ucjwt

Documentation

Index

• func CreateToken(ctx context.Context, privateKey *rsa.PrivateKey, keyID string, ...) (string, error)
• func ExtractBearerToken(h *http.Header) (string, error)
• func IsExpired(jwt string) (bool, error)
• func ParseJWTClaimsUnverified(token string) (jwt.MapClaims, error)
• func ParseUCClaimsUnverified(token string) (*oidc.UCTokenClaims, error)
• func ParseUCClaimsVerified(token string, key *rsa.PublicKey) (*oidc.UCTokenClaims, error)
• type Config

Functions

func CreateToken

func CreateToken(ctx context.Context,
	privateKey *rsa.PrivateKey,
	keyID string,
	tokenID uuid.UUID,
	claims oidc.UCTokenClaims,
	jwtIssuerURL string,
	validFor int64) (string, error)

CreateToken creates a new JWT

func ExtractBearerToken

func ExtractBearerToken(h *http.Header) (string, error)

ExtractBearerToken extracts a bearer token from an HTTP request or returns an error if none is found or if it's malformed. NOTE: this doesn't enforce that it's a JWT, much less a valid one.

func IsExpired

func IsExpired(jwt string) (bool, error)

IsExpired returns `true, nil` if the supplied JWT has valid claims and is expired, `false, nil` if it has valid claims and is unexpired, and `true, err` if the claims aren't parseable. NOTE: It does NOT validate the token's signature!

func ParseJWTClaimsUnverified

func ParseJWTClaimsUnverified(token string) (jwt.MapClaims, error)

ParseJWTClaimsUnverified extracts the claims as MapClaims from a token without validating its signature or anything else.

func ParseUCClaimsUnverified

func ParseUCClaimsUnverified(token string) (*oidc.UCTokenClaims, error)

ParseUCClaimsUnverified extracts the claims as UCTokenClaims from a token without validating its signature or anything else.

func ParseUCClaimsVerified

func ParseUCClaimsVerified(token string, key *rsa.PublicKey) (*oidc.UCTokenClaims, error)

ParseUCClaimsVerified extracts the claims as UCTokenClaims from a token and verifies the signature, expiration, etc.

Types

type Config

type Config struct {
	ClientID     string    `yaml:"client_id" validate:"notempty"`
	ClientSecret string    `yaml:"client_secret" validate:"notempty"` // TODO: convert to secret.String
	TenantURL    string    `yaml:"tenant_url" validate:"notempty"`
	TenantID     uuid.UUID `yaml:"tenant_id" validate:"notnil"`
	CompanyID    uuid.UUID `yaml:"company_id" validate:"notnil"`
}

Config represents config for Console Authentication & Authorization.