op

Mar 16, 2022

Changes in this version

+ func AuthCallbackURL(o OpenIDProvider) func(string) string

Nov 2, 2021

Changes in this version

+ func AuthMethodsRevocationEndpoint(c Configuration) []oidc.AuthMethod

+ func AuthResponseURL(redirectURI string, responseType oidc.ResponseType, ...) (string, error)

+ func CopyRequestObjectToAuthRequest(authReq *oidc.AuthRequest, requestObject *oidc.RequestObject)

+ func IntrospectionSigAlgorithms(c Configuration) []string

+ func ParseRequestObject(ctx context.Context, authReq *oidc.AuthRequest, storage Storage, issuer string) (*oidc.AuthRequest, error)

+ func ParseTokenRevocationRequest(r *http.Request, revoker Revoker) (token, tokenTypeHint, clientID string, err error)

+ func RequestObjectSigAlgorithms(c Configuration) []string

+ func RevocationRequestError(w http.ResponseWriter, r *http.Request, err error)

+ func RevocationSigAlgorithms(c Configuration) []string

+ func Revoke(w http.ResponseWriter, r *http.Request, revoker Revoker)

+ func TokenSigAlgorithms(c Configuration) []string

type AuthRequest

+ GetResponseMode func() oidc.ResponseMode

type AuthStorage

+ RevokeToken func(ctx context.Context, token string, userID string, clientID string) *oidc.Error

type Authorizer

+ RequestObjectSupported func() bool

type Config

+ AuthMethodPost bool

+ RequestObjectSupported bool

type Configuration

+ IntrospectionAuthMethodPrivateKeyJWTSupported func() bool

+ IntrospectionEndpointSigningAlgorithmsSupported func() []string

+ RequestObjectSigningAlgorithmsSupported func() []string

+ RequestObjectSupported func() bool

+ RevocationAuthMethodPrivateKeyJWTSupported func() bool

+ RevocationEndpoint func() Endpoint

+ RevocationEndpointSigningAlgorithmsSupported func() []string

+ TokenEndpointSigningAlgorithmsSupported func() []string

type Option

+ func WithCustomRevocationEndpoint(endpoint Endpoint) Option

+ type Revoker interface

+ AccessTokenVerifier func() AccessTokenVerifier

+ AuthMethodPostSupported func() bool

+ AuthMethodPrivateKeyJWTSupported func() bool

+ Crypto func() Crypto

+ Decoder func() httphelper.Decoder

+ Storage func() Storage

+ type RevokerJWTProfile interface

+ JWTProfileVerifier func() JWTProfileVerifier

Jul 9, 2021

Changes in this version

type Config

+ SupportedUILocales []language.Tag

type Configuration

+ SupportedUILocales func() []language.Tag

Jul 7, 2021

Changes in this version

+ func SubjectIsIssuer(request *oidc.JWTTokenRequest) error

type JWTProfileVerifier

+ CheckSubject func(request *oidc.JWTTokenRequest) error

+ type JWTProfileVerifierOption func(*jwtProfileVerifier)

+ func SubjectCheck(check func(request *oidc.JWTTokenRequest) error) JWTProfileVerifierOption

type KeyProvider

+ GetKeySet func(context.Context) (*jose.JSONWebKeySet, error)

Jun 16, 2021

Changes in this version

+ func ValidateAuthReqPrompt(prompts []string, maxAge *uint) (_ *uint, err error)

May 31, 2021

Changes in this version

+ func ValidateGrantType(client Client, grantType oidc.GrantType) bool

type Client

+ GrantTypes func() []oidc.GrantType

type Config

+ GrantTypeRefreshToken bool

type Configuration

+ GrantTypeRefreshTokenSupported func() bool

type Exchanger

+ GrantTypeRefreshTokenSupported func() bool

May 18, 2021

Changes in this version

+ func AuthorizeCodeClient(ctx context.Context, tokenReq *oidc.AccessTokenRequest, exchanger Exchanger) (request AuthRequest, client Client, err error)

+ func AuthorizeRefreshClient(ctx context.Context, tokenReq *oidc.RefreshTokenRequest, exchanger Exchanger) (request RefreshTokenRequest, client Client, err error)

+ func ParseAuthenticatedTokenRequest(r *http.Request, decoder utils.Decoder, request AuthenticatedTokenRequest) error

+ func ParseJWTProfileGrantRequest(r *http.Request, decoder utils.Decoder) (*oidc.JWTProfileGrantRequest, error)

+ func ParseRefreshTokenRequest(r *http.Request, decoder utils.Decoder) (*oidc.RefreshTokenRequest, error)

+ func RefreshTokenExchange(w http.ResponseWriter, r *http.Request, exchanger Exchanger)

+ func ValidateRefreshTokenRequest(ctx context.Context, tokenReq *oidc.RefreshTokenRequest, exchanger Exchanger) (RefreshTokenRequest, Client, error)

+ func ValidateRefreshTokenScopes(requestedScopes oidc.Scopes, authRequest RefreshTokenRequest) error

type AuthStorage

+ CreateAccessAndRefreshTokens func(ctx context.Context, request TokenRequest, currentRefreshToken string) (accessTokenID string, newRefreshToken string, expiration time.Time, err error)

+ CreateAccessToken func(context.Context, TokenRequest) (string, time.Time, error)

+ TokenRequestByRefreshToken func(ctx context.Context, refreshToken string) (RefreshTokenRequest, error)

+ type AuthenticatedTokenRequest interface

+ SetClientID func(string)

+ SetClientSecret func(string)

+ type IDTokenRequest interface

+ GetAMR func() []string

+ GetAudience func() []string

+ GetAuthTime func() time.Time

+ GetClientID func() string

+ GetScopes func() []string

+ GetSubject func() string

+ type RefreshTokenRequest interface

+ GetAMR func() []string

+ GetAudience func() []string

+ GetAuthTime func() time.Time

+ GetClientID func() string

+ GetScopes func() []string

+ GetSubject func() string

+ SetCurrentScopes func(scopes oidc.Scopes)

+ func RefreshTokenRequestByRefreshToken(ctx context.Context, storage Storage, refreshToken string) (RefreshTokenRequest, error)

Apr 29, 2021

Changes in this version

+ func HTTPLoopbackOrLocalhost(rawurl string) (*url.URL, bool)

Feb 15, 2021

Changes in this version

+ func AuthMethodsIntrospectionEndpoint(c Configuration) []oidc.AuthMethod

+ func AuthMethodsTokenEndpoint(c Configuration) []oidc.AuthMethod

+ func AuthorizePrivateJWTKey(ctx context.Context, tokenReq *oidc.AccessTokenRequest, ...) (AuthRequest, Client, error)

+ func Introspect(w http.ResponseWriter, r *http.Request, introspector Introspector)

+ func ParseTokenIntrospectionRequest(r *http.Request, introspector Introspector) (token, clientID string, err error)

+ func ParseUserinfoRequest(r *http.Request, decoder utils.Decoder) (string, error)

+ func UILocales(c Configuration) []language.Tag

type Config

+ AuthMethodPrivateKeyJWT bool

type Configuration

+ AuthMethodPrivateKeyJWTSupported func() bool

+ IntrospectionEndpoint func() Endpoint

type Exchanger

+ AuthMethodPrivateKeyJWTSupported func() bool

+ type Introspector interface

+ AccessTokenVerifier func() AccessTokenVerifier

+ Crypto func() Crypto

+ Decoder func() utils.Decoder

+ Storage func() Storage

+ type IntrospectorJWTProfile interface

+ JWTProfileVerifier func() JWTProfileVerifier

type OPStorage

+ SetIntrospectionFromToken func(ctx context.Context, userinfo oidc.IntrospectionResponse, ...) error

+ SetUserinfoFromScopes func(ctx context.Context, userinfo oidc.UserInfoSetter, userID, clientID string, ...) error

+ SetUserinfoFromToken func(ctx context.Context, userinfo oidc.UserInfoSetter, ...) error

+ ValidateJWTProfileScopes func(ctx context.Context, userID string, scope oidc.Scopes) (oidc.Scopes, error)

type Option

+ func WithCustomIntrospectionEndpoint(endpoint Endpoint) Option

Nov 27, 2020

Changes in this version

type Client

+ ClockSkew func() time.Duration

+ IDTokenUserinfoClaimsAssertion func() bool

Nov 3, 2020

Changes in this version

type Client

+ IsScopeAllowed func(scope string) bool

+ RestrictAdditionalAccessTokenScopes func() func(scopes []string) []string

+ RestrictAdditionalIdTokenScopes func() func(scopes []string) []string

Oct 21, 2020

Changes in this version

type Configuration

+ GrantTypeJWTAuthorizationSupported func() bool

+ GrantTypeTokenExchangeSupported func() bool

type Exchanger

+ GrantTypeJWTAuthorizationSupported func() bool

+ GrantTypeTokenExchangeSupported func() bool

+ type JWTAuthorizationGrantExchanger interface

+ JWTProfileVerifier func() JWTProfileVerifier

Oct 15, 2020

Changes in this version

+ const OidcDevMode

+ func VerifyAccessToken(ctx context.Context, token string, v AccessTokenVerifier) (oidc.AccessTokenClaims, error)

+ type AccessTokenVerifier interface

+ KeySet func() oidc.KeySet

+ SupportedSignAlgs func() []string

+ func NewAccessTokenVerifier(issuer string, keySet oidc.KeySet) AccessTokenVerifier

type Client

+ AllowedScopes func() []string

+ AssertAdditionalAccessTokenScopes func() bool

+ AssertAdditionalIdTokenScopes func() bool

type OPStorage

+ GetPrivateClaimsFromScopes func(ctx context.Context, userID, clientID string, scopes []string) (map[string]interface{}, error)

type OpenIDProvider

+ AccessTokenVerifier func() AccessTokenVerifier

type Signer

+ func NewSigner(ctx context.Context, storage AuthStorage, keyCh <-chan jose.SigningKey) Signer

+ Signer func() jose.Signer

type UserinfoProvider

+ AccessTokenVerifier func() AccessTokenVerifier

Sep 16, 2020

Changes in this version

+ func CreateJWTTokenResponse(ctx context.Context, tokenRequest TokenRequest, creator TokenCreator) (*oidc.AccessTokenResponse, error)

+ func EnsureKey(ctx context.Context, storage Storage, keyCh chan<- jose.SigningKey, ...)

+ func JWTProfile(w http.ResponseWriter, r *http.Request, exchanger Exchanger)

+ func ParseJWTProfileRequest(r *http.Request, decoder utils.Decoder) (string, error)

+ func VerifyIDTokenHint(ctx context.Context, token string, v IDTokenHintVerifier) (*oidc.IDTokenClaims, error)

+ func VerifyJWTAssertion(ctx context.Context, assertion string, v JWTProfileVerifier) (*oidc.JWTTokenRequest, error)

type Authorizer

+ IDTokenHintVerifier func() IDTokenHintVerifier

type Exchanger

+ JWTProfileVerifier func() JWTProfileVerifier

+ type IDTokenHintVerifier interface

+ ACR func() oidc.ACRVerifier

+ KeySet func() oidc.KeySet

+ MaxAge func() time.Duration

+ SupportedSignAlgs func() []string

+ func NewIDTokenHintVerifier(issuer string, keySet oidc.KeySet) IDTokenHintVerifier

+ type JWTProfileVerifier interface

+ Storage func() Storage

+ func NewJWTProfileVerifier(storage Storage, issuer string, maxAgeIAT, offset time.Duration) JWTProfileVerifier

type OPStorage

+ GetKeyByIDAndUserID func(ctx context.Context, keyID, userID string) (*jose.JSONWebKey, error)

type OpenIDProvider

+ func NewOpenIDProvider(ctx context.Context, config *Config, storage Storage, opOpts ...Option) (OpenIDProvider, error)

+ Crypto func() Crypto

+ Decoder func() utils.Decoder

+ DefaultLogoutRedirectURI func() string

+ Encoder func() utils.Encoder

+ IDTokenHintVerifier func() IDTokenHintVerifier

+ JWTProfileVerifier func() JWTProfileVerifier

+ Probes func() []ProbesFn

+ Signer func() Signer

+ Storage func() Storage

+ type Option func(o *openidProvider) error

+ func WithCustomEndpoints(auth, token, userInfo, endSession, keys Endpoint) Option

type SessionEnder

+ IDTokenHintVerifier func() IDTokenHintVerifier

+ type TokenRequest interface

+ GetAudience func() []string

+ GetScopes func() []string

+ GetSubject func() string

Sep 7, 2020

Changes in this version

+ const InteractionRequired

+ const InvalidRequestURI

+ var ErrInteractionRequired = func(description string) *OAuthError

+ func ParseAuthorizeRequest(r *http.Request, decoder utils.Decoder) (*oidc.AuthRequest, error)

+ type AuthorizeValidator interface

+ ValidateAuthRequest func(context.Context, *oidc.AuthRequest, Storage, rp.Verifier) (string, error)

type OAuthError

+ State string

Aug 28, 2020

Changes in this version

type DefaultOPOpts

+ func WithHttpInterceptors(interceptors ...HttpInterceptor) DefaultOPOpts

Aug 20, 2020

Changes in this version

+ const CodeMethodS256

+ func CodeChallengeMethods(c Configuration) []string

type Config

+ CodeMethodS256 bool

type Configuration

+ CodeMethodS256Supported func() bool

type DefaultOP

+ func (p *DefaultOP) CodeMethodS256Supported() bool

Aug 6, 2020

Changes in this version

+ func ContainsResponseType(types []oidc.ResponseType, responseType oidc.ResponseType) bool

type Client

+ AuthMethod func() AuthMethod

+ DevMode func() bool

+ ResponseTypes func() []oidc.ResponseType

May 29, 2020

Changes in this version

+ func CreateAuthRequestCode(ctx context.Context, authReq AuthRequest, storage Storage, crypto Crypto) (string, error)

type AuthStorage

+ AuthRequestByCode func(context.Context, string) (AuthRequest, error)

+ SaveAuthCode func(context.Context, string, string) error

Mar 11, 2020

Changes in this version

+ func ValidateAuthReqIDTokenHint(ctx context.Context, idTokenHint string, verifier rp.Verifier) (string, error)

type Authorizer

+ IDTokenVerifier func() rp.Verifier

Mar 6, 2020

Changes in this version

type OPStorage

+ GetUserinfoFromToken func(context.Context, string) (*oidc.Userinfo, error)

type UserinfoProvider

+ Crypto func() Crypto

+ Decoder func() *schema.Decoder

Mar 4, 2020

Changes in this version

type DefaultOPOpts

+ func WithCustomEndSessionEndpoint(endpoint Endpoint) DefaultOPOpts

Mar 3, 2020

Changes in this version

+ func EndSession(w http.ResponseWriter, r *http.Request, ender SessionEnder)

+ func ParseEndSessionRequest(r *http.Request, decoder *schema.Decoder) (*oidc.EndSessionRequest, error)

+ func RequestError(w http.ResponseWriter, r *http.Request, err error)

type AuthStorage

+ TerminateSession func(context.Context, string, string) error

type Client

+ PostLogoutRedirectURIs func() []string

type Config

+ DefaultLogoutRedirectURI string

type Configuration

+ EndSessionEndpoint func() Endpoint

type DefaultOP

+ func (p *DefaultOP) DefaultLogoutRedirectURI() string

+ func (p *DefaultOP) EndSessionEndpoint() Endpoint

+ func (p *DefaultOP) HandleEndSession(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) IDTokenVerifier() rp.Verifier

+ func (p *DefaultOP) VerifySignature(ctx context.Context, jws *jose.JSONWebSignature) ([]byte, error)

+ type EndSessionRequest struct

+ Client Client

+ RedirectURI string

+ UserID string

+ func ValidateEndSessionRequest(ctx context.Context, req *oidc.EndSessionRequest, ender SessionEnder) (*EndSessionRequest, error)

type OpenIDProvider

+ HandleEndSession func(w http.ResponseWriter, r *http.Request)

+ type SessionEnder interface

+ Decoder func() *schema.Decoder

+ DefaultLogoutRedirectURI func() string

+ IDTokenVerifier func() rp.Verifier

+ Storage func() Storage

Feb 27, 2020

Changes in this version

type AuthStorage

+ CreateToken func(context.Context, AuthRequest) (string, time.Time, error)

Feb 27, 2020

Changes in this version

type Endpoint

+ func NewEndpoint(path string) Endpoint

+ func NewEndpointWithURL(path, url string) Endpoint

Feb 27, 2020

Changes in this version

type DefaultOPOpts

+ func WithCustomKeysEndpoint(endpoint Endpoint) DefaultOPOpts

Feb 14, 2020

Changes in this version

type DefaultOPOpts

+ func WithTimer(timer <-chan time.Time) DefaultOPOpts

Feb 13, 2020

Changes in this version

+ func Healthz(w http.ResponseWriter, r *http.Request)

+ func Readiness(w http.ResponseWriter, r *http.Request, probes ...ProbesFn)

type AuthStorage

+ SaveNewKeyPair func(context.Context) error

type DefaultOP

+ func (p *DefaultOP) HandleReady(w http.ResponseWriter, r *http.Request)

type DefaultOPOpts

+ func WithRetry(max int, sleep time.Duration) DefaultOPOpts

type OpenIDProvider

+ HandleReady func(w http.ResponseWriter, r *http.Request)

+ type ProbesFn func(context.Context) error

+ func ReadySigner(s Signer) ProbesFn

+ func ReadyStorage(s Storage) ProbesFn

type Signer

+ Health func(ctx context.Context) error

type Storage

+ Health func(context.Context) error

+ type StorageNotFoundError interface

+ IsNotFound func()

Feb 6, 2020

Changes in this version

+ var DefaultInterceptor = func(h http.HandlerFunc) http.HandlerFunc

type DefaultOPOpts

+ func WithHttpInterceptor(h HttpInterceptor) DefaultOPOpts

+ type HttpInterceptor func(http.HandlerFunc) http.HandlerFunc

Jan 31, 2020

Changes in this version

+ const AccessTokenTypeBearer

+ const AccessTokenTypeJWT

+ const ApplicationTypeNative

+ const ApplicationTypeUserAgent

+ const ApplicationTypeWeb

+ const AuthMethodBasic

+ const AuthMethodNone

+ const AuthMethodPost

+ const InvalidRequest

+ const ScopeAddress

+ const ScopeEmail

+ const ScopeOpenID

+ const ScopePhone

+ const ScopeProfile

+ const ServerError

+ var DefaultEndpoints = &endpoints

+ var DefaultSupportedScopes = []string

+ var ErrInvalidRequest = func(description string) *OAuthError

+ var ErrInvalidRequestRedirectURI = func(description string) *OAuthError

+ var ErrServerError = func(description string) *OAuthError

+ func AuthMethods(c Configuration) []string

+ func AuthRequestError(w http.ResponseWriter, r *http.Request, authReq ErrAuthRequest, err error, ...)

+ func AuthResponse(authReq AuthRequest, authorizer Authorizer, w http.ResponseWriter, ...)

+ func AuthResponseCode(w http.ResponseWriter, r *http.Request, authReq AuthRequest, ...)

+ func AuthResponseToken(w http.ResponseWriter, r *http.Request, authReq AuthRequest, ...)

+ func Authorize(w http.ResponseWriter, r *http.Request, authorizer Authorizer)

+ func AuthorizeCallback(w http.ResponseWriter, r *http.Request, authorizer Authorizer)

+ func AuthorizeClient(ctx context.Context, tokenReq *oidc.AccessTokenRequest, exchanger Exchanger) (AuthRequest, Client, error)

+ func AuthorizeClientIDSecret(ctx context.Context, clientID, clientSecret string, storage OPStorage) error

+ func BuildAuthRequestCode(authReq AuthRequest, crypto Crypto) (string, error)

+ func CodeExchange(w http.ResponseWriter, r *http.Request, exchanger Exchanger)

+ func CreateAccessToken(authReq AuthRequest, client Client, creator TokenCreator) (string, error)

+ func CreateBearerToken(authReq AuthRequest, crypto Crypto) (string, error)

+ func CreateDiscoveryConfig(c Configuration, s Signer) *oidc.DiscoveryConfiguration

+ func CreateIDToken(issuer string, authReq AuthRequest, validity time.Duration, ...) (string, error)

+ func CreateJWT(issuer string, authReq AuthRequest, client Client, signer Signer) (string, error)

+ func CreateRouter(o OpenIDProvider) *mux.Router

+ func CreateTokenResponse(authReq AuthRequest, client Client, creator TokenCreator, ...) (*oidc.AccessTokenResponse, error)

+ func Discover(w http.ResponseWriter, config *oidc.DiscoveryConfiguration)

+ func ExchangeRequestError(w http.ResponseWriter, r *http.Request, err error)

+ func GrantTypes(c Configuration) []string

+ func IsConfidentialType(c Client) bool

+ func Keys(w http.ResponseWriter, r *http.Request, k KeyProvider)

+ func NeedsExistingSession(authRequest *oidc.AuthRequest) bool

+ func ParseAccessTokenRequest(r *http.Request, decoder *schema.Decoder) (*oidc.AccessTokenRequest, error)

+ func ParseTokenExchangeRequest(w http.ResponseWriter, r *http.Request) (oidc.TokenRequest, error)

+ func RedirectToLogin(authReqID string, client Client, w http.ResponseWriter, r *http.Request)

+ func ResponseTypes(c Configuration) []string

+ func Scopes(c Configuration) []string

+ func ScopesFromAccessToken(w http.ResponseWriter, r *http.Request) ([]string, error)

+ func SigAlgorithms(s Signer) []string

+ func Start(ctx context.Context, o OpenIDProvider)

+ func SubjectTypes(c Configuration) []string

+ func SupportedClaims(c Configuration) []string

+ func TokenExchange(w http.ResponseWriter, r *http.Request, exchanger Exchanger)

+ func Userinfo(w http.ResponseWriter, r *http.Request, userinfoProvider UserinfoProvider)

+ func ValidateAccessTokenRequest(ctx context.Context, tokenReq *oidc.AccessTokenRequest, exchanger Exchanger) (AuthRequest, Client, error)

+ func ValidateAuthReqRedirectURI(ctx context.Context, uri, client_id string, responseType oidc.ResponseType, ...) error

+ func ValidateAuthReqResponseType(responseType oidc.ResponseType) error

+ func ValidateAuthReqScopes(scopes []string) error

+ func ValidateAuthRequest(ctx context.Context, authReq *oidc.AuthRequest, storage Storage) error

+ func ValidateIssuer(issuer string) error

+ func ValidateTokenExchangeRequest(tokenReq oidc.TokenRequest, storage Storage) error

+ type AccessTokenType int

+ type ApplicationType int

+ type AuthMethod string

+ type AuthRequest interface

+ Done func() bool

+ GetACR func() string

+ GetAMR func() []string

+ GetAudience func() []string

+ GetAuthTime func() time.Time

+ GetClientID func() string

+ GetCodeChallenge func() *oidc.CodeChallenge

+ GetID func() string

+ GetNonce func() string

+ GetRedirectURI func() string

+ GetResponseType func() oidc.ResponseType

+ GetScopes func() []string

+ GetState func() string

+ GetSubject func() string

+ func AuthRequestByCode(ctx context.Context, code string, crypto Crypto, storage AuthStorage) (AuthRequest, error)

+ func AuthorizeCodeChallenge(ctx context.Context, tokenReq *oidc.AccessTokenRequest, exchanger Exchanger) (AuthRequest, error)

+ type AuthStorage interface

+ AuthRequestByID func(context.Context, string) (AuthRequest, error)

+ CreateAuthRequest func(context.Context, *oidc.AuthRequest) (AuthRequest, error)

+ DeleteAuthRequest func(context.Context, string) error

+ GetKeySet func(context.Context) (*jose.JSONWebKeySet, error)

+ GetSigningKey func(context.Context) (*jose.SigningKey, error)

+ SaveKeyPair func(context.Context) (*jose.SigningKey, error)

+ type Authorizer interface

+ Crypto func() Crypto

+ Decoder func() *schema.Decoder

+ Encoder func() *schema.Encoder

+ Issuer func() string

+ Signer func() Signer

+ Storage func() Storage

+ type Client interface

+ AccessTokenLifetime func() time.Duration

+ AccessTokenType func() AccessTokenType

+ ApplicationType func() ApplicationType

+ GetAuthMethod func() AuthMethod

+ GetID func() string

+ IDTokenLifetime func() time.Duration

+ LoginURL func(string) string

+ RedirectURIs func() []string

+ type Config struct

+ CryptoKey [32]byte

+ Issuer string

+ Port string

+ type Configuration interface

+ AuthMethodPostSupported func() bool

+ AuthorizationEndpoint func() Endpoint

+ Issuer func() string

+ KeysEndpoint func() Endpoint

+ Port func() string

+ TokenEndpoint func() Endpoint

+ UserinfoEndpoint func() Endpoint

+ type Crypto interface

+ Decrypt func(string) (string, error)

+ Encrypt func(string) (string, error)

+ func NewAESCrypto(key [32]byte) Crypto

+ type DefaultOP struct

+ func (p *DefaultOP) AuthMethodPostSupported() bool

+ func (p *DefaultOP) AuthorizationEndpoint() Endpoint

+ func (p *DefaultOP) Crypto() Crypto

+ func (p *DefaultOP) Decoder() *schema.Decoder

+ func (p *DefaultOP) Encoder() *schema.Encoder

+ func (p *DefaultOP) HandleAuthorize(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) HandleAuthorizeCallback(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) HandleDiscovery(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) HandleExchange(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) HandleKeys(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) HandleUserinfo(w http.ResponseWriter, r *http.Request)

+ func (p *DefaultOP) HttpHandler() *http.Server

+ func (p *DefaultOP) Issuer() string

+ func (p *DefaultOP) KeysEndpoint() Endpoint

+ func (p *DefaultOP) Port() string

+ func (p *DefaultOP) Signer() Signer

+ func (p *DefaultOP) Storage() Storage

+ func (p *DefaultOP) TokenEndpoint() Endpoint

+ func (p *DefaultOP) UserinfoEndpoint() Endpoint

+ type DefaultOPOpts func(o *DefaultOP) error

+ func WithCustomAuthEndpoint(endpoint Endpoint) DefaultOPOpts

+ func WithCustomTokenEndpoint(endpoint Endpoint) DefaultOPOpts

+ func WithCustomUserinfoEndpoint(endpoint Endpoint) DefaultOPOpts

+ type Endpoint string

+ func (e Endpoint) Absolute(host string) string

+ func (e Endpoint) Relative() string

+ func (e Endpoint) Validate() error

+ type ErrAuthRequest interface

+ GetRedirectURI func() string

+ GetResponseType func() oidc.ResponseType

+ GetState func() string

+ type Exchanger interface

+ AuthMethodPostSupported func() bool

+ Crypto func() Crypto

+ Decoder func() *schema.Decoder

+ Issuer func() string

+ Signer func() Signer

+ Storage func() Storage

+ type KeyProvider interface

+ Storage func() Storage

+ type OAuthError struct

+ Description string

+ ErrorType errorType

+ func (e *OAuthError) Error() string

+ type OPStorage interface

+ AuthorizeClientIDSecret func(context.Context, string, string) error

+ GetClientByClientID func(context.Context, string) (Client, error)

+ GetUserinfoFromScopes func(context.Context, []string) (*oidc.Userinfo, error)

+ type OpenIDProvider interface

+ HandleAuthorize func(w http.ResponseWriter, r *http.Request)

+ HandleAuthorizeCallback func(w http.ResponseWriter, r *http.Request)

+ HandleDiscovery func(w http.ResponseWriter, r *http.Request)

+ HandleExchange func(w http.ResponseWriter, r *http.Request)

+ HandleKeys func(w http.ResponseWriter, r *http.Request)

+ HandleUserinfo func(w http.ResponseWriter, r *http.Request)

+ HttpHandler func() *http.Server

+ func NewDefaultOP(ctx context.Context, config *Config, storage Storage, opOpts ...DefaultOPOpts) (OpenIDProvider, error)

+ type Signer interface

+ SignAccessToken func(claims *oidc.AccessTokenClaims) (string, error)

+ SignIDToken func(claims *oidc.IDTokenClaims) (string, error)

+ SignatureAlgorithm func() jose.SignatureAlgorithm

+ func NewDefaultSigner(ctx context.Context, storage AuthStorage) (Signer, error)

+ type Storage interface

+ type TokenCreator interface

+ Crypto func() Crypto

+ Issuer func() string

+ Signer func() Signer

+ Storage func() Storage

+ type UserinfoProvider interface

+ Storage func() Storage

+ type ValidationAuthorizer interface

+ ValidateAuthRequest func(context.Context, *oidc.AuthRequest, Storage) error