Versions in this module Expand all Collapse all v1 v1.0.1 Feb 21, 2024 v1.0.0 Feb 21, 2024 Changes in this version + const ClientIDClaim + const KeyIDClaim + const ScopeClaim + const UserIDClaim + func GetIssuer(ctx context.Context, req *http.Request, cfg *config.Config) string + func GetJSONWebKeysEndpoint(authCtx interfaces.AuthenticationContext) http.HandlerFunc + func RegisterHandlers(handler interfaces.HandlerRegisterer, authCtx interfaces.AuthenticationContext) + type Encryptor interface + Decrypt func(cypher string) (raw string, err error) + Encrypt func(raw string) (cypher string, err error) + type OAuth2MetadataProvider struct + func NewService(config *authConfig.Config) OAuth2MetadataProvider + func (s OAuth2MetadataProvider) AuthFuncOverride(ctx context.Context, fullMethodName string) (context.Context, error) + func (s OAuth2MetadataProvider) GetOAuth2Metadata(ctx context.Context, r *service.OAuth2MetadataRequest) (*service.OAuth2MetadataResponse, error) + func (s OAuth2MetadataProvider) GetPublicClientConfig(context.Context, *service.PublicClientAuthConfigRequest) (*service.PublicClientAuthConfigResponse, error) + type Provider struct + func NewProvider(ctx context.Context, cfg config.AuthorizationServer, sm core.SecretManager) (Provider, error) + func (p Provider) KeySet() jwk.Set + func (p Provider) NewJWTSessionToken(subject, appID, issuer, audience string, ...) *fositeOAuth2.JWTSession + func (p Provider) PublicKeys() []rsa.PublicKey + func (p Provider) ValidateAccessToken(ctx context.Context, expectedAudience, tokenStr string) (interfaces.IdentityContext, error) + type ResourceServer struct + func NewOAuth2ResourceServer(ctx context.Context, cfg authConfig.ExternalAuthorizationServer, ...) (ResourceServer, error) + func (r ResourceServer) ValidateAccessToken(ctx context.Context, expectedAudience, tokenStr string) (interfaces.IdentityContext, error) + type StatelessCodeProvider struct + func NewStatelessCodeProvider(cfg config.AuthorizationServer, blockKey [auth.SymmetricKeyLength]byte, ...) StatelessCodeProvider + func (p StatelessCodeProvider) AuthorizeCodeSignature(token string) string + func (p StatelessCodeProvider) Decrypt(encrypted string) (string, error) + func (p StatelessCodeProvider) Encrypt(raw string) (string, error) + func (p StatelessCodeProvider) GenerateAccessToken(ctx context.Context, requester fosite.Requester) (token string, signature string, err error) + func (p StatelessCodeProvider) GenerateAuthorizeCode(ctx context.Context, requester fosite.Requester) (token string, signature string, err error) + func (p StatelessCodeProvider) GenerateRefreshToken(ctx context.Context, requester fosite.Requester) (token string, signature string, err error) + func (p StatelessCodeProvider) RefreshTokenSignature(token string) string + func (p StatelessCodeProvider) ValidateAuthorizeCode(ctx context.Context, requester fosite.Requester, token string) (err error) + func (p StatelessCodeProvider) ValidateRefreshToken(ctx context.Context, requester fosite.Requester, token string) (err error) + type StatelessTokenStore struct + func (s StatelessTokenStore) DeleteRefreshTokenSession(_ context.Context, _ string) (err error) + func (s StatelessTokenStore) GetAuthorizeCodeSession(ctx context.Context, code string, _ fosite.Session) (fosite.Requester, error) + func (s StatelessTokenStore) GetPKCERequestSession(ctx context.Context, signature string, _ fosite.Session) (fosite.Requester, error) + func (s StatelessTokenStore) GetRefreshTokenSession(ctx context.Context, signature string, _ fosite.Session) (request fosite.Requester, err error) + func (s StatelessTokenStore) InvalidateAuthorizeCodeSession(_ context.Context, _ string) (err error)