oidctestutil

package
v0.33.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 7, 2024 License: Apache-2.0 Imports: 38 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func FilterClientSecretCreateActions added in v0.20.0

func FilterClientSecretCreateActions(actions []kubetesting.Action) []kubetesting.Action

FilterClientSecretCreateActions ignores any reads made to get a storage secret corresponding to an OIDCClient, since these are normal actions when the request is using a dynamic client's client_id, and we don't need to make assertions about these Secrets since they are not related to session storage.

func RequireAuthCodeRegexpMatch added in v0.10.0

func RequireAuthCodeRegexpMatch(
	t *testing.T,
	actualContent string,
	wantRegexp string,
	kubeClient *fake.Clientset,
	secretsClient v1.SecretInterface,
	oauthStore fositestoragei.AllFositeStorage,
	wantDownstreamGrantedScopes []string,
	wantDownstreamIDTokenSubject string,
	wantDownstreamIDTokenUsername string,
	wantDownstreamIDTokenGroups []string,
	wantDownstreamRequestedScopes []string,
	wantDownstreamPKCEChallenge string,
	wantDownstreamPKCEChallengeMethod string,
	wantDownstreamNonce string,
	wantDownstreamClientID string,
	wantDownstreamRedirectURI string,
	wantCustomSessionData *psession.CustomSessionData,
	wantDownstreamAdditionalClaims map[string]any,
)

func VerifyECDSAIDToken

func VerifyECDSAIDToken(
	t *testing.T,
	issuer, clientID string,
	jwtSigningKey *ecdsa.PrivateKey,
	idToken string,
) *coreosoidc.IDToken

VerifyECDSAIDToken verifies that the provided idToken was issued via the provided jwtSigningKey. It also performs some light validation on the claims, i.e., it makes sure the provided idToken has the provided issuer and clientID.

Further validation can be done via callers via the returned coreosoidc.IDToken.

Types

type ExchangeAuthcodeAndValidateTokenArgs

type ExchangeAuthcodeAndValidateTokenArgs struct {
	Ctx                  context.Context
	Authcode             string
	PKCECodeVerifier     oidcpkce.Code
	ExpectedIDTokenNonce nonce.Nonce
	RedirectURI          string
}

ExchangeAuthcodeAndValidateTokenArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.ExchangeAuthcodeAndValidateTokensFunc().

type ExchangeAuthcodeArgs added in v0.31.0

type ExchangeAuthcodeArgs struct {
	Ctx         context.Context
	Authcode    string
	RedirectURI string
}

ExchangeAuthcodeArgs is used to spy on calls to TestUpstreamGitHubIdentityProvider.ExchangeAuthcodeFunc().

type ExpectedUpstreamStateParamFormat

type ExpectedUpstreamStateParamFormat struct {
	P string `json:"p"`
	U string `json:"u"`
	T string `json:"t"`
	N string `json:"n"`
	C string `json:"c"`
	K string `json:"k"`
	V string `json:"v"`
}

ExpectedUpstreamStateParamFormat is a separate type from the production code to ensure that the state param's contents was serialized in the format that we expect, with the json keys that we expect, etc. This also ensure that the order of the serialized fields is the same, which doesn't really matter except that we can make simpler equality assertions about the redirect URL in tests.

type GetUserArgs added in v0.31.0

type GetUserArgs struct {
	Ctx            context.Context
	AccessToken    string
	IDPDisplayName string
}

GetUserArgs is used to spy on calls to TestUpstreamGitHubIdentityProvider.GetUserFunc().

type PasswordCredentialsGrantAndValidateTokensArgs added in v0.11.0

type PasswordCredentialsGrantAndValidateTokensArgs struct {
	Ctx      context.Context
	Username string
	Password string
}

PasswordCredentialsGrantAndValidateTokensArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.PasswordCredentialsGrantAndValidateTokensFunc().

type PerformLDAPRefreshArgs added in v0.31.0

type PerformLDAPRefreshArgs struct {
	Ctx                     context.Context
	StoredRefreshAttributes upstreamprovider.LDAPRefreshAttributes
	IDPDisplayName          string
}

type PerformOIDCRefreshArgs added in v0.31.0

type PerformOIDCRefreshArgs struct {
	Ctx          context.Context
	RefreshToken string
}

PerformOIDCRefreshArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.PerformRefreshFunc().

type RevokeTokenArgs added in v0.13.0

type RevokeTokenArgs struct {
	Ctx       context.Context
	Token     string
	TokenType upstreamprovider.RevocableTokenType
}

RevokeTokenArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.RevokeTokenArgsFunc().

type TestUpstreamGitHubIdentityProvider added in v0.31.0

type TestUpstreamGitHubIdentityProvider struct {
	Name                           string
	ClientID                       string
	ResourceUID                    types.UID
	Scopes                         []string
	DisplayNameForFederationDomain string
	TransformsForFederationDomain  *idtransform.TransformationPipeline
	UsernameAttribute              idpv1alpha1.GitHubUsernameAttribute
	GroupNameAttribute             idpv1alpha1.GitHubGroupNameAttribute
	AllowedOrganizations           *setutil.CaseInsensitiveSet
	AuthorizationURL               string
	GetUserFunc                    func(ctx context.Context, accessToken string) (*upstreamprovider.GitHubUser, error)
	ExchangeAuthcodeFunc           func(ctx context.Context, authcode string) (string, error)
	// contains filtered or unexported fields
}

func (*TestUpstreamGitHubIdentityProvider) ExchangeAuthcode added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) ExchangeAuthcode(
	ctx context.Context,
	authcode string,
	redirectURI string,
) (string, error)

func (*TestUpstreamGitHubIdentityProvider) ExchangeAuthcodeArgs added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) ExchangeAuthcodeArgs(call int) *ExchangeAuthcodeArgs

func (*TestUpstreamGitHubIdentityProvider) ExchangeAuthcodeCallCount added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) ExchangeAuthcodeCallCount() int

func (*TestUpstreamGitHubIdentityProvider) GetAllowedOrganizations added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetAllowedOrganizations() *setutil.CaseInsensitiveSet

func (*TestUpstreamGitHubIdentityProvider) GetAuthorizationURL added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetAuthorizationURL() string

func (*TestUpstreamGitHubIdentityProvider) GetClientID added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetClientID() string

func (*TestUpstreamGitHubIdentityProvider) GetGroupNameAttribute added in v0.31.0

func (*TestUpstreamGitHubIdentityProvider) GetResourceName added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetResourceName() string

func (*TestUpstreamGitHubIdentityProvider) GetResourceUID added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetResourceUID() types.UID

func (*TestUpstreamGitHubIdentityProvider) GetScopes added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetScopes() []string

func (*TestUpstreamGitHubIdentityProvider) GetUser added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetUser(ctx context.Context, accessToken string, idpDisplayName string) (*upstreamprovider.GitHubUser, error)

func (*TestUpstreamGitHubIdentityProvider) GetUserArgs added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetUserArgs(call int) *GetUserArgs

func (*TestUpstreamGitHubIdentityProvider) GetUserCallCount added in v0.31.0

func (u *TestUpstreamGitHubIdentityProvider) GetUserCallCount() int

func (*TestUpstreamGitHubIdentityProvider) GetUsernameAttribute added in v0.31.0

type TestUpstreamGitHubIdentityProviderBuilder added in v0.31.0

type TestUpstreamGitHubIdentityProviderBuilder struct {
	// contains filtered or unexported fields
}

func NewTestUpstreamGitHubIdentityProviderBuilder added in v0.31.0

func NewTestUpstreamGitHubIdentityProviderBuilder() *TestUpstreamGitHubIdentityProviderBuilder

func (*TestUpstreamGitHubIdentityProviderBuilder) Build added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithAccessToken added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithAllowedOrganizations added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithAuthcodeExchangeError added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithAuthorizationURL added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithClientID added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithDisplayNameForFederationDomain added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithGetUserError added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithGroupNameAttribute added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithName added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithResourceUID added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithScopes added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithTransformsForFederationDomain added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithUser added in v0.31.0

func (*TestUpstreamGitHubIdentityProviderBuilder) WithUsernameAttribute added in v0.31.0

type TestUpstreamLDAPIdentityProvider

type TestUpstreamLDAPIdentityProvider struct {
	Name                           string
	ResourceUID                    types.UID
	URL                            *url.URL
	AuthenticateFunc               func(ctx context.Context, username, password string) (*authenticators.Response, bool, error)
	PerformRefreshErr              error
	PerformRefreshGroups           []string
	DisplayNameForFederationDomain string
	TransformsForFederationDomain  *idtransform.TransformationPipeline
	// contains filtered or unexported fields
}

func (*TestUpstreamLDAPIdentityProvider) AuthenticateUser

func (u *TestUpstreamLDAPIdentityProvider) AuthenticateUser(ctx context.Context, username, password string) (*authenticators.Response, bool, error)

func (*TestUpstreamLDAPIdentityProvider) GetResourceName added in v0.31.0

func (u *TestUpstreamLDAPIdentityProvider) GetResourceName() string

func (*TestUpstreamLDAPIdentityProvider) GetResourceUID added in v0.13.0

func (u *TestUpstreamLDAPIdentityProvider) GetResourceUID() types.UID

func (*TestUpstreamLDAPIdentityProvider) GetURL

func (*TestUpstreamLDAPIdentityProvider) PerformRefresh added in v0.13.0

func (u *TestUpstreamLDAPIdentityProvider) PerformRefresh(ctx context.Context, storedRefreshAttributes upstreamprovider.LDAPRefreshAttributes, idpDisplayName string) ([]string, error)

func (*TestUpstreamLDAPIdentityProvider) PerformRefreshArgs added in v0.13.0

func (u *TestUpstreamLDAPIdentityProvider) PerformRefreshArgs(call int) *PerformLDAPRefreshArgs

func (*TestUpstreamLDAPIdentityProvider) PerformRefreshCallCount added in v0.13.0

func (u *TestUpstreamLDAPIdentityProvider) PerformRefreshCallCount() int

type TestUpstreamLDAPIdentityProviderBuilder added in v0.26.0

type TestUpstreamLDAPIdentityProviderBuilder struct {
	// contains filtered or unexported fields
}

func NewTestUpstreamLDAPIdentityProviderBuilder added in v0.26.0

func NewTestUpstreamLDAPIdentityProviderBuilder() *TestUpstreamLDAPIdentityProviderBuilder

func (*TestUpstreamLDAPIdentityProviderBuilder) Build added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithAuthenticateFunc added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithDisplayNameForFederationDomain added in v0.26.0

func (t *TestUpstreamLDAPIdentityProviderBuilder) WithDisplayNameForFederationDomain(displayName string) *TestUpstreamLDAPIdentityProviderBuilder

func (*TestUpstreamLDAPIdentityProviderBuilder) WithName added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithPerformRefreshErr added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithPerformRefreshGroups added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithResourceUID added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithTransformsForFederationDomain added in v0.26.0

func (*TestUpstreamLDAPIdentityProviderBuilder) WithURL added in v0.26.0

type TestUpstreamOIDCIdentityProvider

type TestUpstreamOIDCIdentityProvider struct {
	Name                           string
	ClientID                       string
	ResourceUID                    types.UID
	AuthorizationURL               url.URL
	UserInfoURL                    bool
	RevocationURL                  *url.URL
	UsernameClaim                  string
	GroupsClaim                    string
	Scopes                         []string
	AdditionalAuthcodeParams       map[string]string
	AdditionalClaimMappings        map[string]string
	AllowPasswordGrant             bool
	DisplayNameForFederationDomain string
	TransformsForFederationDomain  *idtransform.TransformationPipeline

	ExchangeAuthcodeAndValidateTokensFunc func(
		ctx context.Context,
		authcode string,
		pkceCodeVerifier oidcpkce.Code,
		expectedIDTokenNonce nonce.Nonce,
	) (*oidctypes.Token, error)

	PasswordCredentialsGrantAndValidateTokensFunc func(
		ctx context.Context,
		username string,
		password string,
	) (*oidctypes.Token, error)

	PerformRefreshFunc func(ctx context.Context, refreshToken string) (*oauth2.Token, error)

	RevokeTokenFunc func(ctx context.Context, refreshToken string, tokenType upstreamprovider.RevocableTokenType) error

	ValidateTokenAndMergeWithUserInfoFunc func(ctx context.Context, tok *oauth2.Token, expectedIDTokenNonce nonce.Nonce) (*oidctypes.Token, error)
	// contains filtered or unexported fields
}

func (*TestUpstreamOIDCIdentityProvider) AllowsPasswordGrant added in v0.11.0

func (u *TestUpstreamOIDCIdentityProvider) AllowsPasswordGrant() bool

func (*TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokens

func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokens(
	ctx context.Context,
	authcode string,
	pkceCodeVerifier oidcpkce.Code,
	expectedIDTokenNonce nonce.Nonce,
	redirectURI string,
) (*oidctypes.Token, error)

func (*TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensArgs

func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensArgs(call int) *ExchangeAuthcodeAndValidateTokenArgs

func (*TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensCallCount

func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensCallCount() int

func (*TestUpstreamOIDCIdentityProvider) GetAdditionalAuthcodeParams added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) GetAdditionalAuthcodeParams() map[string]string

func (*TestUpstreamOIDCIdentityProvider) GetAdditionalClaimMappings added in v0.22.0

func (u *TestUpstreamOIDCIdentityProvider) GetAdditionalClaimMappings() map[string]string

func (*TestUpstreamOIDCIdentityProvider) GetAuthorizationURL

func (u *TestUpstreamOIDCIdentityProvider) GetAuthorizationURL() *url.URL

func (*TestUpstreamOIDCIdentityProvider) GetClientID

func (u *TestUpstreamOIDCIdentityProvider) GetClientID() string

func (*TestUpstreamOIDCIdentityProvider) GetGroupsClaim

func (u *TestUpstreamOIDCIdentityProvider) GetGroupsClaim() string

func (*TestUpstreamOIDCIdentityProvider) GetResourceName added in v0.31.0

func (u *TestUpstreamOIDCIdentityProvider) GetResourceName() string

func (*TestUpstreamOIDCIdentityProvider) GetResourceUID added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) GetResourceUID() types.UID

func (*TestUpstreamOIDCIdentityProvider) GetRevocationURL added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) GetRevocationURL() *url.URL

func (*TestUpstreamOIDCIdentityProvider) GetScopes

func (u *TestUpstreamOIDCIdentityProvider) GetScopes() []string

func (*TestUpstreamOIDCIdentityProvider) GetUsernameClaim

func (u *TestUpstreamOIDCIdentityProvider) GetUsernameClaim() string

func (*TestUpstreamOIDCIdentityProvider) HasUserInfoURL added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) HasUserInfoURL() bool

func (*TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokens added in v0.11.0

func (u *TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokens(ctx context.Context, username, password string) (*oidctypes.Token, error)

func (*TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokensArgs added in v0.29.0

func (u *TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokensArgs(call int) *PasswordCredentialsGrantAndValidateTokensArgs

func (*TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokensCallCount added in v0.29.0

func (u *TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokensCallCount() int

func (*TestUpstreamOIDCIdentityProvider) PerformRefresh added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) PerformRefresh(ctx context.Context, refreshToken string) (*oauth2.Token, error)

func (*TestUpstreamOIDCIdentityProvider) PerformRefreshArgs added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) PerformRefreshArgs(call int) *PerformOIDCRefreshArgs

func (*TestUpstreamOIDCIdentityProvider) PerformRefreshCallCount added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) PerformRefreshCallCount() int

func (*TestUpstreamOIDCIdentityProvider) RevokeToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProvider) RevokeTokenArgs added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) RevokeTokenArgs(call int) *RevokeTokenArgs

func (*TestUpstreamOIDCIdentityProvider) RevokeTokenCallCount added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) RevokeTokenCallCount() int

func (*TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfo added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfo(ctx context.Context, tok *oauth2.Token, expectedIDTokenNonce nonce.Nonce, requireIDToken bool, requireUserInfo bool) (*oidctypes.Token, error)

func (*TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoArgs added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoArgs(call int) *ValidateTokenAndMergeWithUserInfoArgs

func (*TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoCallCount added in v0.13.0

func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoCallCount() int

type TestUpstreamOIDCIdentityProviderBuilder added in v0.11.0

type TestUpstreamOIDCIdentityProviderBuilder struct {
	// contains filtered or unexported fields
}

func NewTestUpstreamOIDCIdentityProviderBuilder added in v0.11.0

func NewTestUpstreamOIDCIdentityProviderBuilder() *TestUpstreamOIDCIdentityProviderBuilder

func (*TestUpstreamOIDCIdentityProviderBuilder) Build added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithAccessToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithAdditionalAuthcodeParams added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithAdditionalClaimMappings added in v0.22.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithAllowPasswordGrant added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithAuthorizationURL added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithClientID added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithDisplayNameForFederationDomain added in v0.26.0

func (u *TestUpstreamOIDCIdentityProviderBuilder) WithDisplayNameForFederationDomain(displayName string) *TestUpstreamOIDCIdentityProviderBuilder

func (*TestUpstreamOIDCIdentityProviderBuilder) WithEmptyAccessToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithEmptyRefreshToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithGroupsClaim added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithIDTokenClaim added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithName added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithPasswordGrantError added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithPerformRefreshError added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithRefreshToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithRefreshedTokens added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithResourceUID added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithRevokeTokenError added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithScopes added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithTransformsForFederationDomain added in v0.26.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithUpstreamAuthcodeExchangeError added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithUserInfoURL added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithUsernameClaim added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithValidateTokenAndMergeWithUserInfoError added in v0.13.0

func (u *TestUpstreamOIDCIdentityProviderBuilder) WithValidateTokenAndMergeWithUserInfoError(err error) *TestUpstreamOIDCIdentityProviderBuilder

func (*TestUpstreamOIDCIdentityProviderBuilder) WithValidatedAndMergedWithUserInfoTokens added in v0.13.0

func (u *TestUpstreamOIDCIdentityProviderBuilder) WithValidatedAndMergedWithUserInfoTokens(tokens *oidctypes.Token) *TestUpstreamOIDCIdentityProviderBuilder

func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutAccessToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutGroupsClaim added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutIDTokenClaim added in v0.11.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutRefreshToken added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutUserInfoURL added in v0.13.0

func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutUsernameClaim added in v0.11.0

type UpstreamStateParamBuilder added in v0.18.0

type UpstreamStateParamBuilder ExpectedUpstreamStateParamFormat

func (*UpstreamStateParamBuilder) Build added in v0.18.0

func (b *UpstreamStateParamBuilder) Build(t *testing.T, stateEncoder *securecookie.SecureCookie) string

func (*UpstreamStateParamBuilder) WithAuthorizeRequestParams added in v0.18.0

func (b *UpstreamStateParamBuilder) WithAuthorizeRequestParams(params string) *UpstreamStateParamBuilder

func (*UpstreamStateParamBuilder) WithCSRF added in v0.18.0

func (*UpstreamStateParamBuilder) WithNonce added in v0.18.0

func (*UpstreamStateParamBuilder) WithPKCE added in v0.18.0

func (*UpstreamStateParamBuilder) WithStateVersion added in v0.18.0

func (b *UpstreamStateParamBuilder) WithStateVersion(version string) *UpstreamStateParamBuilder

func (*UpstreamStateParamBuilder) WithUpstreamIDPName added in v0.31.0

func (b *UpstreamStateParamBuilder) WithUpstreamIDPName(upstreamIDPName string) *UpstreamStateParamBuilder

func (*UpstreamStateParamBuilder) WithUpstreamIDPType added in v0.18.0

func (b *UpstreamStateParamBuilder) WithUpstreamIDPType(upstreamIDPType idpdiscoveryv1alpha1.IDPType) *UpstreamStateParamBuilder

type ValidateTokenAndMergeWithUserInfoArgs added in v0.13.0

type ValidateTokenAndMergeWithUserInfoArgs struct {
	Ctx                  context.Context
	Tok                  *oauth2.Token
	ExpectedIDTokenNonce nonce.Nonce
	RequireIDToken       bool
	RequireUserInfo      bool
}

ValidateTokenAndMergeWithUserInfoArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.ValidateTokenAndMergeWithUserInfoFunc().

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL