authn

package

v2.4.0 Latest Latest Go to latest Published: Oct 3, 2026 License: Apache-2.0 Imports: 20 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/SamuelSupe/mcphub

Links

Open Source Insights

Documentation ¶

Index ¶

func LoginHTTPClient() *http.Client
func LoginIDVerifier(ctx context.Context, issuer, clientID string, client *http.Client) (*oidc.IDTokenVerifier, error)
func LoginMetadata(ctx context.Context, issuer string, client *http.Client, public bool) (*oauthex.AuthServerMeta, error)
type Manager
- func NewManager(issuer, audience string, logger *slog.Logger) *Manager

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func LoginHTTPClient ¶

func LoginHTTPClient() *http.Client

func LoginIDVerifier ¶

func LoginIDVerifier(ctx context.Context, issuer, clientID string, client *http.Client) (*oidc.IDTokenVerifier, error)

LoginIDVerifier checks HTTPS discovery/JWKS and bounds their responses before accepting signed, unexpired ID tokens for the browser client's audience.

func LoginMetadata ¶

func LoginMetadata(ctx context.Context, issuer string, client *http.Client, public bool) (*oauthex.AuthServerMeta, error)

LoginMetadata validates the issuer and endpoints before a browser or token exchange is allowed to use discovery data. Public clients cannot use secrets.

Types ¶

type Manager ¶

type Manager struct {
	// contains filtered or unexported fields
}

func NewManager ¶

func NewManager(issuer, audience string, logger *slog.Logger) *Manager

func (*Manager) Ready ¶

func (m *Manager) Ready() bool

func (*Manager) Run ¶

func (m *Manager) Run(ctx context.Context)

func (*Manager) Verify ¶

func (m *Manager) Verify(ctx context.Context, rawToken string, _ *http.Request) (*mcpauth.TokenInfo, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL