token

package

v0.9.3 Latest Latest Go to latest Published: Apr 30, 2025 License: Apache-2.0 Imports: 14 Imported by: 0

Details

View Source

const (
	// JWKSURI is the URI for the JWKS endpoint.
	JWKSURI = "/.well-known/jwks.json"
)

This section is empty.

func NewJWKSHandler(publicKeyPEM []byte) (http.HandlerFunc, error)

NewJWKSHandler creates a new HTTP handler that serves the JWK Set for the given public key.

type InMemoryValidator struct {
	// contains filtered or unexported fields
}

InMemoryValidator validates JWT tokens signed with an ECDSA public key

func NewInMemoryValidator(publicKeyPEM []byte) (*InMemoryValidator, error)

NewInMemoryValidator creates a new Validator with the public key.

func (v *InMemoryValidator) Validate(tokenStr, subject string) (jwt.Claims, error)

Validate validates the token is valid and was issued for the specified subject.

type Issuer struct {
	// contains filtered or unexported fields
}

func NewIssuer(privateKeyPEM []byte) (*Issuer, error)

func (i *Issuer) IssueToken(subject string, ttl time.Duration) (string, jwt.Claims, error)

type JWTValidator interface {
	Validate(tokenStr, subject string) (jwt.Claims, error)
}

type RemoteValidator struct {
	// contains filtered or unexported fields
}

func NewRemoteValidator(ctx context.Context, urls []string) (*RemoteValidator, error)

NewRemoteValidator creates a new Validator with the public key.

func (v *RemoteValidator) Validate(tokenStr, subject string) (jwt.Claims, error)

Validate validates the token is valid and was issued for the specified subject.