jwt

Mar 6, 2025

Changes in this version

type Claims

+ Scope Audience

type MapClaims

+ func (c MapClaims) Strings(k string) []string

Oct 24, 2024

Changes in this version

type Parser

+ GetRevocation func() Revocation

+ SetRevocation func(Revocation)

+ type Revocation interface

+ Revoke func(ctx context.Context, token string, claims MapClaims) error

+ Validate func(ctx context.Context, token string, claims MapClaims) error

Jan 14, 2024

Changes in this version

type Provider

+ func NewProviderWithSymmetricKey(key []byte, ops ...Option) (Provider, error)

Oct 13, 2023

Changes in this version

+ type KeySet interface

+ GetKey func(ctx context.Context, kid string) (any, error)

type Parser

+ func NewParser(cfg *ParserConfig) (Parser, error)

+ type ParserConfig struct

+ Issuer string

+ JWKSURI string

+ JWKeySet *jose.JSONWebKeySet

+ func LoadParserConfig(file string) (*ParserConfig, error)

type Provider

+ func LoadProvider(cfgfile string, crypto *cryptoprov.Crypto) (Provider, error)

+ func MustNewProvider(cfg *ProviderConfig, crypto *cryptoprov.Crypto, ops ...Option) Provider

+ func NewProvider(cfg *ProviderConfig, crypto *cryptoprov.Crypto, ops ...Option) (Provider, error)

+ func NewProviderFromCryptoSigner(signer crypto.Signer, ops ...Option) (Provider, error)

+ type ProviderConfig struct

+ Issuer string

+ KeyID string

+ Keys []*Key

+ PrivateKey string

+ TokenExpiry csr.Duration

+ func LoadProviderConfig(file string) (*ProviderConfig, error)

+ type RemoteKeySet struct

+ func NewRemoteKeySet(ctx context.Context, jwksURL string) *RemoteKeySet

+ func (r *RemoteKeySet) GetKey(ctx context.Context, keyID string) (any, error)

+ type StaticKeySet struct

+ KeySet []jose.JSONWebKey

+ PublicKeys []crypto.PublicKey

+ func (s *StaticKeySet) GetKey(ctx context.Context, keyID string) (any, error)

Sep 22, 2023

Changes in this version

type Config

+ TokenExpiry csr.Duration

type Signer

+ TokenExpiry func() time.Duration

Dec 10, 2022

Changes in this version

type Claims

+ Cnf *Cnf

+ Org string

+ OrgRole string

+ Tenant string

+ type Cnf struct

+ Jkt string

type MapClaims

+ func (c MapClaims) CNF() *Cnf

+ func (c MapClaims) StringsMap(k string) map[string]string

+ func (c MapClaims) TimeVal(k string) time.Time

Sep 27, 2022

Changes in this version

type Claims

+ Email string

+ EmailVerified bool

+ Name string

+ Orgs map[string]string

+ Phone string

+ PhoneVerified bool

+ Profile string

+ Role string

type MapClaims

+ func (c MapClaims) Int64(k string) int64

+ func (c MapClaims) UInt64(k string) uint64

Jul 20, 2022

Changes in this version

+ var DefaultTimeSkew = 5 * time.Minute

+ var TimeNowFn = time.Now

+ func CopyUserInfoClaims(src, dst MapClaims)

+ func DecodeSegment(seg string) ([]byte, error)

+ func SetClaimsExpiration(claims MapClaims, expiry time.Duration)

+ func VerifySignature(algo, signingString, signature string, key interface{}) error

+ type Audience []string

+ func (s *Audience) UnmarshalJSON(b []byte) error

+ func (s Audience) Contains(expected string) bool

type Claims

+ Audience Audience

+ CNF map[string]interface{}

+ Expiry *NumericDate

+ HTTPMethod string

+ HTTPUri string

+ ID string

+ IssuedAt *NumericDate

+ Issuer string

+ Nonce string

+ NotBefore *NumericDate

+ Subject string

+ func (c *Claims) VerifyAudience(expected []string) error

+ func (c *Claims) VerifyExpiresAt(now time.Time, req bool) error

+ func (c *Claims) VerifyIssuedAt(now time.Time, req bool) error

+ func (c *Claims) VerifyIssuer(expected string) error

+ func (c *Claims) VerifyNotBefore(now time.Time, req bool) error

+ func (c *Claims) VerifySubject(expected string) error

+ type Keyfunc func(*Token) (interface{}, error)

+ type MapClaims map[string]interface

+ func (c MapClaims) Add(val ...interface{}) error

+ func (c MapClaims) Bool(k string) bool

+ func (c MapClaims) Int(k string) int

+ func (c MapClaims) Marshal() string

+ func (c MapClaims) String(k string) string

+ func (c MapClaims) Time(k string) *time.Time

+ func (c MapClaims) To(val interface{}) error

+ func (c MapClaims) Valid(cfg VerifyConfig) error

+ func (c MapClaims) VerifyAudience(expected []string) error

+ func (c MapClaims) VerifyExpiresAt(now time.Time, req bool) error

+ func (c MapClaims) VerifyIssuedAt(now time.Time, req bool) error

+ func (c MapClaims) VerifyIssuer(expected string) error

+ func (c MapClaims) VerifyNotBefore(now time.Time, req bool) error

+ func (c MapClaims) VerifySubject(expected string) error

+ func CreateClaims(jti, subject, issuer string, audience []string, expiry time.Duration, ...) MapClaims

+ type NumericDate int64

+ func NewNumericDate(t time.Time) *NumericDate

+ func (n *NumericDate) Time() time.Time

+ func (n *NumericDate) UnmarshalJSON(b []byte) error

+ func (n NumericDate) MarshalJSON() ([]byte, error)

type Signer

+ Issuer func() string

+ Sign func(claims MapClaims) (string, error)

+ type Token struct

+ Claims ValidClaims

+ Header map[string]interface{}

+ Raw string

+ Signature string

+ SigningMethod string

+ Valid bool

+ type TokenParser struct

+ SkipClaimsValidation bool

+ UseJSONNumber bool

+ ValidMethods []string

+ func (p *TokenParser) Parse(tokenString string, cfg VerifyConfig, keyFunc Keyfunc) (*Token, error)

+ func (p *TokenParser) ParseUnverified(tokenString string, claims MapClaims) (token *Token, parts []string, err error)

+ func (p *TokenParser) ParseWithClaims(tokenString string, cfg VerifyConfig, claims MapClaims, keyFunc Keyfunc) (*Token, error)

+ type ValidClaims interface

+ Valid func(cfg VerifyConfig) error

type VerifyConfig

+ ExpectedIssuer string

Feb 21, 2022

Changes in this version

+ const DefaultNotBefore

+ func EncodeSegment(seg []byte) string

+ type Claims jwt.MapClaims

+ func (c Claims) Add(val ...interface{}) error

+ func (c Claims) Bool(k string) bool

+ func (c Claims) Int(k string) int

+ func (c Claims) Marshal() string

+ func (c Claims) String(k string) string

+ func (c Claims) Time(k string) *time.Time

+ func (c Claims) To(val interface{}) error

+ func (c Claims) Valid() error

+ type Config struct

+ Issuer string

+ KeyID string

+ Keys []*Key

+ PrivateKey string

+ func LoadConfig(file string) (*Config, error)

+ type Key struct

+ ID string

+ Seed string

+ type Option interface

+ func WithHeaders(headers map[string]interface{}) Option

+ type Parser interface

+ ParseToken func(authorization string, cfg *VerifyConfig) (Claims, error)

+ type Provider interface

+ func Load(cfgfile string, crypto *cryptoprov.Crypto) (Provider, error)

+ func MustNew(cfg *Config, crypto *cryptoprov.Crypto, ops ...Option) Provider

+ func New(cfg *Config, crypto *cryptoprov.Crypto, ops ...Option) (Provider, error)

+ func NewFromCryptoSigner(signer crypto.Signer, ops ...Option) (Provider, error)

+ type Signer interface

+ PublicKey func() crypto.PublicKey

+ SignToken func(id, subject string, audience []string, expiry time.Duration, ...) (string, Claims, error)

+ type SignerInfo struct

+ func NewSignerInfo(signer crypto.Signer) (*SignerInfo, error)

+ type VerifyConfig struct

+ ExpectedAudience string

+ ExpectedSubject string