oauth2

Documentation

Index

• type CustomClaims
  • func (cc *CustomClaims) UnmarshalJSON(b []byte) error
  • func (cc *CustomClaims) Verify(aud string, issuers []string) error
  • func (cc *CustomClaims) VerifyExpiration() error
• type IntrospectionResponse
  • func (ir *IntrospectionResponse) ExpiredAt() time.Time
  • func (ir *IntrospectionResponse) GrantedAuthorities() []*proto.GrantedAuthority
  • func (ir *IntrospectionResponse) Verify(aud string, issuers []string) error
  • func (ir *IntrospectionResponse) VerifyExpiration() error
• type Manager
  • func NewManager(conf *config.TokenValidationConfiguration) (*Manager, error)
  • func (m *Manager) Authenticate(ctx context.Context, req *proto.AuthenticationToken) (*proto.PreAuthenticatedAuthenticationToken, error)

Types

type CustomClaims

type CustomClaims struct {
	*jwt.Claims
	// contains filtered or unexported fields
}

func (*CustomClaims) UnmarshalJSON

func (cc *CustomClaims) UnmarshalJSON(b []byte) error

func (*CustomClaims) Verify

func (cc *CustomClaims) Verify(aud string, issuers []string) error

func (*CustomClaims) VerifyExpiration

func (cc *CustomClaims) VerifyExpiration() error

type IntrospectionResponse

type IntrospectionResponse struct {
	Active     bool             `json:"active"`
	Scope      string           `json:"scope,omitempty"`
	ClientID   string           `json:"client_id,omitempty"`
	Username   string           `json:"username,omitempty"`
	TokenType  string           `json:"token_type,omitempty"`
	Expiration *jwt.NumericDate `json:"exp,omitempty"`
	IssuedAt   *jwt.NumericDate `json:"iat,omitempty"`
	NotBefore  *jwt.NumericDate `json:"nbf,omitempty"`
	Subject    string           `json:"sub,omitempty"`
	Audience   jwt.Audience     `json:"aud,omitempty"`
	Issuer     string           `json:"iss,omitempty"`
	JwtID      string           `json:"jti,omitempty"`
}

implements https://tools.ietf.org/html/rfc7662 with limitted support for authentication

func (*IntrospectionResponse) ExpiredAt

func (ir *IntrospectionResponse) ExpiredAt() time.Time

func (*IntrospectionResponse) GrantedAuthorities

func (ir *IntrospectionResponse) GrantedAuthorities() []*proto.GrantedAuthority

func (*IntrospectionResponse) Verify

func (ir *IntrospectionResponse) Verify(aud string, issuers []string) error

include verify time-related fields

func (*IntrospectionResponse) VerifyExpiration

func (ir *IntrospectionResponse) VerifyExpiration() error

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

func NewManager

func NewManager(conf *config.TokenValidationConfiguration) (*Manager, error)

func (*Manager) Authenticate

func (m *Manager) Authenticate(ctx context.Context, req *proto.AuthenticationToken) (*proto.PreAuthenticatedAuthenticationToken, error)