clientregistry

package
v0.35.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 4, 2021 License: Apache-2.0 Imports: 5 Imported by: 0

Documentation

Overview

Package clientregistry defines Pinniped's OAuth2/OIDC clients.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Client

type Client struct {
	fosite.DefaultOpenIDConnectClient
}

Client represents a Pinniped OAuth/OIDC client.

func PinnipedCLI

func PinnipedCLI() *Client

PinnipedCLI returns the static Client corresponding to the Pinniped CLI.

func (Client) GetResponseModes

func (c Client) GetResponseModes() []fosite.ResponseModeType

type StaticClientManager

type StaticClientManager struct{}

StaticClientManager is a fosite.ClientManager with statically-defined clients.

func (StaticClientManager) ClientAssertionJWTValid

func (StaticClientManager) ClientAssertionJWTValid(ctx context.Context, jti string) error

ClientAssertionJWTValid returns an error if the JTI is known or the DB check failed and nil if the JTI is not known.

This functionality is not supported by the StaticClientManager.

func (StaticClientManager) GetClient

GetClient returns a static client specified by the given ID.

It returns a fosite.ErrNotFound if an unknown client is specified.

func (StaticClientManager) SetClientAssertionJWT

func (StaticClientManager) SetClientAssertionJWT(ctx context.Context, jti string, exp time.Time) error

SetClientAssertionJWT marks a JTI as known for the given expiry time. Before inserting the new JTI, it will clean up any existing JTIs that have expired as those tokens can not be replayed due to the expiry.

This functionality is not supported by the StaticClientManager.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL