Documentation
¶
Index ¶
- func DiscoveryURL(issuer string) (string, error)
- func InferOAuth2IntrospectionConfig(spec api.OAuth2ProviderSpec) (*api.OAuth2Introspection, error)
- func NormalizeAuthProviderSpecURLs(spec *api.AuthProviderSpec) error
- func NormalizeIssuerURL(issuer string) (string, error)
- func NormalizeOAuth2ProviderSpecURLs(spec *api.OAuth2ProviderSpec) error
- func NormalizeOIDCProviderSpecURLs(spec *api.OIDCProviderSpec) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func DiscoveryURL ¶ added in v1.2.0
DiscoveryURL returns the OIDC discovery URL for the given issuer (/.well-known/openid-configuration). The issuer is normalized before building the path.
func InferOAuth2IntrospectionConfig ¶
func InferOAuth2IntrospectionConfig(spec api.OAuth2ProviderSpec) (*api.OAuth2Introspection, error)
InferOAuth2IntrospectionConfig attempts to infer a sensible introspection configuration based on the OAuth2 provider URLs. Returns an error if no introspection can be inferred.
func NormalizeAuthProviderSpecURLs ¶ added in v1.3.0
func NormalizeAuthProviderSpecURLs(spec *api.AuthProviderSpec) error
NormalizeAuthProviderSpecURLs normalizes URL fields in auth provider specs before storing or constructing auth middleware. Unknown/malformed provider types are skipped so callers can surface validation errors separately.
func NormalizeIssuerURL ¶ added in v1.2.0
NormalizeIssuerURL parses an issuer URL and returns a canonical form: scheme and host lowercased, and no trailing slash on path. Path, query, and fragment case are preserved (OIDC issuer paths are case-sensitive). Requires scheme and host. Used so discovery, token verification, unique indexes, and cache keys share one form.
func NormalizeOAuth2ProviderSpecURLs ¶ added in v1.3.0
func NormalizeOAuth2ProviderSpecURLs(spec *api.OAuth2ProviderSpec) error
NormalizeOAuth2ProviderSpecURLs canonicalizes OAuth2 URL fields used for identity and uniqueness (authorizationUrl, issuer, tokenUrl, userinfoUrl) via NormalizeIssuerURL.
func NormalizeOIDCProviderSpecURLs ¶ added in v1.3.0
func NormalizeOIDCProviderSpecURLs(spec *api.OIDCProviderSpec) error
NormalizeOIDCProviderSpecURLs canonicalizes issuer-identity URL fields on an OIDC spec via NormalizeIssuerURL (lowercase + trailing-slash strip).
Types ¶
This section is empty.