Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Client ¶
func (*Client) IsRedirectURIAllowed ¶ added in v0.11.0
type Manager ¶
type Manager struct {
// contains filtered or unexported fields
}
func NewManager ¶
func NewManager(args ManagerArgs) *Manager
func (*Manager) GetClientJWKS ¶ added in v0.11.1
GetClientJWKS resolves the keys published by an OAuth client independently of its token endpoint authentication method. Spaces client attestations use these keys even when the client does not use private_key_jwt at the token endpoint.
func (*Manager) GetClientJWKSWithRefresh ¶ added in v0.11.1
func (cm *Manager) GetClientJWKSWithRefresh(ctx context.Context, clientId string, forceRefresh bool) (jwk.Set, error)
GetClientJWKSWithRefresh resolves the keys published by an OAuth client, optionally bypassing both the client metadata and JWKS caches. A refresh is needed when a token signed by a newly rotated client key follows a cached lookup of the old key.
type Metadata ¶
type Metadata struct {
ClientID string `json:"client_id"`
ClientName string `json:"client_name"`
ClientURI string `json:"client_uri"`
LogoURI string `json:"logo_uri"`
TOSURI string `json:"tos_uri"`
PolicyURI string `json:"policy_uri"`
RedirectURIs []string `json:"redirect_uris"`
GrantTypes []string `json:"grant_types"`
ResponseTypes []string `json:"response_types"`
ApplicationType string `json:"application_type"`
DpopBoundAccessTokens bool `json:"dpop_bound_access_tokens"`
JWKSURI *string `json:"jwks_uri,omitempty"`
JWKS *MetadataJwks `json:"jwks,omitempty"`
Scope string `json:"scope"`
TokenEndpointAuthMethod string `json:"token_endpoint_auth_method"`
TokenEndpointAuthSigningAlg string `json:"token_endpoint_auth_signing_alg"`
}
type MetadataJwks ¶
type MetadataJwks struct {
Keys []any `json:"keys"`
}
Click to show internal directories.
Click to hide internal directories.