generic

Documentation

Index

• Constants
• Variables
• type Provider
  • func NewProvider(_ context.Context, conf config.Config, _ *http.Client) (*Provider, error)
  • func (p *Provider) CheckCommonName(session state.State, tokens *oidc.Tokens[*idtoken.Claims]) error
  • func (p *Provider) CheckGroups(tokens *oidc.Tokens[*idtoken.Claims]) error
  • func (p *Provider) CheckIPAddress(session state.State, tokens *oidc.Tokens[*idtoken.Claims]) error
  • func (p *Provider) CheckRoles(tokens *oidc.Tokens[*idtoken.Claims]) error
  • func (p *Provider) CheckUser(_ context.Context, session state.State, _ types.UserData, ...) error
  • func (p *Provider) GetName() string
  • func (p *Provider) GetProviderConfig(conf config.Config) (types.ProviderConfig, error)
  • func (p *Provider) GetRefreshToken(tokens *oidc.Tokens[*idtoken.Claims]) string
  • func (p *Provider) GetUser(_ context.Context, logger *slog.Logger, tokens *oidc.Tokens[*idtoken.Claims]) (types.UserData, error)
  • func (p *Provider) Refresh(ctx context.Context, logger *slog.Logger, relyingParty rp.RelyingParty, ...) (*oidc.Tokens[*idtoken.Claims], error)
  • func (p *Provider) RevokeRefreshToken(ctx context.Context, logger *slog.Logger, relyingParty rp.RelyingParty, ...) error

Constants

const Name = "generic"

Variables

var (
	ErrMismatch             = errors.New("mismatch")
	ErrMissingClaim         = errors.New("missing claim")
	ErrMissingRequiredRole  = errors.New("missing required role")
	ErrMissingRequiredGroup = errors.New("missing required group")
)

Types

type Provider

type Provider struct {
	Conf config.Config
}

func NewProvider

func NewProvider(_ context.Context, conf config.Config, _ *http.Client) (*Provider, error)

func (*Provider) CheckCommonName

func (p *Provider) CheckCommonName(session state.State, tokens *oidc.Tokens[*idtoken.Claims]) error

func (*Provider) CheckGroups

func (p *Provider) CheckGroups(tokens *oidc.Tokens[*idtoken.Claims]) error

func (*Provider) CheckIPAddress

func (p *Provider) CheckIPAddress(session state.State, tokens *oidc.Tokens[*idtoken.Claims]) error

func (*Provider) CheckRoles

func (p *Provider) CheckRoles(tokens *oidc.Tokens[*idtoken.Claims]) error

func (*Provider) CheckUser

func (p *Provider) CheckUser(
	_ context.Context,
	session state.State,
	_ types.UserData,
	tokens *oidc.Tokens[*idtoken.Claims],
) error

func (*Provider) GetName

func (p *Provider) GetName() string

func (*Provider) GetProviderConfig

func (p *Provider) GetProviderConfig(conf config.Config) (types.ProviderConfig, error)

GetProviderConfig implements the github.com/jkroepke/openvpn-auth-oauth2/internal/oauth2.Provider interface.

func (*Provider) GetRefreshToken

func (p *Provider) GetRefreshToken(tokens *oidc.Tokens[*idtoken.Claims]) string

func (*Provider) GetUser

func (p *Provider) GetUser(_ context.Context, logger *slog.Logger, tokens *oidc.Tokens[*idtoken.Claims]) (types.UserData, error)

func (*Provider) Refresh

func (p *Provider) Refresh(ctx context.Context, logger *slog.Logger, relyingParty rp.RelyingParty, refreshToken string) (*oidc.Tokens[*idtoken.Claims], error)

Refresh initiates a non-interactive authentication against the sso provider.

func (*Provider) RevokeRefreshToken

func (p *Provider) RevokeRefreshToken(ctx context.Context, logger *slog.Logger, relyingParty rp.RelyingParty, refreshToken string) error