Documentation
¶
Overview ¶
Package idtoken holds the OpenID Connect ID-token claim contract shared by the provider sign-in plugins, so provider sign-in and organization SSO accept exactly the same tokens.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Check ¶
Check applies the claims go-oidc does not: the exact issuer, a bounded subject, the transaction nonce, a plausible issue time, the authorized party of a multi-audience token and, when present, the access-token hash. Call it only on a token go-oidc verified (signature, algorithm, audience, expiry).
func ValidSubject ¶
ValidSubject bounds a provider subject stored as an external identity.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.