oidc

Oct 12, 2026

Changes in this version

+ var ErrUnavailable = errors.New("OIDC dependency unavailable")

+ func PrepareService(config ValidatorConfig) (ValidatorConfig, *Validator, error)

type Validator

+ func (v *Validator) Ready() error

+ func (v *Validator) Run(ctx context.Context, logger *slog.Logger) error

type Verifier

+ func (v *Verifier) Ready() error

+ func (v *Verifier) Run(ctx context.Context, logger *slog.Logger) error

Oct 10, 2026

Changes in this version

+ var ErrDeviceAuthorizationUnsupported = errors.New("OIDC issuer does not advertise device authorization")

+ var Scopes = []string

+ func Authenticate(ctx context.Context, cfg LoginConfig, prev *oauth2.Token, out io.Writer) (idToken string, next *oauth2.Token, err error)

+ func ResolveUserIDClaim(issuer, override string) string

+ type Claims struct

+ ExpiresAt time.Time

+ Issuer string

+ Subject string

+ UserID string

+ type IdentityMode string

+ const StableID

+ const VerifiedEmail

+ func ResolveIdentity(issuer string, mode IdentityMode, override string) (IdentityMode, string, error)

+ type LoginConfig struct

+ ClientID string

+ ClientSecret string

+ IssuerURL string

+ LoginMethod LoginMethod

+ TLSConfig tlsconfig.Config

+ type LoginMethod uint8

+ const LoginBrowser

+ const LoginDevice

+ type Validator struct

+ func NewValidator(ctx context.Context, config ValidatorConfig) (*Validator, error)

+ func (v *Validator) Validate(ctx context.Context, tokenString string) (*Claims, error)

+ type ValidatorConfig struct

+ ClientID string

+ IdentityMode IdentityMode

+ Issuer string

+ TLSConfig tlsconfig.Config

+ UserIDClaim string

+ type Verifier struct

+ func NewVerifier(ctx context.Context, config VerifierConfig) (*Verifier, error)

+ func (v *Verifier) Verify(ctx context.Context, token string) (*coreoidc.IDToken, error)

+ type VerifierConfig struct

+ ClientID string

+ IssuerURL string

+ TLSConfig tlsconfig.Config