clientutil

Documentation

Index

• Variables
• func AreScopesAllowed(c *goidc.Client, availableScopes []goidc.Scope, requestedScopes string) bool
• func Authenticated(ctx oidc.Context, authnCtx AuthnContext) (*goidc.Client, error)
• func JWKByAlg(ctx oidc.Context, c *goidc.Client, alg string) (goidc.JSONWebKey, error)
• func JWKByKeyID(ctx oidc.Context, c *goidc.Client, keyID string) (goidc.JSONWebKey, error)
• func JWKMatchingHeader(ctx oidc.Context, c *goidc.Client, header jose.Header) (goidc.JSONWebKey, error)
• type AuthnContext

Variables

var ErrClientNotIdentified = goidc.NewError(goidc.ErrorCodeInvalidClient,
	"could not identify the client")

Functions

func AreScopesAllowed

func AreScopesAllowed(
	c *goidc.Client,
	availableScopes []goidc.Scope,
	requestedScopes string,
) bool

func Authenticated

func Authenticated(
	ctx oidc.Context,
	authnCtx AuthnContext,
) (
	*goidc.Client,
	error,
)

Authenticated fetches a client associated to the request and returns it if the client is authenticated according to its authentication method. This function always returns in case of error an instance of goidc.Error with error code as goidc.ErrorCodeInvalidClient.

func JWKByAlg

func JWKByAlg(ctx oidc.Context, c *goidc.Client, alg string) (goidc.JSONWebKey, error)

JWKByAlg returns a client JWK based on the algorithm.

func JWKByKeyID

func JWKByKeyID(ctx oidc.Context, c *goidc.Client, keyID string) (goidc.JSONWebKey, error)

func JWKMatchingHeader

func JWKMatchingHeader(
	ctx oidc.Context,
	c *goidc.Client,
	header jose.Header,
) (
	goidc.JSONWebKey,
	error,
)

Types

type AuthnContext

type AuthnContext string

const (
	TokenAuthnContext              AuthnContext = "token"
	TokenIntrospectionAuthnContext AuthnContext = "token_introspection"
	TokenRevocationAuthnContext    AuthnContext = "token_revocation"
)