ func RandomString(n int) string

+ func ReadKey(location string, hc *http.Client) (jose.JSONWebKey, error)

+ func RequestToken(ctx context.Context, cconfig ClientConfig, sconfig ServerConfig, ...) (request Request, response TokenResponse, err error)

+ func SignJWT(claims map[string]interface{}, key jose.JSONWebKey) (string, error)

+ func WithAssertion(assertion string) func(*RequestTokenParams)

+ func WithAuthorizationCode(code string) func(*RequestTokenParams)

+ func WithCodeVerifier(codeVerifier string) func(*RequestTokenParams)

+ func WithRedirectURL(url string) func(*RequestTokenParams)

+ func WithStandardClaims(extra map[string]interface{}, serverConfig ServerConfig) map[string]interface

+ type ClientConfig struct

+ Assertion string

+ AuthMethod string

+ ClientID string

+ ClientSecret string

+ GrantType string

+ Insecure bool

+ IssuerURL string

+ NoPKCE bool

+ PKCE bool

+ Password string

+ RefreshToken string

+ ResponseMode string

+ ResponseType []string

+ Scopes []string

+ SigningKey string

+ Username string

+ type Error struct

+ Cause string

+ Description string

+ ErrorCode string

+ Hint string

+ StatusCode int

+ TraceID string

+ func (e *Error) Error() string

+ type Request struct

+ Form url.Values

+ Headers map[string][]string

+ Method string

+ URL *url.URL

+ func RequestAuthorization(addr string, cconfig ClientConfig, sconfig ServerConfig) (r Request, codeVerifier string, err error)

+ func WaitForCallback(addr string) (request Request, err error)

+ func (r *Request) Get(key string) string

+ type RequestTokenOption func(*RequestTokenParams)

+ type RequestTokenParams struct

+ Assertion string

+ Code string

+ CodeVerifier string

+ RedirectURL string

+ type ServerConfig struct

+ AuthorizationEndpoint string

+ Issuer string

+ SupportedGrantTypes []string

+ SupportedResponseModes []string

+ SupportedResponseTypes []string

+ SupportedScopes []string

+ SupportedTokenEndpointAuthMethods []string

+ TokenEndpoint string

+ type TokenResponse struct

+ AccessToken string

+ ExpiresIn int64

+ IDToken string

+ IssuedTokenType string

+ RefreshToken string

+ Scope string

+ TokenType string

+ func NewTokenResponseFromForm(f url.Values) TokenResponse