oidfed

package module

Go to main page

Versions in this module

v0

v0.10.10

May 28, 2026

v0.10.9

May 12, 2026

v0.10.8

May 11, 2026

Changes in this version

type OpenIDRelyingPartyMetadata

+ AuthorizationEncryptedResponseAlg string

+ AuthorizationEncryptedResponseEnc string

+ AuthorizationEncryptionAlgValuesSupported []string

+ AuthorizationEncryptionEncValuesSupported []string

+ AuthorizationSignedResponseAlg string

+ AuthorizationSigningAlgValuesSupported []string

+ IDTokenEncryptionAlgValuesSupported []string

+ IDTokenEncryptionEncValuesSupported []string

+ IDTokenSigningAlgValuesSupported []string

+ IntrospectionEncryptionAlgValuesSupported []string

+ IntrospectionEncryptionEncValuesSupported []string

+ IntrospectionSigningAlgValuesSupported []string

+ RequestObjectEncryptionAlgValuesSupported []string

+ RequestObjectEncryptionEncValuesSupported []string

+ RequestObjectSigningAlgValuesSupported []string

+ SubjectTypesSupported []string

+ TokenEndpointAuthMethodsSupported []string

+ TokenEndpointAuthSigningAlgValuesSupported []string

+ UserinfoEncryptionAlgValuesSupported []string

+ UserinfoEncryptionEncValuesSupported []string

+ UserinfoSigningAlgValuesSupported []string

v0.10.7

May 11, 2026

Changes in this version

type DynamicFederationEntity

+ ShouldApplyInformationalClaims func() (bool, error)

type StaticFederationEntity

+ ShouldApplyInformationalClaims bool

v0.10.6

May 8, 2026

Changes in this version

type TrustChains

+ func (c TrustChains) MinExpiresAt() (minExpiration unixtime.Unixtime)

v0.10.5

May 5, 2026

v0.10.4

Apr 30, 2026

v0.10.3

Apr 27, 2026

Changes in this version

type EntityCollectionResponse

+ Entities []*CollectedEntity

+ Next string

v0.10.2

Apr 10, 2026

v0.10.1

Apr 7, 2026

v0.10.0

Apr 7, 2026

Changes in this version

+ type DynamicFederationEntity struct

+ AuthorityHints func() ([]string, error)

+ ConfigurationLifetime func() (time.Duration, error)

+ EntityStatementSigner func() (*jwx.EntityStatementSigner, error)

+ Extra func() (map[string]any, []string, error)

+ ID string

+ Metadata func() (*Metadata, error)

+ TrustAnchorHints func() ([]string, error)

+ TrustMarkIssuers func() (AllowedTrustMarkIssuers, error)

+ TrustMarkOwners func() (TrustMarkOwners, error)

+ TrustMarks func() ([]*EntityConfigurationTrustMarkConfig, error)

+ func (f DynamicFederationEntity) EntityConfigurationJWT() ([]byte, error)

+ func (f DynamicFederationEntity) EntityConfigurationPayload() (*EntityStatementPayload, error)

+ func (f DynamicFederationEntity) EntityID() string

+ func (f DynamicFederationEntity) SignEntityStatement(payload EntityStatementPayload) ([]byte, error)

+ func (f DynamicFederationEntity) SignEntityStatementWithHeaders(payload EntityStatementPayload, headers jws.Headers) ([]byte, error)

type EntityConfigurationTrustMarkConfig

+ RefreshRateLimit duration.DurationOption

+ func (c *EntityConfigurationTrustMarkConfig) Expiration() unixtime.Unixtime

+ func (c *EntityConfigurationTrustMarkConfig) TrustMarkInfo() (TrustMarkInfo, error)

type FederationEntity

+ SignEntityStatementWithHeaders func(payload EntityStatementPayload, headers jws.Headers) ([]byte, error)

+ type IssueTrustMarkOptions struct

+ Lifetime time.Duration

+ SubjectClaims map[string]any

+ type MapTrustMarkSpecProvider struct

+ func NewMapTrustMarkSpecProvider(specs []TrustMarkSpec) *MapTrustMarkSpecProvider

+ func (p *MapTrustMarkSpecProvider) AddTrustMark(spec TrustMarkSpec)

+ func (p *MapTrustMarkSpecProvider) GetTrustMarkSpec(trustMarkType string) *TrustMarkSpec

+ func (p *MapTrustMarkSpecProvider) RemoveTrustMark(trustMarkType string)

+ func (p *MapTrustMarkSpecProvider) TrustMarkTypes() []string

+ type SelfIssuedTrustMarkIssuer struct

+ EntityID string

+ func NewSelfIssuedTrustMarkIssuer(entityID string, signer *jwx.TrustMarkSigner, ...) *SelfIssuedTrustMarkIssuer

+ func (tmi *SelfIssuedTrustMarkIssuer) AddTrustMark(spec SelfIssuedTrustMarkSpec)

+ func (tmi *SelfIssuedTrustMarkIssuer) TrustMarkTypes() []string

+ func (tmi SelfIssuedTrustMarkIssuer) IssueTrustMark(trustMarkType, sub string, lifetime ...time.Duration) (*TrustMarkInfo, error)

+ type SelfIssuedTrustMarkSpec struct

+ IncludeExtraClaimsInInfo bool

+ type StaticFederationEntity struct

+ AuthorityHints []string

+ ConfigurationLifetime time.Duration

+ CriticalClaims []string

+ Extra map[string]any

+ ID string

+ Metadata *Metadata

+ TrustAnchorHints []string

+ TrustMarkIssuers AllowedTrustMarkIssuers

+ TrustMarkOwners TrustMarkOwners

+ TrustMarks []*EntityConfigurationTrustMarkConfig

+ func (f StaticFederationEntity) EntityConfigurationJWT() ([]byte, error)

+ func (f StaticFederationEntity) EntityConfigurationPayload() (*EntityStatementPayload, error)

+ func (f StaticFederationEntity) EntityID() string

+ func (f StaticFederationEntity) SignEntityStatement(payload EntityStatementPayload) ([]byte, error)

+ func (f StaticFederationEntity) SignEntityStatementWithHeaders(payload EntityStatementPayload, headers jws.Headers) ([]byte, error)

type TrustMarkIssuer

+ func (tmi *TrustMarkIssuer) HasTrustMarkType(trustMarkType string) bool

+ func (tmi *TrustMarkIssuer) IssueTrustMarkWithOptions(trustMarkType, sub string, opts IssueTrustMarkOptions) (string, *unixtime.Unixtime, error)

+ func (tmi *TrustMarkIssuer) RemoveTrustMark(trustMarkType string)

+ func (tmi *TrustMarkIssuer) SetProvider(provider TrustMarkSpecProvider)

+ type TrustMarkSpecProvider interface

+ GetTrustMarkSpec func(trustMarkType string) *TrustMarkSpec

+ TrustMarkTypes func() []string

v0.9.1

Mar 2, 2026

v0.9.0

Dec 2, 2025

Changes in this version

type EntityStatementPayload

+ TrustAnchorHints []string

type FederationLeaf

+ RequestURIGenerator RequestURIGenerator

+ type RequestURIGenerator func([]byte) (string, error)

+ type TrustAnchorHintsMode string

+ const TrustAnchorHintsModeIgnore

+ const TrustAnchorHintsModePrefer

+ const TrustAnchorHintsModeRequire

type TrustResolver

+ TrustAnchorHintsMode TrustAnchorHintsMode

v0.8.4

Nov 20, 2025

v0.8.3

Nov 19, 2025

Changes in this version

+ func SetLogFormatter(f logrus.Formatter)

+ func SetLogLevel(level logrus.Level)

+ func SetLogOutput(w io.Writer)

v0.8.2

Nov 10, 2025

v0.8.1

Oct 30, 2025

v0.8.0

Oct 24, 2025

Changes in this version

+ const EntityIDNotFound

+ func AdjustRPMetadataToOP(rp *OpenIDRelyingPartyMetadata, op *OpenIDProviderMetadata)

+ func VerifyEntityHasValidTrustmarkByTrustAnchors(entityID, trustMarkType string, trustAnchors TrustAnchors) (error, error)

+ func VerifyEntityHasValidTrustmarkByTrustMarkIssuerJWKS(entityID, trustMarkType string, trustMarkIssuerJWKS jwx.JWKS, ...) (error, error)

+ func VerifyEntityHasValidTrustmarks(entityID string, trustMarkTypes []string, trustAnchors TrustAnchors) (bool, error)

type CollectedEntity

+ func FilterAndTrimEntities(cached []*CollectedEntity, req apimodel.EntityCollectionRequest) []*CollectedEntity

+ type EntityObserver interface

+ OnDiscoveredEntities func(trustAnchor string, entities []*CollectedEntity)

type EntityStatementPayload

+ TrustAnchor string

+ type ErrorResponse struct

+ Status int

type FederationLeaf

+ func (f FederationLeaf) DoExplicitClientRegistration(op string) (*EntityStatementPayload, *http.HttpError, error)

+ func (f FederationLeaf) GetExplicitRegistration(op string) (*OpenIDRelyingPartyMetadata, *http.HttpError, error)

+ func (f FederationLeaf) GetExplicitRegistrationOIDCRP(op string, ctx context.Context) (*OIDCRP, error)

+ type OIDCRP struct

type OpenIDProviderMetadata

+ IDTokenEncryptionAlgValuesSupported []string

+ IDTokenEncryptionEncValuesSupported []string

+ IDTokenSigningAlgValuesSupported []string

+ RequestObjectEncryptionAlgValuesSupported []string

+ RequestObjectEncryptionEncValuesSupported []string

+ RequestObjectSigningAlgValuesSupported []string

type OpenIDRelyingPartyMetadata

+ RequestObjectEncryptionAlg string

+ RequestObjectEncryptionEnc string

+ RequestObjectSigningAlg string

+ type PeriodicEntityCollector struct

+ Collector EntityCollector

+ Concurrency int

+ Handler EntityObserver

+ Interval time.Duration

+ PagingLimit int

+ SortEntitiesComparisonFunc func(a, b *CollectedEntity) int

+ TrustAnchors []string

+ func (p *PeriodicEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (*EntityCollectionResponse, *ErrorResponse)

+ func (p *PeriodicEntityCollector) Start()

+ func (p *PeriodicEntityCollector) Stop()

+ type ProactiveResolver struct

+ Concurrency int

+ EntityID string

+ QueueSize int

+ RefreshLead time.Duration

+ Signer *jwx.ResolveResponseSigner

+ Store ResolveResponseStorage

+ func (r *ProactiveResolver) Enqueue(req apimodel.ResolveRequest)

+ func (r *ProactiveResolver) OnDiscoveredEntities(trustAnchor string, entities []*CollectedEntity)

+ func (r *ProactiveResolver) Start()

+ func (r *ProactiveResolver) Stop()

+ type ResolveResponseKey struct

+ Subject string

+ Types []string

type ResolveResponsePayload

+ TrustAnchor string

+ type ResolveResponseStorage interface

+ Prune func(trustAnchor string, expected []ResolveResponseKey) error

+ ReadJSON func(subject, trustAnchor string, types []string) (*ResolveResponse, error)

+ ReadJWT func(subject, trustAnchor string, types []string) ([]byte, error)

+ WriteJSON func(subject, trustAnchor string, types []string, payload ResolveResponse) error

+ WriteJWT func(subject, trustAnchor string, types []string, jwt func() ([]byte, error)) error

+ type ResolveStore struct

+ BaseDir string

+ StoreJSON bool

+ StoreJWT bool

+ func (s ResolveStore) Prune(trustAnchor string, expected []ResolveResponseKey) error

+ func (s ResolveStore) ReadJSON(subject, trustAnchor string, types []string) (*ResolveResponse, error)

+ func (s ResolveStore) ReadJWT(subject, trustAnchor string, types []string) ([]byte, error)

+ func (s ResolveStore) WriteJSON(subject, trustAnchor string, types []string, res ResolveResponse) error

+ func (s ResolveStore) WriteJWT(subject, trustAnchor string, types []string, jwt func() ([]byte, error)) error

type TrustMarkInfos

+ func (tms TrustMarkInfos) FindByType(trustMarkType string) *TrustMarkInfo

v0.7.1

Aug 22, 2025

v0.7.0

Aug 19, 2025

Changes in this version

type Metadata

+ func (m *Metadata) ApplyInformationalClaimsToFederationEntity()

+ func (m Metadata) GuessMultilingualDisplayNames() map[string]map[string]string

+ func (m Metadata) IterateMultilingualStringClaim(tag string, iterator func(entityType, langTag, value string))

+ type MultilingualString map[string]string

+ func (m MultilingualString) String() string

+ type MultilingualUIInfo struct

+ Description MultilingualString

+ DisplayName MultilingualString

+ Extra map[string]any

+ InformationURI MultilingualString

+ Keywords []string

+ LogoURI MultilingualString

+ PolicyURI MultilingualString

v0.6.0

Aug 4, 2025

Changes in this version

type FederationEntity

+ MetadataUpdater func(*Metadata)

type OpenIDProviderMetadata

+ RequestObjectEncryptedResponseAlgValuesSupported []string

+ RequestObjectEncryptedResponseEncValuesSupported []string

+ RequestObjectSignedResponseAlgValuesSupported []string

v0.5.0

Jun 17, 2025

Changes in this version

+ const InvalidClient

+ const InvalidIssuer

+ const InvalidMetadata

+ const InvalidRequest

+ const InvalidSubject

+ const InvalidTrustAnchor

+ const InvalidTrustChain

+ const MatchModeExactCaseInsensitive

+ const MatchModeExactCaseSensitive

+ const MatchModeFuzzy

+ const MatchModeSubstringCaseInsensitive

+ const MatchModeSubstringCaseSensitive

+ const NotFound

+ const ServerError

+ const TemporarilyUnavailable

+ const UnsupportedParameter

+ var OperatorOrder = []PolicyOperatorName

+ var ResolverCacheGracePeriod = time.Hour

+ var ResolverCacheLifetimeElapsedGraceFactor = 0.5

+ var TrustChainsFilterValidMetadata = NewTrustChainsFilterFromCheckerFnc(func(chain TrustChain) bool { ... })

+ func DisableDebugLogging()

+ func EnableDebugLogging()

+ func RegisterPolicyOperator(operator PolicyOperator)

+ func RegisterPolicyVerifier(v PolicyVerifier)

+ func TrustChainScoringPathLen(c TrustChain) int

+ type AllowedTrustMarkIssuers map[string][]string

+ type CollectedEntity struct

+ EntityID string

+ EntityTypes []string

+ Extra map[string]any

+ TrustChain JWSMessages

+ TrustMarks TrustMarkInfos

+ UIInfos map[string]UIInfo

+ func (e *CollectedEntity) UnmarshalJSON(data []byte) error

+ func (e CollectedEntity) MarshalJSON() ([]byte, error)

+ type ConstraintSpecification struct

+ AllowedEntityTypes []string

+ MaxPathLength *int

+ NamingConstraints *NamingConstraints

+ type DelegationJWT struct

+ ExpiresAt *unixtime.Unixtime

+ Extra map[string]interface{}

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ Ref string

+ Subject string

+ TrustMarkType string

+ func (djwt *DelegationJWT) UnmarshalJSON(data []byte) error

+ func (djwt DelegationJWT) MarshalJSON() ([]byte, error)

+ func (djwt DelegationJWT) VerifyExternal(jwks jwks.JWKS) error

+ func (djwt DelegationJWT) VerifyFederation(ta *EntityStatementPayload) error

+ type DisplayNameGuesser interface

+ GuessDisplayName func() string

+ type EntityCollectionFilter interface

+ Filter func(*CollectedEntity) bool

+ func EntityCollectionFilterOPSupportedGrantTypesIncludes(trustAnchorIDs []string, neededGrantTypes ...string) EntityCollectionFilter

+ func EntityCollectionFilterOPSupportedScopesIncludes(trustAnchorIDs []string, neededScopes ...string) EntityCollectionFilter

+ func EntityCollectionFilterOPSupportsAutomaticRegistration(trustAnchorIDs []string) EntityCollectionFilter

+ func EntityCollectionFilterOPSupportsExplicitRegistration(trustAnchorIDs []string) EntityCollectionFilter

+ func EntityCollectionFilterOPs() EntityCollectionFilter

+ func NewEntityCollectionFilter(filter func(entity *CollectedEntity) bool) EntityCollectionFilter

+ type EntityCollectionFilterVerifiedChains struct

+ TrustAnchors TrustAnchors

+ func (f EntityCollectionFilterVerifiedChains) Filter(e *CollectedEntity) bool

+ type EntityCollectionResponse struct

+ Extra map[string]any

+ FederationEntities []*CollectedEntity

+ LastUpdated *unixtime.Unixtime

+ NextEntityID string

+ type EntityCollector interface

+ CollectEntities func(req apimodel.EntityCollectionRequest) []*CollectedEntity

+ type EntityConfigurationTrustMarkConfig struct

+ JWT string

+ MinLifetime unixtime.DurationInSeconds

+ Refresh bool

+ RefreshGracePeriod unixtime.DurationInSeconds

+ SelfIssuanceSpec TrustMarkSpec

+ SelfIssued bool

+ TrustMarkIssuer string

+ TrustMarkType string

+ func (c *EntityConfigurationTrustMarkConfig) TrustMarkJWT() (string, error)

+ func (c *EntityConfigurationTrustMarkConfig) Verify(sub, ownTrustMarkEndpoint string, ownTrustMarkSigner *TrustMarkSigner) error

+ type EntityStatement struct

+ func FetchEntityStatement(fetchEndpoint, subID, issID string) (*EntityStatement, error)

+ func GetEntityConfiguration(entityID string) (*EntityStatement, error)

+ func ParseEntityStatement(statementJWT []byte) (*EntityStatement, error)

+ func (e *EntityStatement) UnmarshalMsgpack(data []byte) error

+ func (e EntityStatement) MarshalMsgpack() ([]byte, error)

+ func (e EntityStatement) Verify(keys jwks.JWKS) bool

+ type EntityStatementPayload struct

+ Audience string

+ AuthorityHints []string

+ Constraints *ConstraintSpecification

+ CriticalExtensions []string

+ ExpiresAt unixtime.Unixtime

+ Extra map[string]interface{}

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ JWKS jwks.JWKS

+ Metadata *Metadata

+ MetadataPolicy *MetadataPolicies

+ MetadataPolicyCrit []PolicyOperatorName

+ SourceEndpoint string

+ Subject string

+ TrustAnchorID string

+ TrustMarkIssuers AllowedTrustMarkIssuers

+ TrustMarkOwners TrustMarkOwners

+ TrustMarks TrustMarkInfos

+ func (e *EntityStatementPayload) UnmarshalJSON(data []byte) error

+ func (e *EntityStatementPayload) UnmarshalMsgpack(data []byte) error

+ func (e EntityStatementPayload) MarshalJSON() ([]byte, error)

+ func (e EntityStatementPayload) TimeValid() bool

+ type EntityStatementSigner struct

+ func NewEntityStatementSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *EntityStatementSigner

+ func (s EntityStatementSigner) JWT(i any) (jwt []byte, err error)

+ type Error struct

+ Error string

+ ErrorDescription string

+ func ErrorInvalidClient(description string) Error

+ func ErrorInvalidIssuer(description string) Error

+ func ErrorInvalidMetadata(description string) Error

+ func ErrorInvalidRequest(description string) Error

+ func ErrorInvalidSubject(description string) Error

+ func ErrorInvalidTrustAnchor(description string) Error

+ func ErrorInvalidTrustChain(description string) Error

+ func ErrorNotFound(description string) Error

+ func ErrorServerError(description string) Error

+ func ErrorTemporarilyUnavailable(description string) Error

+ func ErrorUnsupportedParameter(description string) Error

+ type FederationEntity struct

+ AuthorityHints []string

+ ConfigurationLifetime int64

+ EntityID string

+ Extra map[string]any

+ Metadata *Metadata

+ TrustMarkIssuers AllowedTrustMarkIssuers

+ TrustMarkOwners TrustMarkOwners

+ TrustMarks []*EntityConfigurationTrustMarkConfig

+ func NewFederationEntity(entityID string, authorityHints []string, metadata *Metadata, ...) (*FederationEntity, error)

+ func (f FederationEntity) EntityConfigurationJWT() ([]byte, error)

+ func (f FederationEntity) EntityConfigurationPayload() *EntityStatementPayload

+ func (f FederationEntity) SignEntityStatement(payload EntityStatementPayload) ([]byte, error)

+ type FederationEntityMetadata struct

+ Contacts []string

+ Description string

+ DisplayName string

+ Extra map[string]any

+ FederationFetchEndpoint string

+ FederationHistoricalLKeysEndpoint string

+ FederationListEndpoint string

+ FederationResolveEndpoint string

+ FederationTrustMarkEndpoint string

+ FederationTrustMarkListEndpoint string

+ FederationTrustMarkStatusEndpoint string

+ InformationURI string

+ Keywords []string

+ LogoURI string

+ OrganizationName string

+ OrganizationURI string

+ PolicyURI string

+ func (m *FederationEntityMetadata) UnmarshalJSON(data []byte) error

+ func (m *FederationEntityMetadata) UnmarshalMsgpack(data []byte) error

+ func (m FederationEntityMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m FederationEntityMetadata) GuessDisplayName() string

+ func (m FederationEntityMetadata) MarshalJSON() ([]byte, error)

+ type FederationLeaf struct

+ TrustAnchors TrustAnchors

+ func NewFederationLeaf(entityID string, authorityHints []string, trustAnchors TrustAnchors, ...) (*FederationLeaf, error)

+ func (f FederationLeaf) CodeExchange(issuer, code, redirectURI string, additionalParameter url.Values) (*OIDCTokenResponse, *OIDCErrorResponse, error)

+ func (f FederationLeaf) GetAuthorizationURL(issuer, redirectURI, state, scope string, additionalParams url.Values) (string, error)

+ func (f FederationLeaf) RequestObjectProducer() *RequestObjectProducer

+ func (f FederationLeaf) ResolveOPMetadata(issuer string) (*OpenIDProviderMetadata, error)

+ type FilterableVerifiedChainsEntityCollector struct

+ Collector EntityCollector

+ Filters []EntityCollectionFilter

+ func (d FilterableVerifiedChainsEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

+ type GeneralJWTSigner struct

+ func NewGeneralJWTSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *GeneralJWTSigner

+ func (s *GeneralJWTSigner) EntityStatementSigner() *EntityStatementSigner

+ func (s *GeneralJWTSigner) JWKS() jwks.JWKS

+ func (s *GeneralJWTSigner) ResolveResponseSigner() *ResolveResponseSigner

+ func (s *GeneralJWTSigner) TrustMarkDelegationSigner() *TrustMarkDelegationSigner

+ func (s *GeneralJWTSigner) TrustMarkSigner() *TrustMarkSigner

+ func (s *GeneralJWTSigner) Typed(headerType string) *TypedJWTSigner

+ func (s GeneralJWTSigner) JWT(i any, headerType string) (jwt []byte, err error)

+ type JWSMessages []*jwx.ParsedJWT

+ func (m *JWSMessages) UnmarshalJSON(data []byte) error

+ func (m JWSMessages) MarshalJSON() ([]byte, error)

+ type JWTSigner interface

+ JWKS func() jwk.Set

+ JWT func(i any) (jwt []byte, err error)

+ type LocalMetadataResolver struct

+ func (LocalMetadataResolver) ResolvePossible(req apimodel.ResolveRequest) (bool, bool)

+ func (r LocalMetadataResolver) Resolve(req apimodel.ResolveRequest) (*Metadata, error)

+ func (r LocalMetadataResolver) ResolveResponsePayload(req apimodel.ResolveRequest) (res ResolveResponsePayload, err error)

+ type Metadata struct

+ Extra map[string]any

+ FederationEntity *FederationEntityMetadata

+ OAuthAuthorizationServer *OAuthAuthorizationServerMetadata

+ OAuthClient *OAuthClientMetadata

+ OAuthProtectedResource *OAuthProtectedResourceMetadata

+ OpenIDProvider *OpenIDProviderMetadata

+ RelyingParty *OpenIDRelyingPartyMetadata

+ func (m *Metadata) FindEntityMetadata(entityType string, metadata any) error

+ func (m *Metadata) UnmarshalJSON(data []byte) error

+ func (m Metadata) ApplyPolicy(p *MetadataPolicies) (*Metadata, error)

+ func (m Metadata) GuessDisplayNames() map[string]string

+ func (m Metadata) GuessEntityTypes() (entityTypes []string)

+ func (m Metadata) IterateStringClaim(tag string, iterator func(entityType, value string))

+ func (m Metadata) IterateStringSliceClaim(tag string, iterator func(entityType string, value []string))

+ func (m Metadata) MarshalJSON() ([]byte, error)

+ type MetadataPolicies struct

+ Extra map[string]MetadataPolicy

+ FederationEntity MetadataPolicy

+ OAuthAuthorizationServer MetadataPolicy

+ OAuthClient MetadataPolicy

+ OAuthProtectedResource MetadataPolicy

+ OpenIDProvider MetadataPolicy

+ RelyingParty MetadataPolicy

+ func MergeMetadataPolicies(policies ...*MetadataPolicies) (*MetadataPolicies, error)

+ func (m *MetadataPolicies) UnmarshalJSON(data []byte) error

+ func (m MetadataPolicies) MarshalJSON() ([]byte, error)

+ type MetadataPolicy map[string]MetadataPolicyEntry

+ func CombineMetadataPolicy(pathInfo string, policies ...MetadataPolicy) (MetadataPolicy, error)

+ func (p MetadataPolicy) Verify(pathInfo string) error

+ type MetadataPolicyEntry map[PolicyOperatorName]any

+ func (p MetadataPolicyEntry) ApplyTo(value any, valueSet bool, pathInfo string) (any, error)

+ func (p MetadataPolicyEntry) Verify(pathInfo string) error

+ type MetadataResolver interface

+ Resolve func(request apimodel.ResolveRequest) (*Metadata, error)

+ ResolvePossible func(request apimodel.ResolveRequest) (validConfirmed, invalidConfirmed bool)

+ ResolveResponsePayload func(request apimodel.ResolveRequest) (ResolveResponsePayload, error)

+ var DefaultMetadataResolver MetadataResolver = LocalMetadataResolver{}

+ type NamingConstraints struct

+ Excluded []string

+ Permitted []string

+ type OAuthAuthorizationServerMetadata OpenIDProviderMetadata

+ func (m *OAuthAuthorizationServerMetadata) UnmarshalJSON(data []byte) error

+ func (m OAuthAuthorizationServerMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OAuthAuthorizationServerMetadata) GuessDisplayName() string

+ func (m OAuthAuthorizationServerMetadata) MarshalJSON() ([]byte, error)

+ type OAuthClientMetadata OpenIDRelyingPartyMetadata

+ func (m *OAuthClientMetadata) UnmarshalJSON(data []byte) error

+ func (m OAuthClientMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OAuthClientMetadata) GuessDisplayName() string

+ func (m OAuthClientMetadata) MarshalJSON() ([]byte, error)

+ type OAuthProtectedResourceMetadata struct

+ AuthorizationServers []string

+ BearerMethodsSupported []string

+ Contacts []string

+ Description string

+ DisplayName string

+ Extra map[string]any

+ InformationURI string

+ JWKS *jwks.JWKS

+ JWKSURI string

+ Keywords []string

+ LogoURI string

+ OrganizationName string

+ OrganizationURI string

+ PolicyURI string

+ Resource string

+ ResourceDocumentation string

+ ResourceEncryptionAlgValuesSupported []string

+ ResourceEncryptionEncValuesSupported []string

+ ResourceName string

+ ResourcePolicyURI string

+ ResourceSigningAlgValuesSupported []string

+ ResourceTOSURI string

+ ScopesSupported []string

+ SignedJWKSURI string

+ func (m *OAuthProtectedResourceMetadata) UnmarshalJSON(data []byte) error

+ func (m *OAuthProtectedResourceMetadata) UnmarshalMsgpack(data []byte) error

+ func (m OAuthProtectedResourceMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OAuthProtectedResourceMetadata) GuessDisplayName() string

+ func (m OAuthProtectedResourceMetadata) MarshalJSON() ([]byte, error)

+ type OIDCErrorResponse struct

+ Error string

+ ErrorDescription string

+ type OIDCTokenResponse struct

+ AccessToken string

+ ExpiresIn int64

+ Extra map[string]any

+ IDToken string

+ RefreshToken string

+ Scopes string

+ TokenType string

+ func (res *OIDCTokenResponse) UnmarshalJSON(data []byte) error

+ type OpenIDProviderMetadata struct

+ ACRValuesSupported []string

+ AuthorizationDetailsTypesSupported []string

+ AuthorizationEndpoint string

+ AuthorizationResponseIssParameterSupported bool

+ BackchannelAuthenticationEndpoint string

+ BackchannelAuthenticationRequestSigningAlgValuesSupported []string

+ BackchannelLogoutSessionSupported bool

+ BackchannelLogoutSupported bool

+ BackchannelTokenDeliveryModesSupported []string

+ BackchannelUserCodeParameterSupported bool

+ CheckSessionIFrame string

+ ClaimsLocalesSupported []string

+ ClaimsParameterSupported bool

+ ClaimsSupported []string

+ ClientRegistrationTypesSupported []string

+ CodeChallengeMethodsSupported []string

+ Contacts []string

+ Description string

+ DeviceAuthorizationEndpoint string

+ DisplayName string

+ DisplayValuesSupported []string

+ EndSessionEndpoint string

+ Extra map[string]any

+ FederationRegistrationEndpoint string

+ FrontchannelLogoutSupported bool

+ GrantTypesSupported []string

+ IDTokenEncryptedResponseAlgValuesSupported []string

+ IDTokenEncryptedResponseEncValuesSupported []string

+ IDTokenSignedResponseAlgValuesSupported []string

+ InformationURI string

+ IntrospectionEncryptionAlgValuesSupported []string

+ IntrospectionEncryptionEncValuesSupported []string

+ IntrospectionEndpoint string

+ IntrospectionEndpointAuthMethodsSupported []string

+ IntrospectionEndpointAuthSigningAlgValuesSupported []string

+ IntrospectionSigningAlgValuesSupported []string

+ Issuer string

+ JWKS *jwks.JWKS

+ JWKSURI string

+ Keywords []string

+ LogoURI string

+ MTLSEndpointAliases map[string]string

+ NFVTokenEncryptionAlgValuesSupported []string

+ NFVTokenEncryptionEncValuesSupported []string

+ NFVTokenSigningAlgValuesSupported []string

+ OPPolicyURI string

+ OPTOSURI string

+ OrganizationName string

+ OrganizationURI string

+ PolicyURI string

+ PushedAuthorizationRequestEndpoint string

+ RegistrationEndpoint string

+ RequestAuthenticationMethodsSupported map[string][]string

+ RequestAuthenticationSigningAlgValuesSupported []string

+ RequestEncryptedResponseAlgValuesSupported []string

+ RequestEncryptedResponseEncValuesSupported []string

+ RequestParameterSupported bool

+ RequestSignedResponseAlgValuesSupported []string

+ RequestURIParameterSupported bool

+ RequirePushedAuthorizationRequests bool

+ RequireRequestURIRegistration bool

+ RequireSignedRequestObject bool

+ ResponseModesSupported []string

+ ResponseTypesSupported []string

+ RevocationEndpoint string

+ RevocationEndpointAuthMethodsSupported []string

+ RevocationEndpointAuthSigningAlgValuesSupported []string

+ ScopesSupported []string

+ ServiceDocumentation string

+ SignedJWKSURI string

+ SignedMetadata string

+ SubjectTypesSupported []string

+ TLSClientCertificateBoundAccessTokens bool

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ TokenEndpointAuthSigningAlgValuesSupported []string

+ UILocalesSupported []string

+ UserinfoEncryptedResponseAlgValuesSupported []string

+ UserinfoEncryptedResponseEncValuesSupported []string

+ UserinfoEndpoint string

+ UserinfoSignedResponseAlgValuesSupported []string

+ func (m *OpenIDProviderMetadata) UnmarshalJSON(data []byte) error

+ func (m *OpenIDProviderMetadata) UnmarshalMsgpack(data []byte) error

+ func (m OpenIDProviderMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OpenIDProviderMetadata) GuessDisplayName() string

+ func (m OpenIDProviderMetadata) MarshalJSON() ([]byte, error)

+ type OpenIDRelyingPartyMetadata struct

+ ApplicationType string

+ AuthorizationDetailsTypes []string

+ BackchannelLogoutSessionRequired bool

+ BackchannelLogoutURI string

+ ClaimsRedirectURIs []string

+ ClientID string

+ ClientIDIssuedAt int64

+ ClientName string

+ ClientRegistrationTypes []string

+ ClientSecret string

+ ClientSecretExpiresAt int64

+ ClientURI string

+ Contacts []string

+ DefaultACRValues []string

+ DefaultMaxAge int64

+ Description string

+ DisplayName string

+ Extra map[string]any

+ FrontchannelLogoutSessionRequired bool

+ FrontchannelLogoutURI string

+ GrantTypes []string

+ IDTokenEncryptedResponseAlg string

+ IDTokenEncryptedResponseEnc string

+ IDTokenSignedResponseAlg string

+ InformationURI string

+ InitiateLoginURI string

+ IntrospectionEncryptedResponseAlg string

+ IntrospectionEncryptedResponseEnc string

+ IntrospectionSignedResponseAlg string

+ JWKS *jwks.JWKS

+ JWKSURI string

+ Keywords []string

+ LogoURI string

+ NFVTokenEncryptedResponseAlg string

+ NFVTokenEncryptedResponseEnc string

+ NFVTokenSignedResponseAlg string

+ OrganizationName string

+ OrganizationURI string

+ PolicyURI string

+ PostLogoutRedirectURIs []string

+ RedirectURIS []string

+ RegistrationAccessToken string

+ RegistrationClientURI string

+ RequestEncryptedResponseAlg string

+ RequestEncryptedResponseEnc string

+ RequestSignedResponseAlg string

+ RequestURIs []string

+ RequireAuthTime bool

+ RequirePushedAuthorizationRequests bool

+ RequireSignedRequestObject bool

+ ResponseTypes []string

+ Scope string

+ SectorIdentifierURI string

+ SignedJWKSURI string

+ SoftwareID string

+ SoftwareVersion string

+ SubjectType string

+ TLSClientAuthSANDNS string

+ TLSClientAuthSANEMAIL string

+ TLSClientAuthSANIP string

+ TLSClientAuthSANURI string

+ TLSClientAuthSubjectDN string

+ TLSClientCertificateBoundAccessTokens bool

+ TOSURI string

+ TokenEndpointAuthMethod string

+ TokenEndpointAuthSigningAlg string

+ UserinfoEncryptedResponseAlg string

+ UserinfoEncryptedResponseEnc string

+ UserinfoSignedResponseAlg string

+ func (m *OpenIDRelyingPartyMetadata) UnmarshalJSON(data []byte) error

+ func (m *OpenIDRelyingPartyMetadata) UnmarshalMsgpack(data []byte) error

+ func (m OpenIDRelyingPartyMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OpenIDRelyingPartyMetadata) GuessDisplayName() string

+ func (m OpenIDRelyingPartyMetadata) MarshalJSON() ([]byte, error)

+ type OwnedTrustMark struct

+ DelegationLifetime time.Duration

+ Extra map[string]any

+ ID string

+ Ref string

+ type PolicyOperator interface

+ Apply func(value any, valueSet bool, policyValue any, essential bool, pathInfo string) (any, bool, error)

+ MayCombineWith func() []PolicyOperatorName

+ Merge func(a, b any, pathInfo string) (any, error)

+ Name func() PolicyOperatorName

+ func NewPolicyOperator(name PolicyOperatorName, merger func(a, b any, pathInfo string) (any, error), ...) PolicyOperator

+ type PolicyOperatorName string

+ const PolicyOperatorAdd

+ const PolicyOperatorDefault

+ const PolicyOperatorEssential

+ const PolicyOperatorOneOf

+ const PolicyOperatorSubsetOf

+ const PolicyOperatorSupersetOf

+ const PolicyOperatorValue

+ type PolicyVerifier func(p MetadataPolicyEntry, pathInfo string) error

+ type RequestObjectProducer struct

+ EntityID string

+ func NewRequestObjectProducer(entityID string, privateSigningKey crypto.Signer, ...) *RequestObjectProducer

+ func (rop RequestObjectProducer) ClientAssertion(aud string) ([]byte, error)

+ func (rop RequestObjectProducer) RequestObject(requestValues map[string]any) ([]byte, error)

+ type ResolveResponse struct

+ Audience string

+ ExpiresAt unixtime.Unixtime

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ Subject string

+ func ParseResolveResponse(body []byte) (*ResolveResponse, error)

+ func (r ResolveResponse) MarshalJSON() ([]byte, error)

+ type ResolveResponsePayload struct

+ Extra map[string]interface{}

+ Metadata *Metadata

+ TrustChain JWSMessages

+ TrustMarks TrustMarkInfos

+ func (r *ResolveResponsePayload) UnmarshalJSON(data []byte) error

+ func (r ResolveResponsePayload) MarshalJSON() ([]byte, error)

+ type ResolveResponseSigner struct

+ func NewResolveResponseSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *ResolveResponseSigner

+ func (s ResolveResponseSigner) JWT(i any) (jwt []byte, err error)

+ type SimpleEntityCollector struct

+ func (d *SimpleEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

+ type SimpleOPCollector struct

+ func (*SimpleOPCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

+ type SimpleRemoteEntityCollector struct

+ EntityCollectionEndpoint string

+ func (c SimpleRemoteEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) []*CollectedEntity

+ type SimpleRemoteMetadataResolver struct

+ ResolveEndpoint string

+ func (r SimpleRemoteMetadataResolver) Resolve(req apimodel.ResolveRequest) (*Metadata, error)

+ func (r SimpleRemoteMetadataResolver) ResolvePossible(req apimodel.ResolveRequest) (bool, bool)

+ func (r SimpleRemoteMetadataResolver) ResolveResponse(req apimodel.ResolveRequest) (*ResolveResponse, int, error)

+ func (r SimpleRemoteMetadataResolver) ResolveResponsePayload(req apimodel.ResolveRequest) (ResolveResponsePayload, error)

+ type SliceOrSingleValue []T

+ func (v *SliceOrSingleValue[T]) UnmarshalJSON(data []byte) error

+ func (v *SliceOrSingleValue[T]) UnmarshalYAML(value *yaml.Node) error

+ func (v SliceOrSingleValue[T]) MarshalJSON() ([]byte, error)

+ func (v SliceOrSingleValue[T]) MarshalYAML() (interface{}, error)

+ type SmartRemoteEntityCollector struct

+ TrustAnchors []string

+ func (c SmartRemoteEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) []*CollectedEntity

+ type SmartRemoteMetadataResolver struct

+ func (SmartRemoteMetadataResolver) ResolvePossible(req apimodel.ResolveRequest) (bool, bool)

+ func (SmartRemoteMetadataResolver) ResolveResponsePayload(req apimodel.ResolveRequest) (ResolveResponsePayload, error)

+ func (r SmartRemoteMetadataResolver) Resolve(req apimodel.ResolveRequest) (*Metadata, error)

+ type TrustAnchor struct

+ EntityID string

+ JWKS jwks.JWKS

+ type TrustAnchors []TrustAnchor

+ func NewTrustAnchorsFromEntityIDs(anchorIDs ...string) (anchors TrustAnchors)

+ func (anchors TrustAnchors) EntityIDs() (entityIDs []string)

+ type TrustChain []*EntityStatement

+ func (c TrustChain) ExpiresAt() unixtime.Unixtime

+ func (c TrustChain) Messages() (msgs JWSMessages)

+ func (c TrustChain) Metadata() (*Metadata, error)

+ func (c TrustChain) PathLen() int

+ type TrustChainChecker interface

+ Check func(TrustChain) bool

+ type TrustChainScoringFnc func(c TrustChain) int

+ type TrustChains []TrustChain

+ func (c TrustChains) Filter(filter ...TrustChainsFilter) TrustChains

+ func (c TrustChains) SortAsc(scorer TrustChainScoringFnc) TrustChains

+ func (c TrustChains) SortDesc(scorer TrustChainScoringFnc) TrustChains

+ type TrustChainsFilter interface

+ Filter func(TrustChains) TrustChains

+ var TrustChainsFilterMinPathLength TrustChainsFilter = trustChainsFilterPathLength{}

+ func NewTrustChainsFilterFromCheckerFnc(checker func(TrustChain) bool) TrustChainsFilter

+ func NewTrustChainsFilterFromTrustChainChecker(f TrustChainChecker) TrustChainsFilter

+ func TrustChainsFilterMaxPathLength(maxPathLen int) TrustChainsFilter

+ func TrustChainsFilterTrustAnchor(anchor string) TrustChainsFilter

+ type TrustMark struct

+ DelegationJWT string

+ ExpiresAt *unixtime.Unixtime

+ Extra map[string]interface{}

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ LogoURI string

+ Ref string

+ Subject string

+ TrustMarkType string

+ func ParseTrustMark(data []byte) (*TrustMark, error)

+ func (tm *TrustMark) Delegation() (*DelegationJWT, error)

+ func (tm *TrustMark) UnmarshalJSON(data []byte) error

+ func (tm *TrustMark) VerifyExternal(jwks jwks.JWKS, tmo ...TrustMarkOwnerSpec) error

+ func (tm *TrustMark) VerifyFederation(ta *EntityStatementPayload) error

+ func (tm TrustMark) MarshalJSON() ([]byte, error)

+ type TrustMarkDelegationSigner struct

+ func NewTrustMarkDelegationSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *TrustMarkDelegationSigner

+ func (s TrustMarkDelegationSigner) JWT(i any) (jwt []byte, err error)

+ type TrustMarkInfo struct

+ Extra map[string]interface{}

+ TrustMarkJWT string

+ TrustMarkType string

+ func (tm *TrustMarkInfo) TrustMark() (*TrustMark, error)

+ func (tm *TrustMarkInfo) UnmarshalJSON(data []byte) error

+ func (tm *TrustMarkInfo) VerifyExternal(jwks jwks.JWKS, tmo ...TrustMarkOwnerSpec) error

+ func (tm *TrustMarkInfo) VerifyFederation(ta *EntityStatementPayload) error

+ func (tm TrustMarkInfo) MarshalJSON() ([]byte, error)

+ type TrustMarkInfos []TrustMarkInfo

+ func (tms TrustMarkInfos) Find(matcher func(info TrustMarkInfo) bool) *TrustMarkInfo

+ func (tms TrustMarkInfos) FindByID(id string) *TrustMarkInfo

+ func (tms TrustMarkInfos) VerifiedExternal(jwks jwks.JWKS, tmo ...TrustMarkOwnerSpec) (verified TrustMarkInfos)

+ func (tms TrustMarkInfos) VerifiedFederation(ta *EntityStatementPayload) (verified TrustMarkInfos)

+ type TrustMarkIssuer struct

+ EntityID string

+ func NewTrustMarkIssuer(entityID string, signer *TrustMarkSigner, trustMarkSpecs []TrustMarkSpec) *TrustMarkIssuer

+ func (tmi *TrustMarkIssuer) AddTrustMark(spec TrustMarkSpec)

+ func (tmi *TrustMarkIssuer) TrustMarkTypes() []string

+ func (tmi TrustMarkIssuer) IssueTrustMark(trustMarkType, sub string, lifetime ...time.Duration) (*TrustMarkInfo, error)

+ type TrustMarkOwner struct

+ EntityID string

+ func NewTrustMarkOwner(entityID string, signer *TrustMarkDelegationSigner, ...) *TrustMarkOwner

+ func (tmo *TrustMarkOwner) AddTrustMark(spec OwnedTrustMark)

+ func (tmo TrustMarkOwner) DelegationJWT(trustMarkType, sub string, lifetime ...time.Duration) ([]byte, error)

+ type TrustMarkOwnerSpec struct

+ ID string

+ JWKS jwks.JWKS

+ func (tmo *TrustMarkOwnerSpec) UnmarshalJSON(data []byte) error

+ func (tmo *TrustMarkOwnerSpec) UnmarshalMsgpack(data []byte) error

+ type TrustMarkOwners map[string]TrustMarkOwnerSpec

+ type TrustMarkSigner struct

+ func NewTrustMarkSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *TrustMarkSigner

+ func (s TrustMarkSigner) JWT(i any) (jwt []byte, err error)

+ type TrustMarkSpec struct

+ DelegationJWT string

+ Extra map[string]any

+ IncludeExtraClaimsInInfo bool

+ Lifetime unixtime.DurationInSeconds

+ LogoURI string

+ Ref string

+ TrustMarkType string

+ func (tms *TrustMarkSpec) UnmarshalJSON(data []byte) error

+ func (tms *TrustMarkSpec) UnmarshalYAML(data *yaml.Node) error

+ func (tms TrustMarkSpec) MarshalJSON() ([]byte, error)

+ func (tms TrustMarkSpec) MarshalYAML() (any, error)

+ type TrustResolver struct

+ StartingEntity string

+ TrustAnchors []TrustAnchor

+ Types []string

+ func (r *TrustResolver) Resolve()

+ func (r *TrustResolver) ResolveToValidChains() TrustChains

+ func (r *TrustResolver) ResolveToValidChainsWithoutVerifyingMetadata() TrustChains

+ func (r *TrustResolver) VerifySignatures()

+ func (r TrustResolver) Chains() (chains TrustChains)

+ type TypedJWTSigner struct

+ HeaderType string

+ func (s TypedJWTSigner) JWT(i any) (jwt []byte, err error)

+ type UIInfo struct

+ Description string

+ DisplayName string

+ Extra map[string]any

+ InformationURI string

+ Keywords []string

+ LogoURI string

+ PolicyURI string

+ func (i *UIInfo) UnmarshalJSON(data []byte) error

+ func (i UIInfo) MarshalJSON() ([]byte, error)

+ type VerifiedChainsEntityCollector struct

+ func (VerifiedChainsEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL