Documentation
¶
Overview ¶
Package okta provides a verifier for Okta API tokens. It uses the Okta Users API GET /api/v1/users/me endpoint to check token validity. Okta uses the SSWS authorization scheme, not Bearer.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Verifier ¶
type Verifier struct {
// contains filtered or unexported fields
}
Verifier checks whether an Okta API token is active by calling the Okta Users API. It NEVER logs or persists raw token values.
func (*Verifier) Verify ¶
func (v *Verifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
Verify checks if the detected Okta API token is valid/active. The Okta domain is taken from raw.ExtraData["domain"] when apiURL is unset.
Source Files
Click to show internal directories.
Click to hide internal directories.