username

Documentation

Index

• func MarshalSANS(name string, critical bool) (*pkix.Extension, error)
• func PrincipalFromIDToken(ctx context.Context, token *oidc.IDToken) (identity.Principal, error)
• func UnmarshalSANS(exts []pkix.Extension) (string, error)
• type OtherName

Functions

func MarshalSANS

func MarshalSANS(name string, critical bool) (*pkix.Extension, error)

MarshalSANS creates a Subject Alternative Name extension with an OtherName sequence. RFC 5280, 4.2.1.6:

SubjectAltName ::= GeneralNames GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName GeneralName ::= CHOICE {

otherName                       [0]     OtherName,
... }

func PrincipalFromIDToken

func PrincipalFromIDToken(ctx context.Context, token *oidc.IDToken) (identity.Principal, error)

func UnmarshalSANS

func UnmarshalSANS(exts []pkix.Extension) (string, error)

UnmarshalSANs extracts a UTF-8 string from the OtherName field in the Subject Alternative Name extension.

Types

type OtherName

type OtherName struct {
	ID    asn1.ObjectIdentifier
	Value string `asn1:"utf8,explicit,tag:0"`
}

OtherName describes a name related to a certificate which is not in one of the standard name formats. RFC 5280, 4.2.1.6:

OtherName ::= SEQUENCE {
     type-id    OBJECT IDENTIFIER,
     value      [0] EXPLICIT ANY DEFINED BY type-id }

OtherName for Fulcio-issued certificates only supports UTF-8 strings as values.