googleid

Documentation

Index

• Variables
• type AuthorizedUserTokenSource
  • func NewAuthorizedUserTokenSource() *AuthorizedUserTokenSource
  • func (s *AuthorizedUserTokenSource) GetIDToken(ctx context.Context) (string, error)
• type Certs
  • func GetCerts(ctx context.Context) (*Certs, error)
• type ClaimSet
• type Keys
  • func (key *Keys) GetPublicKey() (*rsa.PublicKey, error)
• type ServiceAccountTokenSource
  • func NewServiceAccountTokenSource(credentialsFile string, targetAudience string) (*ServiceAccountTokenSource, error)
  • func (s *ServiceAccountTokenSource) GetIDToken(parent context.Context) (string, error)
• type Token
  • func ParseJWT(token string) (*Token, error)

Variables

var (
	ErrInvalidToken = errors.New("invalid token")
)

Types

type AuthorizedUserTokenSource

type AuthorizedUserTokenSource struct {
}

func NewAuthorizedUserTokenSource

func NewAuthorizedUserTokenSource() *AuthorizedUserTokenSource

func (*AuthorizedUserTokenSource) GetIDToken

func (s *AuthorizedUserTokenSource) GetIDToken(ctx context.Context) (string, error)

Retrieve ID-Token using Google Application Default Credentials: authorized_user will have id_token, service_account will not

type Certs

type Certs struct {
	Keys []Keys `json:"keys"`
}

func GetCerts

func GetCerts(ctx context.Context) (*Certs, error)

type ClaimSet

type ClaimSet struct {
	Iss           string `json:"iss"`             // email address of the client_id of the application making the access token request
	Scope         string `json:"scope,omitempty"` // space-delimited list of the permissions the application requests
	Aud           string `json:"aud"`             // descriptor of the intended target of the assertion (Optional).
	Azp           string `json:"azp"`
	Exp           int64  `json:"exp"`           // the expiration time of the assertion (seconds since Unix epoch)
	Iat           int64  `json:"iat"`           // the time the assertion was issued (seconds since Unix epoch)
	Typ           string `json:"typ,omitempty"` // token type (Optional).
	Sub           string `json:"sub,omitempty"` // Email for which the application is requesting delegated access (Optional).
	Email         string `json:"email"`
	EmailVerified bool   `json:"email_verified"`
}

ClaimSet represents claim set

type Keys

type Keys struct {
	Kty string `json:"kty"`
	Alg string `json:"alg"`
	Use string `json:"use"`
	Kid string `json:"kid"`
	N   string `json:"n"`
	E   string `json:"e"`
}

https://tools.ietf.org/html/rfc7517#appendix-A

func (*Keys) GetPublicKey

func (key *Keys) GetPublicKey() (*rsa.PublicKey, error)

type ServiceAccountTokenSource

type ServiceAccountTokenSource struct {
	// contains filtered or unexported fields
}

func NewServiceAccountTokenSource

func NewServiceAccountTokenSource(credentialsFile string, targetAudience string) (*ServiceAccountTokenSource, error)

func (*ServiceAccountTokenSource) GetIDToken

func (s *ServiceAccountTokenSource) GetIDToken(parent context.Context) (string, error)

type Token

type Token struct {
	Raw      string
	Header   *jws.Header
	ClaimSet *ClaimSet
}

func ParseJWT

func ParseJWT(token string) (*Token, error)