Documentation
¶
Index ¶
Constants ¶
SharedSigningKeyRedisKey is the Redis key under which the auto-provisioned STS signing key is stored so every replica signs and verifies with the same key.
Variables ¶
This section is empty.
Functions ¶
func ResolveSharedSigningKey ¶ added in v0.18.0
func ResolveSharedSigningKey(ctx context.Context, rdb *redis.Client, logger *slog.Logger) (string, error)
ResolveSharedSigningKey returns a PEM-encoded RSA signing key shared across replicas via Redis. It returns the stored key when present; otherwise it generates one and stores it with SETNX so concurrent replicas converge on a single key instead of each minting with its own ephemeral key.
Types ¶
type TokenClient ¶
type TokenClient struct {
// contains filtered or unexported fields
}
func NewTokenClient ¶
func NewTokenClient(client *http.Client) *TokenClient
Source Files
Click to show internal directories.
Click to hide internal directories.