oauth

Aug 12, 2024

Changes in this version

+ var ErrIntrospectionFailed = errors.New("token introspection failed")

+ var ErrInvalidAuthorizationHeader = errors.New("invalid authorization header, must be prefixed with `Bearer`")

+ func DefaultAuthorization(path string) authorization.VerifierInitializer[*IntrospectionContext]

+ func WithIntrospection[T authorization.Ctx](auth IntrospectionAuthentication) authorization.VerifierInitializer[T]

+ type IntrospectionAuthentication func(ctx context.Context, issuer string) (rs.ResourceServer, error)

+ func ClientIDSecretIntrospectionAuthentication(clientID, clientSecret string) IntrospectionAuthentication

+ func JWTProfileIntrospectionAuthentication(file *client.KeyFile) IntrospectionAuthentication

+ type IntrospectionContext struct

+ func (c *IntrospectionContext) GetToken() string

+ func (c *IntrospectionContext) IsAuthorized() bool

+ func (c *IntrospectionContext) IsGrantedRole(role string) bool

+ func (c *IntrospectionContext) IsGrantedRoleInOrganization(role, organizationID string) bool

+ func (c *IntrospectionContext) SetToken(token string)

+ func (c *IntrospectionContext) UserID() string

+ type IntrospectionVerification struct

+ func (i *IntrospectionVerification[T]) CheckAuthorization(ctx context.Context, authorizationToken string) (resp T, err error)