Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

role

package

Go to main page

Versions in this module

v2

v2.2.0

Apr 8, 2020

Changes in this version

+ const CONFIRM_METHOD_MEMBER

+ type BaseClaim struct

+ func (c *BaseClaim) Valid() error

type Option

+ func WithClientCertificateGoBackSeconds(t string) Option

+ func WithClientCertificateOffsetSeconds(t string) Option

+ func WithEnableMTLSCertificateBoundAccessToken(b bool) Option

type Processor

+ ParseAndValidateZTSAccessToken func(cred string, cert *x509.Certificate) (*ZTSAccessTokenClaim, error)

+ type RoleJWTClaim struct

+ Domain string

+ Email string

+ KeyID string

+ MFA string

+ Role string

+ Salt string

+ UserID string

+ UserName string

+ Version string

+ type ZTSAccessTokenClaim struct

+ AuthTime int64

+ ClientID string

+ Confirm map[string]string

+ ProxyPrincipal string

+ Scope []string

+ UserID string

+ Version int

v2.1.2

Nov 14, 2019

v2.1.1

Oct 8, 2019

v2.1.0

Sep 5, 2019

v2.0.5

Aug 30, 2019

v2.0.4

Aug 20, 2019

Changes in this version

+ var ErrRoleTokenExpired = errors.New("Access denied due to expired RoleToken")

+ var ErrRoleTokenInvalid = errors.New("Access denied due to invalid RoleToken")

+ type Claim struct

+ Domain string

+ Email string

+ KeyID string

+ MFA string

+ Role string

+ Salt string

+ UserID string

+ UserName string

+ Version string

+ func (c *Claim) Valid() error

+ type Option func(*rtp)

+ func WithJWKProvider(jwkp jwk.Provider) Option

+ func WithPubkeyProvider(pkp pubkey.Provider) Option

+ type Processor interface

+ ParseAndValidateRoleJWT func(cred string) (*Claim, error)

+ ParseAndValidateRoleToken func(tok string) (*Token, error)

+ func New(opts ...Option) Processor

+ type Token struct

+ Domain string

+ ExpiryTime time.Time

+ KeyID string

+ Roles []string

+ Signature string

+ UnsignedToken string

+ func (r *Token) Expired() bool

+ func (r *Token) SetParams(key, value string) error

Other modules containing this package

github.com/yahoojapan/athenz-authorizer/v3

github.com/yahoojapan/athenz-authorizer/v4

github.com/yahoojapan/athenz-authorizer/v5