Documentation
¶
Overview ¶
Package jwt verifies the compact RS256 identity tokens of OpenID Connect providers. It supports the single algorithm Auth-All accepts.
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var ErrInvalidToken = errors.New("authall/jwt: the identity token is invalid")
ErrInvalidToken reports a token that fails any validation step.
Functions ¶
This section is empty.
Types ¶
type Claims ¶
type Claims struct {
Issuer string `json:"iss"`
Subject string `json:"sub"`
Audience any `json:"aud"`
Expiry int64 `json:"exp"`
IssuedAt int64 `json:"iat"`
Nonce string `json:"nonce"`
Email string `json:"email"`
EmailVerified any `json:"email_verified"`
Name string `json:"name"`
Picture string `json:"picture"`
}
Claims are the identity token claims Auth-All reads.
func (Claims) VerifiedEmail ¶
VerifiedEmail reports the boolean form of the email_verified claim, which some providers send as a string.
Click to show internal directories.
Click to hide internal directories.