keycloak

Documentation

Overview

Package keycloak verifies tokens issued by the Keycloak identity server.

Index

• func NewOIDCTokenValidator(cfg Config) token.Validator
• func NewTokenValidator(config *Config, keySet jwks.KeySet) token.Validator
• type Config
  • func (c *Config) Issuer() string

Functions

func NewOIDCTokenValidator

func NewOIDCTokenValidator(cfg Config) token.Validator

NewOIDCTokenValidator returns a token.Validator like NewTokenValidator using well known OIDC configuration for available keys.

func NewTokenValidator

func NewTokenValidator(config *Config, keySet jwks.KeySet) token.Validator

NewTokenValidator returns a token.Validator that validates tokens against the given jwks.KeySet which should be hosted by Keycloak. During validation known Keycloak claims are validated, converted into token.Claims, and returned.

Types

type Config

type Config struct {
	URL      string `json:"url,omitempty"` // Root URL of Keycloak server
	Realm    string `json:"realm,omitempty"`
	ClientID string `json:"clientId,omitempty"`
}

func (*Config) Issuer

func (c *Config) Issuer() string