oidc

package

Go to main page

Versions in this module

v0

v0.6.1

Dec 16, 2024

v0.6.0

Dec 15, 2024

Changes in this version

type Configuration

+ DecrypterFunc goidc.DecrypterFunc

+ ErrorURI string

+ IDTokenContentEncAlgs []goidc.ContentEncryptionAlgorithm

+ IDTokenDefaultContentEncAlg goidc.ContentEncryptionAlgorithm

+ IDTokenDefaultSigAlg goidc.SignatureAlgorithm

+ IDTokenEncIsEnabled bool

+ IDTokenKeyEncAlgs []goidc.KeyEncryptionAlgorithm

+ IDTokenSigAlgs []goidc.SignatureAlgorithm

+ SignerFunc goidc.SignerFunc

+ UserInfoContentEncAlgs []goidc.ContentEncryptionAlgorithm

+ UserInfoDefaultContentEncAlg goidc.ContentEncryptionAlgorithm

+ UserInfoDefaultSigAlg goidc.SignatureAlgorithm

+ UserInfoEncIsEnabled bool

+ UserInfoKeyEncAlgs []goidc.KeyEncryptionAlgorithm

+ UserInfoSigAlgs []goidc.SignatureAlgorithm

type Context

+ func (ctx Context) IDTokenSigAlgsContainsNone() bool

+ func (ctx Context) JWKByAlg(alg goidc.SignatureAlgorithm) (goidc.JSONWebKey, error)

+ func (ctx Context) WriteHTML(html string, params any) error

v0.5.0

Nov 26, 2024

Changes in this version

type Configuration

+ CIBADefaultSessionLifetimeSecs int

+ CIBAIsEnabled bool

+ CIBAJARIsEnabled bool

+ CIBAJARIsRequired bool

+ CIBAJARSigAlgs []jose.SignatureAlgorithm

+ CIBAPollingIntervalSecs int

+ CIBATokenDeliveryModels []goidc.CIBATokenDeliveryMode

+ CIBAUserCodeIsEnabled bool

+ DecryptFunc goidc.DecryptFunc

+ DefaultSubIdentifierType goidc.SubIdentifierType

+ EndpointCIBA string

+ GeneratePairwiseSubIDFunc goidc.GeneratePairwiseSubIDFunc

+ InitBackAuthFunc goidc.InitBackAuthFunc

+ JWKSFunc goidc.JWKSFunc

+ JWTLeewayTimeSecs int

+ JWTLifetimeSecs int

+ SignFunc goidc.SignFunc

+ ValidateBackAuthFunc goidc.ValidateBackAuthFunc

type Context

+ func FromContext(ctx context.Context, config *Configuration) Context

+ func (ctx Context) AuthnSessionByAuthCode(code string) (*goidc.AuthnSession, error)

+ func (ctx Context) AuthnSessionByAuthReqID(id string) (*goidc.AuthnSession, error)

+ func (ctx Context) Decrypt(jwe string, keyAlgs []jose.KeyAlgorithm, contentAlgs []jose.ContentEncryption) (string, error)

+ func (ctx Context) ExportableSubject(sub string, client *goidc.Client) string

+ func (ctx Context) InitBackAuth(session *goidc.AuthnSession) error

+ func (ctx Context) JWK(keyID string) (jose.JSONWebKey, error)

+ func (ctx Context) JWKS() (jose.JSONWebKeySet, error)

+ func (ctx Context) PublicJWK(keyID string) (jose.JSONWebKey, error)

+ func (ctx Context) PublicJWKS() (jose.JSONWebKeySet, error)

+ func (ctx Context) Sign(claims map[string]any, opts goidc.SignatureOptions) (string, error)

+ func (ctx Context) ValidateBackAuth(session *goidc.AuthnSession) error

v0.4.0

Oct 22, 2024

Changes in this version

type Configuration

+ CompareAuthDetailsFunc goidc.CompareAuthDetailsFunc

+ HandleJWTBearerGrantAssertionFunc goidc.HandleJWTBearerGrantAssertionFunc

+ IsClientAllowedTokenIntrospectionFunc goidc.IsClientAllowedFunc

+ IsClientAllowedTokenRevocationFunc goidc.IsClientAllowedFunc

+ JARByReferenceIsEnabled bool

+ JARKeyEncAlgs []jose.KeyAlgorithm

+ JARMDefaultSigAlg jose.SignatureAlgorithm

+ JARMSigAlgs []jose.SignatureAlgorithm

+ JARRequestURIRegistrationIsRequired bool

+ JWTBearerGrantClientAuthnIsRequired bool

+ NotifyErrorFunc goidc.NotifyErrorFunc

+ TokenAuthnMethods []goidc.ClientAuthnType

+ TokenIntrospectionAuthnMethods []goidc.ClientAuthnType

+ TokenIntrospectionIsEnabled bool

+ TokenRevocationAuthnMethods []goidc.ClientAuthnType

+ UserDefaultSigAlg jose.SignatureAlgorithm

+ UserSigAlgs []jose.SignatureAlgorithm

+ ValidateInitialAccessTokenFunc goidc.ValidateInitialAccessTokenFunc

type Context

+ func (ctx *Context) SetContext(c context.Context)

+ func (ctx Context) CompareAuthDetails(granted []goidc.AuthorizationDetail, requested []goidc.AuthorizationDetail) error

+ func (ctx Context) Context() context.Context

+ func (ctx Context) HandleJWTBearerGrantAssertion(assertion string) (goidc.JWTBearerGrantInfo, error)

+ func (ctx Context) IDTokenSigKeyForClient(c *goidc.Client) (jose.JSONWebKey, bool)

+ func (ctx Context) IsClientAllowedTokenIntrospection(c *goidc.Client) bool

+ func (ctx Context) IsClientAllowedTokenRevocation(c *goidc.Client) bool

+ func (ctx Context) JARMSigKeyForClient(c *goidc.Client) (jose.JSONWebKey, bool)

+ func (ctx Context) NotifyError(err error)

+ func (ctx Context) TokenAuthnSigAlgs() []jose.SignatureAlgorithm

+ func (ctx Context) TokenIntrospectionAuthnSigAlgs() []jose.SignatureAlgorithm

+ func (ctx Context) TokenRevocationAuthnSigAlgs() []jose.SignatureAlgorithm

+ func (ctx Context) UserInfoSigAlgsContainsNone() bool

+ func (ctx Context) UserInfoSigKeyForClient(c *goidc.Client) (jose.JSONWebKey, bool)

+ func (ctx Context) UserSigKey() (jose.JSONWebKey, bool)

+ func (ctx Context) ValidateInitalAccessToken(token string) error

v0.3.0

Sep 28, 2024

Changes in this version

type Configuration

+ CheckJTIFunc goidc.CheckJTIFunc

+ EndpointTokenRevocation string

+ TokenRevocationIsEnabled bool

type Context

+ func (ctx Context) AssertionAudiences() []string

+ func (ctx Context) CheckJTI(jti string) error

+ func (ctx Context) DeleteGrantSessionByAuthorizationCode(code string) error

+ func (ctx Context) WriteStatus(status int)

v0.2.0

Sep 22, 2024

v0.1.1

Sep 22, 2024

Changes in this version

type Configuration

+ DPoPLeewayTimeSecs int

+ HTTPClientFunc goidc.HTTPClientFunc

+ HandleErrorFunc goidc.HandleErrorFunc

+ JARLeewayTimeSecs int

+ ShouldIssueRefreshTokenFunc goidc.ShouldIssueRefreshTokenFunc

type Context

+ func (ctx *Context) HTTPClient() *http.Client

+ func (ctx *Context) ShouldIssueRefreshToken(client *goidc.Client, grantInfo goidc.GrantInfo) bool

v0.1.0

Sep 9, 2024

v0.0.2

Sep 9, 2024

Changes in this version

type Configuration

+ HandleGrantFunc goidc.HandleGrantFunc

+ MTLSTokenBindingIsRequired bool

+ UserContentEncAlgs []jose.ContentEncryption

type Context

+ func (ctx *Context) HandleGrant(grantInfo *goidc.GrantInfo) error

v0.0.1

Sep 1, 2024

Changes in this version

+ func Handler(config *Configuration, exec func(ctx *Context)) http.HandlerFunc

+ type Configuration struct

+ ACRs []goidc.ACR

+ AssertionLifetimeSecs int

+ AuthDetailTypes []string

+ AuthDetailsIsEnabled bool

+ AuthnSessionManager goidc.AuthnSessionManager

+ AuthnSessionTimeoutSecs int

+ ClaimTypes []goidc.ClaimType

+ Claims []string

+ ClaimsParamIsEnabled bool

+ ClientAuthnMethods []goidc.ClientAuthnType

+ ClientCertFunc goidc.ClientCertFunc

+ ClientManager goidc.ClientManager

+ ClientSecretJWTSigAlgs []jose.SignatureAlgorithm

+ DCRIsEnabled bool

+ DCRTokenRotationIsEnabled bool

+ DPoPIsEnabled bool

+ DPoPIsRequired bool

+ DPoPLifetimeSecs int

+ DPoPSigAlgs []jose.SignatureAlgorithm

+ DisplayValues []goidc.DisplayValue

+ EndpointAuthorize string

+ EndpointDCR string

+ EndpointIntrospection string

+ EndpointJWKS string

+ EndpointPrefix string

+ EndpointPushedAuthorization string

+ EndpointToken string

+ EndpointUserInfo string

+ EndpointWellKnown string

+ GrantSessionManager goidc.GrantSessionManager

+ GrantTypes []goidc.GrantType

+ HandleDynamicClientFunc goidc.HandleDynamicClientFunc

+ Host string

+ IDTokenLifetimeSecs int

+ IntrospectionClientAuthnMethods []goidc.ClientAuthnType

+ IntrospectionIsEnabled bool

+ IssuerRespParamIsEnabled bool

+ JARContentEncAlgs []jose.ContentEncryption

+ JARDefaultContentEncAlg jose.ContentEncryption

+ JAREncIsEnabled bool

+ JARIsEnabled bool

+ JARIsRequired bool

+ JARKeyEncIDs []string

+ JARLifetimeSecs int

+ JARMContentEncAlgs []jose.ContentEncryption

+ JARMDefaultContentEncAlg jose.ContentEncryption

+ JARMDefaultSigKeyID string

+ JARMEncIsEnabled bool

+ JARMIsEnabled bool

+ JARMKeyEncAlgs []jose.KeyAlgorithm

+ JARMLifetimeSecs int

+ JARMSigKeyIDs []string

+ JARSigAlgs []jose.SignatureAlgorithm

+ MTLSHost string

+ MTLSIsEnabled bool

+ MTLSTokenBindingIsEnabled bool

+ OpenIDIsRequired bool

+ OutterAuthParamsRequired bool

+ PARAllowUnregisteredRedirectURI bool

+ PARIsEnabled bool

+ PARIsRequired bool

+ PARLifetimeSecs int

+ PKCEChallengeMethods []goidc.CodeChallengeMethod

+ PKCEDefaultChallengeMethod goidc.CodeChallengeMethod

+ PKCEIsEnabled bool

+ PKCEIsRequired bool

+ Policies []goidc.AuthnPolicy

+ PrivateJWKS jose.JSONWebKeySet

+ PrivateKeyJWTSigAlgs []jose.SignatureAlgorithm

+ Profile goidc.Profile

+ RefreshTokenLifetimeSecs int

+ RefreshTokenRotationIsEnabled bool

+ RenderErrorFunc goidc.RenderErrorFunc

+ ResourceIndicatorsIsEnabled bool

+ ResourceIndicatorsIsRequired bool

+ Resources []string

+ ResponseModes []goidc.ResponseMode

+ ResponseTypes []goidc.ResponseType

+ Scopes []goidc.Scope

+ StaticClients []*goidc.Client

+ SubIdentifierTypes []goidc.SubjectIdentifierType

+ TokenBindingIsRequired bool

+ TokenOptionsFunc goidc.TokenOptionsFunc

+ UserContentEncAlg []jose.ContentEncryption

+ UserDefaultContentEncAlg jose.ContentEncryption

+ UserDefaultSigKeyID string

+ UserEncIsEnabled bool

+ UserKeyEncAlgs []jose.KeyAlgorithm

+ UserSigKeyIDs []string

+ type Context struct

+ Request *http.Request

+ Response http.ResponseWriter

+ func NewContext(w http.ResponseWriter, r *http.Request, config Configuration) *Context

+ func (ctx *Context) Audiences() []string

+ func (ctx *Context) AuthnSessionByAuthorizationCode(code string) (*goidc.AuthnSession, error)

+ func (ctx *Context) AuthnSessionByCallbackID(id string) (*goidc.AuthnSession, error)

+ func (ctx *Context) AuthnSessionByRequestURI(uri string) (*goidc.AuthnSession, error)

+ func (ctx *Context) AuthorizationToken() (token string, tokenType goidc.TokenType, ok bool)

+ func (ctx *Context) AvailablePolicy(client *goidc.Client, session *goidc.AuthnSession) (policy goidc.AuthnPolicy, ok bool)

+ func (ctx *Context) BaseURL() string

+ func (ctx *Context) BearerToken() (string, bool)

+ func (ctx *Context) Client(clientID string) (*goidc.Client, error)

+ func (ctx *Context) ClientAuthnSigAlgs() []jose.SignatureAlgorithm

+ func (ctx *Context) ClientCert() (*x509.Certificate, bool)

+ func (ctx *Context) Deadline() (deadline time.Time, ok bool)

+ func (ctx *Context) DeleteAuthnSession(id string) error

+ func (ctx *Context) DeleteClient(id string) error

+ func (ctx *Context) DeleteGrantSession(id string) error

+ func (ctx *Context) Done() <-chan struct{}

+ func (ctx *Context) Err() error

+ func (ctx *Context) FormData() map[string]any

+ func (ctx *Context) FormParam(param string) string

+ func (ctx *Context) GrantSessionByRefreshToken(token string) (*goidc.GrantSession, error)

+ func (ctx *Context) GrantSessionByTokenID(id string) (*goidc.GrantSession, error)

+ func (ctx *Context) HandleDynamicClient(c *goidc.ClientMetaInfo) error

+ func (ctx *Context) Header(name string) (string, bool)

+ func (ctx *Context) IDTokenSigKey(client *goidc.Client) jose.JSONWebKey

+ func (ctx *Context) IntrospectionClientAuthnSigAlgs() []jose.SignatureAlgorithm

+ func (ctx *Context) JARKeyEncAlgs() []jose.KeyAlgorithm

+ func (ctx *Context) JARMSigAlgs() []jose.SignatureAlgorithm

+ func (ctx *Context) JARMSigKey(client *goidc.Client) jose.JSONWebKey

+ func (ctx *Context) MTLSBaseURL() string

+ func (ctx *Context) Policy(id string) goidc.AuthnPolicy

+ func (ctx *Context) PrivateKey(keyID string) (jose.JSONWebKey, bool)

+ func (ctx *Context) PublicKey(keyID string) (jose.JSONWebKey, bool)

+ func (ctx *Context) PublicKeys() jose.JSONWebKeySet

+ func (ctx *Context) Redirect(redirectURL string)

+ func (ctx *Context) RenderError(err error) error

+ func (ctx *Context) RenderHTML(html string, params any) error

+ func (ctx *Context) RequestMethod() string

+ func (ctx *Context) SaveAuthnSession(session *goidc.AuthnSession) error

+ func (ctx *Context) SaveClient(client *goidc.Client) error

+ func (ctx *Context) SaveGrantSession(session *goidc.GrantSession) error

+ func (ctx *Context) SigAlgs() []jose.SignatureAlgorithm

+ func (ctx *Context) TokenOptions(client *goidc.Client, scopes string) (goidc.TokenOptions, error)

+ func (ctx *Context) TokenSigKey(tokenOptions goidc.TokenOptions) jose.JSONWebKey

+ func (ctx *Context) UserInfoSigAlgs() []jose.SignatureAlgorithm

+ func (ctx *Context) UserInfoSigKey(client *goidc.Client) jose.JSONWebKey

+ func (ctx *Context) Value(key any) any

+ func (ctx *Context) Write(obj any, status int) error

+ func (ctx *Context) WriteError(err error)

+ func (ctx *Context) WriteJWT(token string, status int) error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL