config

May 4, 2022

Changes in this version

+ const HsmKeySetPrefix

type Provider

+ func (p *Provider) HsmKeySetPrefix() string

Jan 21, 2022

Changes in this version

+ const HsmEnabled

+ const HsmLibraryPath

+ const HsmPin

+ const HsmSlotNumber

+ const HsmTokenLabel

+ const KeyOAuth2GrantJWTIDOptional

+ const KeyOAuth2GrantJWTIssuedDateOptional

+ const KeyOAuth2GrantJWTMaxDuration

+ const KeyPublicAllowDynamicRegistration

type Provider

+ func (p *Provider) GrantTypeJWTBearerIDOptional() bool

+ func (p *Provider) GrantTypeJWTBearerIssuedDateOptional() bool

+ func (p *Provider) GrantTypeJWTBearerMaxDuration() time.Duration

+ func (p *Provider) HsmEnabled() bool

+ func (p *Provider) HsmLibraryPath() string

+ func (p *Provider) HsmPin() string

+ func (p *Provider) HsmSlotNumber() *int

+ func (p *Provider) HsmTokenLabel() string

+ func (p *Provider) PublicAllowDynamicRegistration() bool

Oct 27, 2021

Changes in this version

+ const KeyRefreshTokenHookURL

type Provider

+ func (p *Provider) TokenRefreshHookURL() *url.URL

Jul 14, 2021

Changes in this version

+ const KeyAllowedTopLevelClaims

type Provider

+ func (p *Provider) AllowedTopLevelClaims() []string

May 4, 2021

Changes in this version

+ const KeyExcludeNotBeforeClaim

+ const KeyRoot

+ const KeySuffixDisableHealthAccessLog

+ const KeySuffixListenOnHost

+ const KeySuffixListenOnPort

+ const KeySuffixSocketGroup

+ const KeySuffixSocketMode

+ const KeySuffixSocketOwner

+ const KeySuffixTLSAllowTerminationFrom

+ const KeySuffixTLSCertPath

+ const KeySuffixTLSCertString

+ const KeySuffixTLSEnabled

+ const KeySuffixTLSKeyPath

+ const KeySuffixTLSKeyString

+ const KeyTLSAllowTerminationFrom

+ const KeyTLSCertPath

+ const KeyTLSCertString

+ const KeyTLSKeyPath

+ const KeyTLSKeyString

type Provider

+ func (p *Provider) DisableHealthAccessLog(iface ServeInterface) bool

+ func (p *Provider) ExcludeNotBeforeClaim() bool

+ func (p *Provider) ListenOn(iface ServeInterface) string

+ func (p *Provider) SocketPermission(iface ServeInterface) *configx.UnixPermission

+ func (p *Provider) TLS(iface ServeInterface) TLSConfig

+ type ServeInterface interface

+ Key func(suffix string) string

+ var AdminInterface ServeInterface = &servePrefix{ ... }

+ var PublicInterface ServeInterface = &servePrefix{ ... }

+ type TLSConfig interface

+ AllowTerminationFrom func() []string

+ Certificate func() ([]tls.Certificate, error)

+ Enabled func() bool

Jan 12, 2021

Changes in this version

+ const DSNMemory

+ const KeyAccessTokenLifespan

+ const KeyAccessTokenStrategy

+ const KeyAdminDisableHealthAccessLog

+ const KeyAdminListenOnHost

+ const KeyAdminListenOnPort

+ const KeyAdminSocketGroup

+ const KeyAdminSocketMode

+ const KeyAdminSocketOwner

+ const KeyAllowTLSTerminationFrom

+ const KeyAuthCodeLifespan

+ const KeyBCryptCost

+ const KeyCGroupsV1AutoMaxProcsEnabled

+ const KeyConsentRequestMaxAge

+ const KeyConsentURL

+ const KeyCookieSameSiteLegacyWorkaround

+ const KeyCookieSameSiteMode

+ const KeyDSN

+ const KeyDefaultClientScope

+ const KeyEncryptSessionData

+ const KeyErrorURL

+ const KeyExposeOAuth2Debug

+ const KeyGetCookieSecrets

+ const KeyGetSystemSecret

+ const KeyGrantAllClientCredentialsScopesPerDefault

+ const KeyIDTokenLifespan

+ const KeyIssuerURL

+ const KeyJWKSURL

+ const KeyLogLevel

+ const KeyLoginURL

+ const KeyLogoutRedirectURL

+ const KeyLogoutURL

+ const KeyOAuth2AuthURL

+ const KeyOAuth2ClientRegistrationURL

+ const KeyOAuth2LegacyErrors

+ const KeyOAuth2TokenURL

+ const KeyOIDCDiscoverySupportedClaims

+ const KeyOIDCDiscoverySupportedScope

+ const KeyOIDCDiscoveryUserinfoEndpoint

+ const KeyPKCEEnforced

+ const KeyPKCEEnforcedForPublicClients

+ const KeyPublicDisableHealthAccessLog

+ const KeyPublicListenOnHost

+ const KeyPublicListenOnPort

+ const KeyPublicSocketGroup

+ const KeyPublicSocketMode

+ const KeyPublicSocketOwner

+ const KeyPublicURL

+ const KeyRefreshTokenLifespan

+ const KeyScopeStrategy

+ const KeySubjectIdentifierAlgorithmSalt

+ const KeySubjectTypesSupported

+ const KeyWellKnownKeys

+ var Commit = "undefined"

+ var Date = "undefined"

+ var Version = "master"

+ func MustValidate(l *logrusx.Logger, p *Provider)

+ type Provider struct

+ func MustNew(l *logrusx.Logger, opts ...configx.OptionModifier) *Provider

+ func New(l *logrusx.Logger, opts ...configx.OptionModifier) (*Provider, error)

+ func (p *Provider) AccessTokenLifespan() time.Duration

+ func (p *Provider) AccessTokenStrategy() string

+ func (p *Provider) AdminCORS() (cors.Options, bool)

+ func (p *Provider) AdminDisableHealthAccessLog() bool

+ func (p *Provider) AdminListenOn() string

+ func (p *Provider) AdminSocketPermission() *UnixPermission

+ func (p *Provider) AllowTLSTerminationFrom() []string

+ func (p *Provider) AuthCodeLifespan() time.Duration

+ func (p *Provider) BCryptCost() int

+ func (p *Provider) CGroupsV1AutoMaxProcsEnabled() bool

+ func (p *Provider) CORS(iface string) (cors.Options, bool)

+ func (p *Provider) ConsentRequestMaxAge() time.Duration

+ func (p *Provider) ConsentURL() *url.URL

+ func (p *Provider) CookieSameSiteLegacyWorkaround() bool

+ func (p *Provider) CookieSameSiteMode() http.SameSite

+ func (p *Provider) DSN() string

+ func (p *Provider) DataSourcePlugin() string

+ func (p *Provider) DefaultClientScope() []string

+ func (p *Provider) EncryptSessionData() bool

+ func (p *Provider) EnforcePKCEForPublicClients() bool

+ func (p *Provider) ErrorURL() *url.URL

+ func (p *Provider) GetCookieSecrets() [][]byte

+ func (p *Provider) GetRotatedSystemSecrets() [][]byte

+ func (p *Provider) GetSystemSecret() []byte

+ func (p *Provider) GrantAllClientCredentialsScopesPerDefault() bool

+ func (p *Provider) IDTokenLifespan() time.Duration

+ func (p *Provider) InsecureRedirects() []string

+ func (p *Provider) IsUsingJWTAsAccessTokens() bool

+ func (p *Provider) IssuerURL() *url.URL

+ func (p *Provider) JWKSURL() *url.URL

+ func (p *Provider) LoginURL() *url.URL

+ func (p *Provider) LogoutRedirectURL() *url.URL

+ func (p *Provider) LogoutURL() *url.URL

+ func (p *Provider) MustSet(key string, value interface{})

+ func (p *Provider) OAuth2AuthURL() *url.URL

+ func (p *Provider) OAuth2ClientRegistrationURL() *url.URL

+ func (p *Provider) OAuth2LegacyErrors() bool

+ func (p *Provider) OAuth2TokenURL() *url.URL

+ func (p *Provider) OIDCDiscoverySupportedClaims() []string

+ func (p *Provider) OIDCDiscoverySupportedScope() []string

+ func (p *Provider) OIDCDiscoveryUserinfoEndpoint() *url.URL

+ func (p *Provider) PKCEEnforced() bool

+ func (p *Provider) PublicCORS() (cors.Options, bool)

+ func (p *Provider) PublicDisableHealthAccessLog() bool

+ func (p *Provider) PublicListenOn() string

+ func (p *Provider) PublicSocketPermission() *UnixPermission

+ func (p *Provider) PublicURL() *url.URL

+ func (p *Provider) RefreshTokenLifespan() time.Duration

+ func (p *Provider) ScopeStrategy() string

+ func (p *Provider) ServesHTTPS() bool

+ func (p *Provider) Set(key string, value interface{}) error

+ func (p *Provider) ShareOAuth2Debug() bool

+ func (p *Provider) Source() *configx.Provider

+ func (p *Provider) SubjectIdentifierAlgorithmSalt() string

+ func (p *Provider) SubjectTypesSupported() []string

+ func (p *Provider) Tracing() *tracing.Config

+ func (p *Provider) WellKnownKeys(include ...string) []string

+ type UnixPermission struct

+ Group string

+ Mode os.FileMode

+ Owner string

+ func (p *UnixPermission) SetPermission(file string) error