lighthouse

Aug 4, 2026

Changes in this version

+ type CmdEntityChecker struct

+ Args []string

+ Env []string

+ Path string

+ Timeout int

+ func (c *CmdEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, entityTypes []string) (bool, int, *oidfed.Error)

+ func (c *CmdEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ type HTTPEntityChecker struct

+ BodyMode string

+ Headers map[string]string

+ Method string

+ Timeout int

+ URL string

+ func (c *HTTPEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, entityTypes []string) (bool, int, *oidfed.Error)

+ func (c *HTTPEntityChecker) UnmarshalYAML(node *yaml.Node) error

Aug 4, 2026

Changes in this version

+ const MaximumSubordinateStatementCachePeriod

+ func NewSubordinateJWKSRefreshStorage(store model.SubordinateStorageBackend, eventStore model.SubordinateEventStore) oidfed.SubordinateJWKSRefreshStorage

+ func SetupSubordinateJWKSRefresher(store model.SubordinateStorageBackend, eventStore model.SubordinateEventStore) (*oidfed.SubordinateJWKSRefresher, error)

+ func SetupTAJWKSRefresher(repo *TrustAnchorRepo, jwkStorage oidfed.JWKStorage) (*oidfed.TAJWKSRefresher, error)

+ type EndpointRegistry struct

+ func NewEndpointRegistry() *EndpointRegistry

type JWTVerification

+ TrustAnchorIDs []string

type LightHouse

+ func (fed *LightHouse) AddJWKSUpdateEndpoint(endpoint EndpointConf, store model.SubordinateStorageBackend) error

+ func (fed *LightHouse) AddJWKSUpdateTriggerEndpoint(endpoint EndpointConf, store model.SubordinateStorageBackend) error

+ func (fed *LightHouse) EndpointRegistry() *EndpointRegistry

+ func (fed *LightHouse) HasEndpoint(t model.FederationEndpointType) bool

+ func (fed *LightHouse) LoadEndpointsFromDB() error

+ func (fed *LightHouse) RefreshSubordinateJWKSFromEC(entityID string) (changed bool, err error)

+ func (fed *LightHouse) ReloadEndpointsFromDB() error

+ func (fed *LightHouse) RemoveTrustAnchor(entityID string)

+ func (fed *LightHouse) SetSubordinateJWKSRefresher(r *oidfed.SubordinateJWKSRefresher)

+ func (fed *LightHouse) SetTAJWKSRefresher(r *oidfed.TAJWKSRefresher)

+ func (fed *LightHouse) SetTrustAnchorRepo(repo *TrustAnchorRepo)

+ func (fed *LightHouse) SubordinateJWKSRefresher() *oidfed.SubordinateJWKSRefresher

+ func (fed *LightHouse) SyncTrustAnchor(entityID string)

+ func (fed *LightHouse) TAJWKSRefresher() *oidfed.TAJWKSRefresher

+ func (fed *LightHouse) TAResolver() middleware.TAResolver

+ func (fed *LightHouse) TrustAnchorRepo() *TrustAnchorRepo

type ServerConf

+ AccessLogWriter io.Writer

+ type TrustAnchorRepo struct

+ func NewTrustAnchorRepo(store model.TrustAnchorStore) *TrustAnchorRepo

+ func (r *TrustAnchorRepo) Add(m *model.TrustAnchor)

+ func (r *TrustAnchorRepo) AddOrUpdate(entityID string)

+ func (r *TrustAnchorRepo) All() oidfed.TrustAnchors

+ func (r *TrustAnchorRepo) AllWithJWKSUpdate() oidfed.TrustAnchors

+ func (r *TrustAnchorRepo) Count() int

+ func (r *TrustAnchorRepo) Get(entityID string) *oidfed.TrustAnchor

+ func (r *TrustAnchorRepo) Has(entityID string) bool

+ func (r *TrustAnchorRepo) Load() error

+ func (r *TrustAnchorRepo) Remove(entityID string)

+ func (r *TrustAnchorRepo) Resolve(entityIDs ...string) oidfed.TrustAnchors

+ func (r *TrustAnchorRepo) Store() model.TrustAnchorStore

+ func (r *TrustAnchorRepo) UpdateJWKS(entityID string, jwks jwx.JWKS)

type TrustMarkEntityChecker

+ TrustAnchorIDs []string

type TrustPathEntityChecker

+ TrustAnchorIDs []string

Jun 15, 2026

Changes in this version

+ const KMSDatabase

type EndpointConf

+ AuthEnabled bool

+ AuthTrustAnchors oidfed.TrustAnchors

type LightHouse

+ func (fed *LightHouse) SetJTICleanupStop(stop func())

Jun 3, 2026

Changes in this version

type AdminAPIOptions

+ TLS TLSConf

type ServerConf

+ AdminTLS TLSConf

+ type TLSConf struct

+ Cert string

+ Enabled bool

+ Key string

+ RedirectHTTP bool

May 4, 2026

Changes in this version

+ const KMSFilesystem

+ const KMSPKCS11

+ const MaximumEntityConfigurationCachePeriod

+ const PKBackendDatabase

+ const PKBackendFilesystem

+ type AdminAPIOptions struct

+ ActorHeader string

+ ActorSource string

+ CORS CORSConf

+ Enabled bool

+ Port int

+ UsersEnabled bool

+ type CORSConf struct

+ AllowCredentials bool

+ AllowHeaders string

+ AllowMethods string

+ AllowOrigins string

+ Enabled bool

+ ExposeHeaders string

+ MaxAge int

+ type CheckerContext struct

+ Store model.TrustMarkedEntitiesStorageBackend

+ TrustMarkType string

+ type ContextualEntityChecker interface

+ SetContext func(ctx CheckerContext)

+ type DBListEntityChecker struct

+ func (*DBListEntityChecker) UnmarshalYAML(_ *yaml.Node) error

+ func (c *DBListEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, _ []string) (bool, int, *oidfed.Error)

+ func (c *DBListEntityChecker) SetContext(ctx CheckerContext)

+ type DBTrustMarkSpecProvider struct

+ func NewDBTrustMarkSpecProvider(store model.TrustMarkSpecStore) *DBTrustMarkSpecProvider

+ func (p *DBTrustMarkSpecProvider) GetTrustMarkSpec(trustMarkType string) *oidfed.TrustMarkSpec

+ func (p *DBTrustMarkSpecProvider) TrustMarkTypes() []string

+ type EligibilityCache struct

+ func NewEligibilityCache() *EligibilityCache

+ func (c *EligibilityCache) CleanExpired() int

+ func (c *EligibilityCache) Clear()

+ func (c *EligibilityCache) Get(trustMarkType, subject string) (eligible bool, httpCode int, reason string, found bool)

+ func (c *EligibilityCache) Invalidate(trustMarkType, subject string)

+ func (c *EligibilityCache) InvalidateAll(trustMarkType string)

+ func (c *EligibilityCache) InvalidateType(trustMarkType string)

+ func (c *EligibilityCache) Set(trustMarkType, subject string, eligible bool, httpCode int, reason string, ...)

+ func (c *EligibilityCache) Size() int

+ func (c *EligibilityCache) StartCleanupRoutine(interval time.Duration) (stop func())

type EntityChecker

+ func EntityCheckerFromJSONConfig(checkerType string, config map[string]any) (EntityChecker, error)

+ type HTTPListEntityChecker struct

+ CacheTTL int

+ Headers map[string]string

+ Method string

+ Timeout int

+ URL string

+ func (c *HTTPListEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, _ []string) (bool, int, *oidfed.Error)

+ func (c *HTTPListEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ type HTTPListJWTEntityChecker struct

+ CacheTTL int

+ Headers map[string]string

+ ListClaim string

+ Method string

+ Timeout int

+ URL string

+ Verification JWTVerification

+ func (c *HTTPListJWTEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, _ []string) (bool, int, *oidfed.Error)

+ func (c *HTTPListJWTEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ type IssuedTrustMarkCache struct

+ func NewIssuedTrustMarkCache() *IssuedTrustMarkCache

+ func (c *IssuedTrustMarkCache) CleanExpired() int

+ func (c *IssuedTrustMarkCache) Clear()

+ func (c *IssuedTrustMarkCache) Get(trustMarkType, subject string) (string, bool)

+ func (c *IssuedTrustMarkCache) Invalidate(trustMarkType, subject string)

+ func (c *IssuedTrustMarkCache) InvalidateAll(trustMarkType string)

+ func (c *IssuedTrustMarkCache) Set(trustMarkType, subject, trustMarkJWT string, ttl time.Duration)

+ func (c *IssuedTrustMarkCache) Size() int

+ func (c *IssuedTrustMarkCache) StartCleanupRoutine(interval time.Duration) (stop func())

+ type JWTVerification struct

+ JWKS *jwx.JWKS

+ Mode JWTVerificationMode

+ TrustAnchors oidfed.TrustAnchors

+ type JWTVerificationMode string

+ const JWTVerificationModeJWKS

+ const JWTVerificationModeTrustAnchor

type LightHouse

+ func (fed *LightHouse) AddTrustMarkEndpointWithConfig(endpoint EndpointConf, config TrustMarkEndpointConfig)

+ func (fed *LightHouse) Stop() error

type ServerConf

+ AdminAPIPort int

+ CORS CORSConf

+ IPListen string

+ Prefork bool

+ type SigningConf struct

+ AutoGenerateKeys bool

+ FileSystemBackend struct{ ... }

+ KMS string

+ PKBackend string

+ PKCS11Backend struct{ ... }

+ type SubordinateListingRequest struct

+ EntityType []string

+ Intermediate bool

+ TrustMarkType string

+ TrustMarked bool

+ type TrustMarkEndpointConfig struct

+ Cache *EligibilityCache

+ Checkers map[string]EntityChecker

+ InstanceStore model.IssuedTrustMarkInstanceStore

+ IssuedTrustMarkCache *IssuedTrustMarkCache

+ SpecStore model.TrustMarkSpecStore

+ Store model.TrustMarkedEntitiesStorageBackend

+ type TrustMarkStatusConfig struct

+ InstanceStore model.IssuedTrustMarkInstanceStore

+ type TrustMarkStatusResponse struct

+ IssuedAt int64

+ Issuer string

+ Status string

+ TrustMark string

Dec 2, 2025

Changes in this version

type LightHouse

+ LogoBanner bool

+ VersionBanner bool

Aug 22, 2025

Changes in this version

type ServerConf

+ ForwardedIPHeader string

+ TrustedProxies []string

Aug 4, 2025

Changes in this version

type LightHouse

+ func (fed *LightHouse) AddHistoricalKeysEndpoint(endpoint EndpointConf, historyFnc func() jwx.JWKS)

Jun 17, 2025

Changes in this version

+ var FiberServerConfig = fiber.Config

+ func RegisterEntityChecker(configTypeName string, constructor func() EntityChecker)

+ type AuthorityHintEntityChecker struct

+ EntityID string

+ func (c *AuthorityHintEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ func (c AuthorityHintEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, _ []string) (bool, int, *oidfed.Error)

+ type EndpointConf struct

+ Path string

+ URL string

+ func (c *EndpointConf) ValidateURL(rootURL string) string

+ func (c EndpointConf) IsSet() bool

+ type EntityChecker interface

+ Check func(entityConfiguration *oidfed.EntityStatement, entityTypes []string) (bool, int, *oidfed.Error)

+ func EntityCheckerFromEntityCheckerConfig(c EntityCheckerConfig) (EntityChecker, error)

+ func EntityCheckerFromYAMLConfig(config []byte) (EntityChecker, error)

+ type EntityCheckerConfig struct

+ Config yaml.Node

+ Type string

+ type EntityCheckerNone struct

+ func (EntityCheckerNone) Check(_ *oidfed.EntityStatement, _ []string) (bool, int, *oidfed.Error)

+ func (EntityCheckerNone) UnmarshalYAML(_ *yaml.Node) error

+ type EntityIDEntityChecker struct

+ AllowedIDs []string

+ func (c *EntityIDEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ func (c EntityIDEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, _ []string) (bool, int, *oidfed.Error)

+ type LightHouse struct

+ func NewLightHouse(entityID string, authorityHints []string, metadata *oidfed.Metadata, ...) (*LightHouse, error)

+ func (fed *LightHouse) AddEnrollEndpoint(endpoint EndpointConf, store storage.SubordinateStorageBackend, ...)

+ func (fed *LightHouse) AddEnrollRequestEndpoint(endpoint EndpointConf, store storage.SubordinateStorageBackend)

+ func (fed *LightHouse) AddEntityCollectionEndpoint(endpoint EndpointConf)

+ func (fed *LightHouse) AddFetchEndpoint(endpoint EndpointConf, store storage.SubordinateStorageBackend)

+ func (fed *LightHouse) AddResolveEndpoint(endpoint EndpointConf)

+ func (fed *LightHouse) AddSubordinateListingEndpoint(endpoint EndpointConf, store storage.SubordinateStorageBackend, ...)

+ func (fed *LightHouse) AddTrustMarkEndpoint(endpoint EndpointConf, store storage.TrustMarkedEntitiesStorageBackend, ...)

+ func (fed *LightHouse) AddTrustMarkRequestEndpoint(endpoint EndpointConf, store storage.TrustMarkedEntitiesStorageBackend)

+ func (fed *LightHouse) AddTrustMarkStatusEndpoint(endpoint EndpointConf, store storage.TrustMarkedEntitiesStorageBackend)

+ func (fed *LightHouse) AddTrustMarkedEntitiesListingEndpoint(endpoint EndpointConf, store storage.TrustMarkedEntitiesStorageBackend)

+ func (fed LightHouse) CreateSubordinateStatement(subordinate *storage.SubordinateInfo) oidfed.EntityStatementPayload

+ func (fed LightHouse) HttpHandlerFunc() http.HandlerFunc

+ func (fed LightHouse) Listen(addr string) error

+ func (fed LightHouse) Start(conf ServerConf)

+ type MultipleEntityCheckerAnd struct

+ Checkers []EntityChecker

+ func NewMultipleEntityCheckerAnd(checkers ...EntityChecker) *MultipleEntityCheckerAnd

+ func (c *MultipleEntityCheckerAnd) UnmarshalYAML(node *yaml.Node) error

+ func (c MultipleEntityCheckerAnd) Check(entityStatement ..., entityTypes []string) (bool, int, *oidfed.Error)

+ type MultipleEntityCheckerOr struct

+ Checkers []EntityChecker

+ func NewMultipleEntityCheckerOr(checkers ...EntityChecker) *MultipleEntityCheckerOr

+ func (c *MultipleEntityCheckerOr) UnmarshalYAML(node *yaml.Node) error

+ func (c MultipleEntityCheckerOr) Check(entityStatement *oidfed.EntityStatement, entityTypes []string) (bool, int, *oidfed.Error)

+ type ServerConf struct

+ Port int

+ TLS tlsConf

+ type SubordinateStatementsConfig struct

+ Constraints *oidfed.ConstraintSpecification

+ CriticalExtensions []string

+ Extra map[string]any

+ MetadataPolicies *oidfed.MetadataPolicies

+ MetadataPolicyCrit []oidfed.PolicyOperatorName

+ SubordinateStatementLifetime int64

+ type TrustMarkEntityChecker struct

+ TrustAnchors oidfed.TrustAnchors

+ TrustMarkIssuerJWKS jwks.JWKS

+ TrustMarkOwnerSpec oidfed.TrustMarkOwnerSpec

+ TrustMarkType string

+ func (c *TrustMarkEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ func (c TrustMarkEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, entityTypes []string) (bool, int, *oidfed.Error)

+ type TrustPathEntityChecker struct

+ TrustAnchors oidfed.TrustAnchors

+ func (c *TrustPathEntityChecker) UnmarshalYAML(node *yaml.Node) error

+ func (c TrustPathEntityChecker) Check(entityConfiguration *oidfed.EntityStatement, entityTypes []string) (bool, int, *oidfed.Error)