Documentation
¶
Index ¶
- func ErrInvalidClient(msg string) error
- func ErrInvalidConfig(msg string) error
- func ErrInvalidGrant(msg string) error
- func ErrInvalidMetadata(msg string) error
- func ErrInvalidRequest(msg string) error
- func ErrServerError(msg string) error
- func ErrSignatureVerification(underlying error) error
- type AuthError
- type PrivateKeyJWTAuth
- type TAResolver
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ErrInvalidClient ¶
ErrInvalidClient creates an error for client authentication failures
func ErrInvalidConfig ¶
ErrInvalidConfig creates an error for invalid middleware configuration
func ErrInvalidGrant ¶
ErrInvalidGrant creates an error for grant-related issues (expired, replayed)
func ErrInvalidMetadata ¶
ErrInvalidMetadata creates an error for invalid client metadata
func ErrInvalidRequest ¶
ErrInvalidRequest creates an error for invalid request parameters
func ErrServerError ¶
ErrServerError creates an error for server-side errors
func ErrSignatureVerification ¶
ErrSignatureVerification creates an error for signature verification failures
Types ¶
type PrivateKeyJWTAuth ¶
type PrivateKeyJWTAuth struct {
// contains filtered or unexported fields
}
PrivateKeyJWTAuth implements private_key_jwt authentication middleware
func NewPrivateKeyJWTAuth ¶
func NewPrivateKeyJWTAuth( entityID string, fedEntity oidfed.FederationEntity, trustAnchorIDs []string, taResolver TAResolver, jtiStorage model.JTIStorageBackend, ) (*PrivateKeyJWTAuth, error)
NewPrivateKeyJWTAuth creates a new private_key_jwt authentication middleware. The trustAnchorIDs are resolved to oidfed.TrustAnchors at request time via taResolver, so JWKS updates propagate live.
func (*PrivateKeyJWTAuth) Middleware ¶
func (a *PrivateKeyJWTAuth) Middleware() fiber.Handler
Middleware returns the Fiber middleware handler for private_key_jwt authentication
type TAResolver ¶ added in v0.22.0
type TAResolver func(entityIDs []string) oidfed.TrustAnchors
TAResolver resolves trust anchor entity IDs to oidfed.TrustAnchors at request time. This allows JWKS updates to propagate live without restarting the middleware.
Source Files