Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

oauthflow

package

Go to main page

Versions in this module

v1

v1.120.0

Aug 3, 2026

v1.119.0

Jul 29, 2026

v1.118.0

Jul 28, 2026

v1.117.0

Jul 27, 2026

v1.116.0

Jul 24, 2026

v1.115.0

Jul 22, 2026

v1.114.0

Jul 21, 2026

Changes in this version

+ func BuildAuthorizationURL(authEndpoint, clientID, redirectURI, state, codeChallenge, resourceURL string, ...) string

+ func DefaultHTTPClient() *http.Client

+ func GeneratePKCEVerifier() string

+ func GenerateState() (string, error)

+ func HTTPClientForAllowPrivateIPs(allowPrivateIPs bool) *http.Client

+ func RegisterClient(ctx context.Context, authMetadata *AuthorizationServerMetadata, ...) (clientID, clientSecret string, err error)

+ func RegisterClientWithClient(ctx context.Context, client *http.Client, ...) (clientID, clientSecret string, err error)

+ func RequestAuthorizationCode(ctx context.Context, authURL string, callbackServer *CallbackServer, ...) (string, string, error)

+ func SetHTTPClientForTesting(c *http.Client) (restore func())

+ type AuthorizationServerMetadata struct

+ AuthorizationEndpoint string

+ CodeChallengeMethodsSupported []string

+ GrantTypesSupported []string

+ IntrospectionEndpoint string

+ Issuer string

+ JwksURI string

+ RegistrationEndpoint string

+ ResponseModesSupported []string

+ ResponseTypesSupported []string

+ RevocationEndpoint string

+ RevocationEndpointAuthMethodsSupported []string

+ ScopesSupported []string

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ type CallbackServer struct

+ func NewCallbackServer(ctx context.Context) (*CallbackServer, error)

+ func NewCallbackServerOnPort(ctx context.Context, port int) (*CallbackServer, error)

+ func (cs *CallbackServer) GetRedirectURI() string

+ func (cs *CallbackServer) Port() int

+ func (cs *CallbackServer) ResolveRedirectURI(callbackRedirectURL string) string

+ func (cs *CallbackServer) SetExpectedState(state string)

+ func (cs *CallbackServer) Shutdown(ctx context.Context) error

+ func (cs *CallbackServer) Start() error

+ func (cs *CallbackServer) WaitForCallback(ctx context.Context) (code, state string, err error)

+ type OAuthToken struct

+ AccessToken string

+ AuthServer string

+ ClientID string

+ ClientSecret string

+ ExpiresAt time.Time

+ ExpiresIn int

+ RefreshToken string

+ RequestedScopes []string

+ Scope string

+ TokenType string

+ func ExchangeCodeForToken(ctx context.Context, ...) (*OAuthToken, error)

+ func ExchangeCodeForTokenWithClient(ctx context.Context, client *http.Client, ...) (*OAuthToken, error)

+ func ExchangeCodeForTokenWithResource(ctx context.Context, ...) (*OAuthToken, error)

+ func RefreshAccessToken(ctx context.Context, ...) (*OAuthToken, error)

+ func RefreshAccessTokenWithClient(ctx context.Context, client *http.Client, ...) (*OAuthToken, error)

+ func (t *OAuthToken) IsExpired() bool