jwt

package

v0.4.32 Latest Latest Go to latest Published: Oct 24, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/ReCasaOS/CasaOS-Common

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func GenerateJwksJSON(publicKey *ecdsa.PublicKey) ([]byte, error)
func GenerateKeyPair() (*ecdsa.PrivateKey, *ecdsa.PublicKey, error)
func GenerateToken(username string, privateKey *ecdsa.PrivateKey, id int, issuer string, ...) (string, error)
func GetAccessToken(username string, privateKey *ecdsa.PrivateKey, id int) (string, error)
func GetRefreshToken(username string, private *ecdsa.PrivateKey, id int) (string, error)
func JWKSHandler(jwksJSON []byte) http.Handler
func PublicKeyFromJwksJSON(jwksJSON []byte) (*ecdsa.PublicKey, error)
func TokenFromAuthorization(authorization string) string
type Claims
- func ParseToken(signedToken string, publicKeyFunc func() (*ecdsa.PublicKey, error)) (*Claims, error)
- func Validate(token string, publicKeyFunc func() (*ecdsa.PublicKey, error)) (bool, *Claims, error)
type JWK
type JWKS

Constants ¶

View Source

const AccessIssuer = "casaos"

AccessIssuer is the issuer of an access token, the only token Validate accepts.

View Source

const JWKSPath = ".well-known/jwks.json"

Variables ¶

This section is empty.

Functions ¶

func GenerateJwksJSON ¶

func GenerateJwksJSON(publicKey *ecdsa.PublicKey) ([]byte, error)

func GenerateKeyPair ¶

func GenerateKeyPair() (*ecdsa.PrivateKey, *ecdsa.PublicKey, error)

func GenerateToken ¶

func GenerateToken(username string, privateKey *ecdsa.PrivateKey, id int, issuer string, t time.Duration) (string, error)

func GetRefreshToken ¶

func GetRefreshToken(username string, private *ecdsa.PrivateKey, id int) (string, error)

func JWKSHandler ¶

func JWKSHandler(jwksJSON []byte) http.Handler

func PublicKeyFromJwksJSON ¶

func PublicKeyFromJwksJSON(jwksJSON []byte) (*ecdsa.PublicKey, error)

func TokenFromAuthorization ¶ added in v0.4.31

func TokenFromAuthorization(authorization string) string

TokenFromAuthorization is the user token in an Authorization header value: the bare token (as CasaOS clients have always sent it), or the standard `Bearer <token>` (RFC 6750; the scheme is case-insensitive, RFC 7235). Every other scheme, `Internal <secret>` among them, is returned as it came: it is rejected as an invalid token. Only a space separates the scheme (RFC 7235 SP): `Bearer<TAB>token` is returned whole, and rejected too.

Types ¶

type Claims ¶

type Claims struct {
	Username string `json:"username"`
	ID       int    `json:"id"`
	jwt.RegisteredClaims
}

func ParseToken ¶

func ParseToken(signedToken string, publicKeyFunc func() (*ecdsa.PublicKey, error)) (*Claims, error)

func Validate ¶

func Validate(token string, publicKeyFunc func() (*ecdsa.PublicKey, error)) (bool, *Claims, error)

type JWK ¶

type JWK struct {
	Kty string `json:"kty"`
	Crv string `json:"crv"`
	X   string `json:"x"`
	Y   string `json:"y"`
}

type JWKS ¶

type JWKS struct {
	Keys []JWK `json:"keys"`
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL