jwtutil

package

v0.2.0 Latest Latest Go to latest Published: Mar 3, 2023 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Package jwtutil provides mechanisms for interacting with JWTs.

View Source

const IAMKeyEndpoint = "https://www.googleapis.com/oauth2/v3/certs"

This section is empty.

This section is empty.

type Verifier struct {
	// contains filtered or unexported fields
}

Verifier allows for getting public JWK keys from an endpoint and validating JWTs with those keys.

func NewVerifier(ctx context.Context, endpoint string) (*Verifier, error)

NewVerifier returns a Verifier with the cache initialized. The cache is set up using defaults, and refreshes happen every 15 minutes.

func (j *Verifier) ValidateJWT(jwtStr string) (jwt.Token, error)

ValidateJWT takes a jwt string, converts it to a jwt.Token, and validates the signature against the public keys in the JWKS endpoint.