Versions in this module Expand all Collapse all v0 v0.2.0 Sep 13, 2026 v0.1.0 Sep 10, 2026 Changes in this version + func PresenterResponseFor(Outcome) string + type ClientResolver interface + ResolveAssertionClient func(ctx context.Context, clientID string) (domain.AssertionClient, error) + type Outcome string + const OutcomeAccepted + const OutcomeAlgorithmMismatch + const OutcomeAlgorithmNotAllowed + const OutcomeAssertionIDMissing + const OutcomeAssertionTypeMismatch + const OutcomeAudienceMismatch + const OutcomeAudienceNotAllowed + const OutcomeBodyAboveCeiling + const OutcomeClientCannotAssert + const OutcomeClientExpired + const OutcomeClientUnknown + const OutcomeDuplicateHeaderMember + const OutcomeExpired + const OutcomeExpiryMissing + const OutcomeIdentityMismatch + const OutcomeIssuanceFailed + const OutcomeIssuedAtInFuture + const OutcomeIssuedAtMissing + const OutcomeIssuerUntrusted + const OutcomeLifetimeAboveCeiling + const OutcomeMalformedRequest + const OutcomeMalformedSerialization + const OutcomeMethodNotAllowed + const OutcomeMultipleAssertions + const OutcomeNotYetValid + const OutcomeOwnerNotActive + const OutcomeRegistryUnavailable + const OutcomeReplayStoreUnavailable + const OutcomeReplayed + const OutcomeSignatureMismatch + const OutcomeTokenTypeMismatch + const OutcomeTrustExpired + const OutcomeUnsupportedCritical + const OutcomeUnsupportedGrantType + func Outcomes() []Outcome + type Policy struct + Clock func() time.Time + ClockSkew time.Duration + ExpectedAudience string + MaxFederatedLifetime time.Duration + MaxLifetime time.Duration + type ReplayGuard interface + Redeem func(ctx context.Context, clientID, assertionID string, expiresAt time.Time) error + type Result struct + AssertionID string + Client domain.AssertionClient + ExpiresAt time.Time + Outcome Outcome + func Refuse(o Outcome, format string, args ...any) (Result, error) + func (r Result) PresenterResponse() string + type TrustedIssuerResolver interface + ResolveTrustedIssuer func(ctx context.Context, issuer, subject string) (domain.TrustedIssuer, domain.AssertionClient, error) + type Verifier struct + func New(p Policy, clients ClientResolver, issuers TrustedIssuerResolver, ...) (*Verifier, error) + func (v *Verifier) DeclaredChecks() []tokenpolicy.Check + func (v *Verifier) DeclaredDeviations() []tokenpolicy.Deviation + func (v *Verifier) Verify(ctx context.Context, assertionType, raw string) (Result, error) + func (v *Verifier) VerifyFederated(ctx context.Context, raw string) (Result, error)
Go to main page