fakeprovider

type GitHubEndpoint string

type GitHubOptions struct {
	ClientID     string       // default "github-client-id"
	ClientSecret string       // default "github-client-secret"
	User         GitHubUser   // default {ID: 1, Login: "octocat", Name: "The Octocat", Email: "octocat@example.com"}
	Teams        []GitHubTeam // the user's teams; SetTeams replaces them
}

type GitHubServer struct {
	// contains filtered or unexported fields
}

type GitHubTeam struct {
	Organization string
	Slug         string
}

type GitHubUser struct {
	ID        int64
	Login     string
	Name      string
	Email     string
	AvatarURL string
}

type OIDCHandler struct {
	// contains filtered or unexported fields
}

type OIDCOptions struct {
	IssuerURL              string   // required by NewOIDCHandler, set by StartOIDC: the iss claim; endpoints are served below its path
	ClientID               string   // required
	ClientSecret           string   // required; accepted by HTTP Basic and in the form
	RedirectURIs           []string // registered redirect URIs; empty accepts any
	PostLogoutRedirectURIs []string // registered post-logout redirect URIs; empty accepts any
	User                   OIDCUser

	OmitEndSessionEndpoint bool   // discovery without end_session_endpoint
	OmitIDToken            bool   // token response without id_token
	OpaqueAccessToken      bool   // a random access token instead of a JWT, as Google issues
	AccessTokenSubject     string // sub of the JWT access token in place of User.Subject: a token issued to another user
	WrongNonce             bool   // the ID token carries another nonce than the authorize request
	BadSignature           bool   // ID and access token signatures do not verify
	ExpiredIDToken         bool   // the ID token expired a minute ago

	TokenAnswer http.Handler // when set, answers every /token request in place of the fake: an IdP's error or broken answers
	JWKSAnswer  http.Handler // when set, answers every /jwks request in place of the fake: a key set outage or a broken key set

	KeycloakRealm               string // when set, also serves the Keycloak token endpoint and Admin API of this realm (keycloak.go)
	KeycloakAuthenticationRealm string // realm whose token endpoint issues admin tokens; default KeycloakRealm
	KeycloakClientID            string // service account client for the client credentials grant
	KeycloakClientSecret        string
	KeycloakUsername            string // admin user for the password grant
	KeycloakPassword            string
}

type OIDCServer struct {
	*OIDCHandler
	// contains filtered or unexported fields
}

type OIDCUser struct {
	Subject           string              // ID token sub and Keycloak user ID; default "fake-user"
	PreferredUsername string              // preferred_username claim
	Name              string              // name claim
	Email             string              // email claim
	EmailVerified     bool                // email_verified claim
	Picture           string              // picture claim
	SessionID         string              // sid claim of the ID token; omitted when empty
	RealmRoles        []string            // access token realm_access.roles; Keycloak composite realm roles
	ClientRoles       []string            // access token resource_access.<ClientID>.roles; Keycloak composite roles of client ClientID
	Groups            []string            // access token groups; Keycloak group paths
	Attributes        map[string][]string // Keycloak user attributes
}