oidc

Documentation

Index

• Constants
• func ConvertTokenToRawIDToken(token *oauth2.Token) (string, error)
• func GenerateChallenge() (string, error)
• func IsAuthorizationPendingError(err error) bool
• func IsCannotDecodeToken(err error) bool
• func IsCannotGetDeviceCodeError(err error) bool
• func IsCannotGetDeviceTokenError(err error) bool
• func IsCannotParseJwtError(err error) bool
• func IsCannotRenewToken(err error) bool
• func IsInvalidChallenge(err error) bool
• func IsTooManyAuthRequestsError(err error) bool
• type Authenticator
  • func New(ctx context.Context, c Config) (*Authenticator, error)
  • func (a *Authenticator) GetAuthSelectionURL(connectorType string) string
  • func (a *Authenticator) GetAuthURL(connectorID string) string
  • func (a *Authenticator) HandleIssuerResponse(ctx context.Context, challenge string, code string) (UserInfo, error)
  • func (a *Authenticator) RenewToken(ctx context.Context, refreshToken string) (idToken string, rToken string, err error)
• type Claims
• type Config
• type DeviceAuthenticator
  • func NewDeviceAuthenticator(clientID string, i *installation.Installation) *DeviceAuthenticator
  • func (a *DeviceAuthenticator) LoadDeviceCode() (DeviceCodeResponseData, error)
  • func (a *DeviceAuthenticator) LoadDeviceToken(data DeviceCodeResponseData) (DeviceTokenResponseData, string, error)
• type DeviceCodeResponseData
• type DeviceTokenResponseData
• type ErrorResponseData
• type JwtName
• type UserInfo

Constants

const (
	DeviceAuthKeyClientID   = "client_id"
	DeviceAuthKeyScope      = "scope"
	DeviceAuthKeyDeviceCode = "device_code"
	DeviceAuthKeyGrantType  = "grant_type"

	ErrorTypeAuthPending = "authorization_pending"
	ErrorTypeSlowDown    = "slow_down"

	DeviceAuthScopes    = "openid profile email groups offline_access audience:server:client_id:dex-k8s-authenticator"
	DeviceAuthGrantType = "urn:ietf:params:oauth:grant-type:device_code"
)

Functions

func ConvertTokenToRawIDToken

func ConvertTokenToRawIDToken(token *oauth2.Token) (string, error)

func GenerateChallenge

func GenerateChallenge() (string, error)

func IsAuthorizationPendingError

func IsAuthorizationPendingError(err error) bool

IsAuthorizationPendingError asserts authorizationPendingError.

func IsCannotDecodeToken

func IsCannotDecodeToken(err error) bool

IsCannotDecodeToken asserts cannotDecodeTokenError.

func IsCannotGetDeviceCodeError

func IsCannotGetDeviceCodeError(err error) bool

IsCannotGetDeviceCodeError asserts cannotGetDeviceCodeError.

func IsCannotGetDeviceTokenError

func IsCannotGetDeviceTokenError(err error) bool

IsCannotGetDeviceTokenError asserts cannotGetDeviceTokenError.

func IsCannotParseJwtError

func IsCannotParseJwtError(err error) bool

IsCannotParseJwtError asserts cannotParseJwtError.

func IsCannotRenewToken

func IsCannotRenewToken(err error) bool

IsCannotRenewToken asserts cannotRenewTokenError.

func IsInvalidChallenge

func IsInvalidChallenge(err error) bool

IsInvalidChallenge asserts invalidChallengeError.

func IsTooManyAuthRequestsError

func IsTooManyAuthRequestsError(err error) bool

IsTooManyAuthRequestsError asserts tooManyAuthRequestsError.

Types

type Authenticator

type Authenticator struct {
	// contains filtered or unexported fields
}

func New

func New(ctx context.Context, c Config) (*Authenticator, error)

func (*Authenticator) GetAuthSelectionURL

func (a *Authenticator) GetAuthSelectionURL(connectorType string) string

func (*Authenticator) GetAuthURL

func (a *Authenticator) GetAuthURL(connectorID string) string

func (*Authenticator) HandleIssuerResponse

func (a *Authenticator) HandleIssuerResponse(ctx context.Context, challenge string, code string) (UserInfo, error)

func (*Authenticator) RenewToken

func (a *Authenticator) RenewToken(ctx context.Context, refreshToken string) (idToken string, rToken string, err error)

type Claims

type Claims struct {
	Email    string   `json:"email"`
	Verified bool     `json:"email_verified"`
	Groups   []string `json:"groups"`
}

type Config

type Config struct {
	ClientID     string
	ClientSecret string
	Issuer       string
	RedirectURL  string
	AuthScopes   []string
}

type DeviceAuthenticator

type DeviceAuthenticator struct {
	// contains filtered or unexported fields
}

func NewDeviceAuthenticator

func NewDeviceAuthenticator(clientID string, i *installation.Installation) *DeviceAuthenticator

func (*DeviceAuthenticator) LoadDeviceCode

func (a *DeviceAuthenticator) LoadDeviceCode() (DeviceCodeResponseData, error)

func (*DeviceAuthenticator) LoadDeviceToken

func (a *DeviceAuthenticator) LoadDeviceToken(data DeviceCodeResponseData) (DeviceTokenResponseData, string, error)

type DeviceCodeResponseData

type DeviceCodeResponseData struct {
	DeviceCode              string `json:"device_code"`
	UserCode                string `json:"user_code"`
	VerificationUri         string `json:"verification_uri"`
	VerificationUriComplete string `json:"verification_uri_complete"`
	ExpiresIn               int    `json:"expires_in"`
	Interval                int    `json:"interval"`
}

type DeviceTokenResponseData

type DeviceTokenResponseData struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int    `json:"expires_in"`
	RefreshToken string `json:"refresh_token"`
	IdToken      string `json:"id_token"`
}

type ErrorResponseData

type ErrorResponseData struct {
	Error string `json:"error"`
}

type JwtName

type JwtName struct {
	Name string `json:"name"`
}

type UserInfo

type UserInfo struct {
	Email         string
	EmailVerified bool
	IDToken       string
	RefreshToken  string
	IssuerURL     string
	Username      string
	Groups        []string
	ClientID      string
	ClientSecret  string
}