authorization

type AppHandler func(w http.ResponseWriter, r *http.Request, userInfo *UserInfo) (err error)

type Authorization struct {
	// contains filtered or unexported fields
}

type Options struct {
	// Jwks with private key. If not set, authorization will be disabled,
	Jwks jwk.Set
	// As alternative to Jwks, JwksURL can be provided. Middleware will fetch Jwks and auto refresh.
	// If Jwks is provided, JwksURL will be ignored.
	JwksURL string
	// Required scope that needs to be present in token. If given scope is not present
	// request will be denied. Scope '*' can be set and means any - only key must match.
	RequiredScope string
	// Allows anonymous user - user without token. User info will be null
	AllowAnonymous bool
	// Way how to treat invalid user token: anonymous or unauthorized
	InvalidTokenIsAnonymous bool
	// Way how to treat users without valid scope: anonymous or unauthorized©
	InvalidScopeIsAnonymous bool
	// Disable authorization - it will allow all requests and UserInfo will be always nil
	Disabled bool
}

type UserInfo struct {
	UserID string        `json:"uid,omitempty"`
	Email  string        `json:"email,omitempty"`
	Scopes []string      `json:"scopes,omitempty"`
	Claims jwt.MapClaims `json:"claims,omitempty"`
}