Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

jwt

package

Go to main page

Versions in this module

v2

v2.5.7

May 9, 2024

v2.5.6

Apr 18, 2024

v2.5.5

Feb 22, 2024

v2.5.4

Feb 15, 2024

v2.5.3

Oct 31, 2023

v2.5.2

Sep 18, 2023

v2.5.1

Aug 21, 2023

v2.5.0

Aug 21, 2023

v2.4.1

Mar 24, 2023

v2.4.0

Mar 16, 2023

Changes in this version

+ const AccountClaim

+ const ActivationClaim

+ const AlgorithmNkey

+ const All

+ const ClusterClaim

+ const NoLimit

+ const OperatorClaim

+ const ResponseTypeChunked

+ const ResponseTypeSingleton

+ const ResponseTypeStream

+ const ServerClaim

+ const TokenTypeJwt

+ const UserClaim

+ const Version

+ func Decode(token string, target Claims) error

+ func DecorateJWT(jwtString string) ([]byte, error)

+ func DecorateSeed(seed []byte) ([]byte, error)

+ func FormatUserConfig(jwtString string, seed []byte) ([]byte, error)

+ func ParseDecoratedJWT(contents []byte) (string, error)

+ func ParseDecoratedNKey(contents []byte) (nkeys.KeyPair, error)

+ func ParseDecoratedUserNKey(contents []byte) (nkeys.KeyPair, error)

+ func ValidateOperatorServiceURL(v string) error

+ type Account struct

+ Exports Exports

+ Identities []Identity

+ Imports Imports

+ Limits OperatorLimits

+ Revocations RevocationList

+ SigningKeys StringList

+ func (a *Account) Validate(acct *AccountClaims, vr *ValidationResults)

+ type AccountClaims struct

+ func DecodeAccountClaims(token string) (*AccountClaims, error)

+ func NewAccountClaims(subject string) *AccountClaims

+ func (a *AccountClaims) Claims() *ClaimsData

+ func (a *AccountClaims) ClearRevocation(pubKey string)

+ func (a *AccountClaims) DidSign(c Claims) bool

+ func (a *AccountClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (a *AccountClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (a *AccountClaims) IsClaimRevoked(claim *UserClaims) bool

+ func (a *AccountClaims) IsRevoked(_ string) bool

+ func (a *AccountClaims) IsRevokedAt(pubKey string, timestamp time.Time) bool

+ func (a *AccountClaims) Payload() interface{}

+ func (a *AccountClaims) Revoke(pubKey string)

+ func (a *AccountClaims) RevokeAt(pubKey string, timestamp time.Time)

+ func (a *AccountClaims) String() string

+ func (a *AccountClaims) Validate(vr *ValidationResults)

+ type Activation struct

+ ImportSubject Subject

+ ImportType ExportType

+ func (a *Activation) IsService() bool

+ func (a *Activation) IsStream() bool

+ func (a *Activation) Validate(vr *ValidationResults)

+ type ActivationClaims struct

+ IssuerAccount string

+ func DecodeActivationClaims(token string) (*ActivationClaims, error)

+ func NewActivationClaims(subject string) *ActivationClaims

+ func (a *ActivationClaims) Claims() *ClaimsData

+ func (a *ActivationClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (a *ActivationClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (a *ActivationClaims) HashID() (string, error)

+ func (a *ActivationClaims) Payload() interface{}

+ func (a *ActivationClaims) String() string

+ func (a *ActivationClaims) Validate(vr *ValidationResults)

+ type ClaimType string

+ type Claims interface

+ Claims func() *ClaimsData

+ Encode func(kp nkeys.KeyPair) (string, error)

+ ExpectedPrefixes func() []nkeys.PrefixByte

+ Payload func() interface{}

+ String func() string

+ Validate func(vr *ValidationResults)

+ Verify func(payload string, sig []byte) bool

+ type ClaimsData struct

+ Audience string

+ Expires int64

+ ID string

+ IssuedAt int64

+ Issuer string

+ Name string

+ NotBefore int64

+ Subject string

+ Tags TagList

+ Type ClaimType

+ func (c *ClaimsData) Encode(kp nkeys.KeyPair, payload Claims) (string, error)

+ func (c *ClaimsData) IsSelfSigned() bool

+ func (c *ClaimsData) String(claim interface{}) string

+ func (c *ClaimsData) Validate(vr *ValidationResults)

+ func (c *ClaimsData) Verify(payload string, sig []byte) bool

+ type Cluster struct

+ AccountURL string

+ Accounts []string

+ OperatorURL string

+ Trust []string

+ func (c *Cluster) Validate(vr *ValidationResults)

+ type ClusterClaims struct

+ func DecodeClusterClaims(token string) (*ClusterClaims, error)

+ func NewClusterClaims(subject string) *ClusterClaims

+ func (c *ClusterClaims) Claims() *ClaimsData

+ func (c *ClusterClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (c *ClusterClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (c *ClusterClaims) Payload() interface{}

+ func (c *ClusterClaims) String() string

+ func (c *ClusterClaims) Validate(vr *ValidationResults)

+ type Export struct

+ AccountTokenPosition uint

+ Latency *ServiceLatency

+ Name string

+ ResponseType ResponseType

+ Revocations RevocationList

+ Subject Subject

+ TokenReq bool

+ Type ExportType

+ func (e *Export) ClearRevocation(pubKey string)

+ func (e *Export) IsChunkedResponse() bool

+ func (e *Export) IsRevoked(_ string) bool

+ func (e *Export) IsRevokedAt(pubKey string, timestamp time.Time) bool

+ func (e *Export) IsService() bool

+ func (e *Export) IsSingleResponse() bool

+ func (e *Export) IsStream() bool

+ func (e *Export) IsStreamResponse() bool

+ func (e *Export) Revoke(pubKey string)

+ func (e *Export) RevokeAt(pubKey string, timestamp time.Time)

+ func (e *Export) Validate(vr *ValidationResults)

+ type ExportType int

+ const Service

+ const Stream

+ const Unknown

+ func (t *ExportType) MarshalJSON() ([]byte, error)

+ func (t *ExportType) UnmarshalJSON(b []byte) error

+ func (t ExportType) String() string

+ type Exports []*Export

+ func (e *Exports) Add(i ...*Export)

+ func (e *Exports) HasExportContainingSubject(subject Subject) bool

+ func (e *Exports) Validate(vr *ValidationResults) error

+ func (e Exports) Len() int

+ func (e Exports) Less(i, j int) bool

+ func (e Exports) Swap(i, j int)

+ type GenericClaims struct

+ Data map[string]interface{}

+ func DecodeGeneric(token string) (*GenericClaims, error)

+ func NewGenericClaims(subject string) *GenericClaims

+ func (gc *GenericClaims) Claims() *ClaimsData

+ func (gc *GenericClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (gc *GenericClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (gc *GenericClaims) Payload() interface{}

+ func (gc *GenericClaims) String() string

+ func (gc *GenericClaims) Validate(vr *ValidationResults)

+ type Header struct

+ Algorithm string

+ Type string

+ func (h *Header) Valid() error

+ type Identity struct

+ ID string

+ Proof string

+ func (u *Identity) Validate(vr *ValidationResults)

+ type Import struct

+ Account string

+ Name string

+ Subject Subject

+ To Subject

+ Token string

+ Type ExportType

+ func (i *Import) IsService() bool

+ func (i *Import) IsStream() bool

+ func (i *Import) Validate(actPubKey string, vr *ValidationResults)

+ type Imports []*Import

+ func (i *Imports) Add(a ...*Import)

+ func (i *Imports) Validate(acctPubKey string, vr *ValidationResults)

+ func (i Imports) Len() int

+ func (i Imports) Less(j, k int) bool

+ func (i Imports) Swap(j, k int)

+ type Limits struct

+ Max int64

+ Payload int64

+ Src string

+ Times []TimeRange

+ func (l *Limits) Validate(vr *ValidationResults)

+ type NamedSubject struct

+ Name string

+ Subject Subject

+ func (ns *NamedSubject) Validate(vr *ValidationResults)

+ type Operator struct

+ AccountServerURL string

+ Identities []Identity

+ OperatorServiceURLs StringList

+ SigningKeys StringList

+ SystemAccount string

+ func (o *Operator) Validate(vr *ValidationResults)

+ type OperatorClaims struct

+ func DecodeOperatorClaims(token string) (*OperatorClaims, error)

+ func NewOperatorClaims(subject string) *OperatorClaims

+ func (oc *OperatorClaims) AddSigningKey(pk string)

+ func (oc *OperatorClaims) Claims() *ClaimsData

+ func (oc *OperatorClaims) DidSign(op Claims) bool

+ func (oc *OperatorClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (oc *OperatorClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (oc *OperatorClaims) Payload() interface{}

+ func (oc *OperatorClaims) String() string

+ func (oc *OperatorClaims) Validate(vr *ValidationResults)

+ type OperatorLimits struct

+ Conn int64

+ Data int64

+ Exports int64

+ Imports int64

+ LeafNodeConn int64

+ Payload int64

+ Subs int64

+ WildcardExports bool

+ func (o *OperatorLimits) IsEmpty() bool

+ func (o *OperatorLimits) IsUnlimited() bool

+ func (o *OperatorLimits) Validate(vr *ValidationResults)

+ type Permission struct

+ Allow StringList

+ Deny StringList

+ func (p *Permission) Validate(vr *ValidationResults)

+ type Permissions struct

+ Pub Permission

+ Resp *ResponsePermission

+ Sub Permission

+ func (p *Permissions) Validate(vr *ValidationResults)

+ type Prefix struct

+ type ResponsePermission struct

+ Expires time.Duration

+ MaxMsgs int

+ func (p *ResponsePermission) Validate(vr *ValidationResults)

+ type ResponseType string

+ type RevocationList map[string]int64

+ func (r RevocationList) ClearRevocation(pubKey string)

+ func (r RevocationList) IsRevoked(pubKey string, timestamp time.Time) bool

+ func (r RevocationList) Revoke(pubKey string, timestamp time.Time)

+ type Server struct

+ Cluster string

+ func (s *Server) Validate(vr *ValidationResults)

+ type ServerClaims struct

+ func DecodeServerClaims(token string) (*ServerClaims, error)

+ func NewServerClaims(subject string) *ServerClaims

+ func (s *ServerClaims) Claims() *ClaimsData

+ func (s *ServerClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (s *ServerClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (s *ServerClaims) Payload() interface{}

+ func (s *ServerClaims) String() string

+ func (s *ServerClaims) Validate(vr *ValidationResults)

+ type ServiceLatency struct

+ Results Subject

+ Sampling int

+ func (sl *ServiceLatency) Validate(vr *ValidationResults)

+ type StringList []string

+ func (u *StringList) Add(p ...string)

+ func (u *StringList) Contains(p string) bool

+ func (u *StringList) Remove(p ...string)

+ type Subject string

+ func (s Subject) HasWildCards() bool

+ func (s Subject) IsContainedIn(other Subject) bool

+ func (s Subject) Validate(vr *ValidationResults)

+ type TagList []string

+ func (u *TagList) Add(p ...string)

+ func (u *TagList) Contains(p string) bool

+ func (u *TagList) Remove(p ...string)

+ type TimeRange struct

+ End string

+ Start string

+ func (tr *TimeRange) Validate(vr *ValidationResults)

+ type User struct

+ BearerToken bool

+ func (u *User) Validate(vr *ValidationResults)

+ type UserClaims struct

+ IssuerAccount string

+ func DecodeUserClaims(token string) (*UserClaims, error)

+ func NewUserClaims(subject string) *UserClaims

+ func (u *UserClaims) Claims() *ClaimsData

+ func (u *UserClaims) Encode(pair nkeys.KeyPair) (string, error)

+ func (u *UserClaims) ExpectedPrefixes() []nkeys.PrefixByte

+ func (u *UserClaims) IsBearerToken() bool

+ func (u *UserClaims) Payload() interface{}

+ func (u *UserClaims) String() string

+ func (u *UserClaims) Validate(vr *ValidationResults)

+ type ValidationIssue struct

+ Blocking bool

+ Description string

+ TimeCheck bool

+ func (ve *ValidationIssue) Error() string

+ type ValidationResults struct

+ Issues []*ValidationIssue

+ func CreateValidationResults() *ValidationResults

+ func (v *ValidationResults) Add(vi *ValidationIssue)

+ func (v *ValidationResults) AddError(format string, args ...interface{})

+ func (v *ValidationResults) AddTimeCheck(format string, args ...interface{})

+ func (v *ValidationResults) AddWarning(format string, args ...interface{})

+ func (v *ValidationResults) Errors() []error

+ func (v *ValidationResults) IsBlocking(includeTimeChecks bool) bool

+ func (v *ValidationResults) IsEmpty() bool

+ func (v *ValidationResults) Warnings() []string