Versions in this module Expand all Collapse all v0 v0.2.0 Oct 13, 2026 Changes in this version + var ErrVerifierPending = errors.New("token verifier not ready: the tenant's JWKS has not been fetched yet") + type Authenticator struct + func NewAuthenticator(cfg Config, tenantOf TenantSource, policies PolicySource) *Authenticator + func (a *Authenticator) Close() + func (a *Authenticator) Middleware() func(http.Handler) http.Handler + func (a *Authenticator) Prune(served func(tenant.ID) bool) + func (a *Authenticator) Reconfigure(id tenant.ID, w Wiring) + type PolicySource func(tenant.ID) *policy.Policy + type TenantSource func(context.Context) (tenant.ID, bool) + type Wiring struct + JWKSURL string + JWTSecret string + RoleClaim string v0.1.0 Aug 19, 2026 Changes in this version + func AuthErrorFromContext(ctx context.Context) error + func ClaimsFromContext(ctx context.Context) (jwt.MapClaims, bool) + func IsOperator(ctx context.Context) bool + func Middleware(cfg Config, store *policy.Store, logger *slog.Logger) (func(http.Handler) http.Handler, error) + func RoleFromContext(ctx context.Context) string + func WithAuthError(ctx context.Context, err error) context.Context + func WithClaims(ctx context.Context, claims jwt.MapClaims) context.Context + func WithOperator(ctx context.Context) context.Context + func WithRole(ctx context.Context, role string) context.Context + type Config struct + JWKSURL string + JWTSecret string + OperatorKey string + RoleClaim string