Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

auth

package

Go to main page

Versions in this module

v1

v1.2.1

Jan 24, 2026

v1.2.0

Jan 18, 2026

v1.1.9

Jan 18, 2026

v1.1.8

Jan 17, 2026

v1.1.7

Jan 16, 2026

v1.1.6

Jan 13, 2026

v1.1.5

Jan 11, 2026

v1.1.4

Jan 11, 2026

v1.1.3

Jan 9, 2026

Changes in this version

+ var ErrJWTConflictingOptions = ewrap.New("jwt options are conflicting")

+ var ErrJWTInvalidAudience = ewrap.New("jwt audience is invalid")

+ var ErrJWTInvalidConfig = ewrap.New("invalid jwt config")

+ var ErrJWTInvalidToken = ewrap.New("jwt token is invalid")

+ var ErrJWTMissingAllowedAlgs = ewrap.New("jwt allowed algorithms are required")

+ var ErrJWTMissingClaims = ewrap.New("jwt claims are required")

+ var ErrJWTMissingExpiration = ewrap.New("jwt expiration is required")

+ var ErrJWTMissingKey = ewrap.New("jwt key is required")

+ var ErrJWTMissingKeyID = ewrap.New("jwt key id is required")

+ var ErrJWTMissingSigningAlg = ewrap.New("jwt signing algorithm is required")

+ var ErrPasetoConflictingOpts = ewrap.New("paseto options are conflicting")

+ var ErrPasetoExpired = ewrap.New("paseto token has expired")

+ var ErrPasetoInvalidConfig = ewrap.New("invalid paseto config")

+ var ErrPasetoInvalidToken = ewrap.New("paseto token is invalid")

+ var ErrPasetoMissingExpiry = ewrap.New("paseto expiration is required")

+ var ErrPasetoMissingKey = ewrap.New("paseto key is required")

+ var ErrPasetoMissingToken = ewrap.New("paseto token is required")

+ type JWTSigner struct

+ func NewJWTSigner(opts ...JWTSignerOption) (*JWTSigner, error)

+ func (s *JWTSigner) Sign(claims jwt.Claims) (string, error)

+ type JWTSignerOption func(*jwtSignerConfig) error

+ func WithJWTSignerAllowMissingExpiration() JWTSignerOption

+ func WithJWTSigningAlgorithm(alg string) JWTSignerOption

+ func WithJWTSigningKey(key any) JWTSignerOption

+ func WithJWTSigningKeyID(keyID string) JWTSignerOption

+ type JWTVerifier struct

+ func NewJWTVerifier(opts ...JWTVerifierOption) (*JWTVerifier, error)

+ func (v *JWTVerifier) Verify(tokenString string, claims jwt.Claims) error

+ func (v *JWTVerifier) VerifyMap(tokenString string) (jwt.MapClaims, error)

+ type JWTVerifierOption func(*jwtVerifierConfig) error

+ func WithJWTAllowedAlgorithms(algs ...string) JWTVerifierOption

+ func WithJWTAudience(audiences ...string) JWTVerifierOption

+ func WithJWTClock(now func() time.Time) JWTVerifierOption

+ func WithJWTIssuer(issuer string) JWTVerifierOption

+ func WithJWTLeeway(leeway time.Duration) JWTVerifierOption

+ func WithJWTRequireKeyID() JWTVerifierOption

+ func WithJWTSubject(subject string) JWTVerifierOption

+ func WithJWTVerificationKey(key any) JWTVerifierOption

+ func WithJWTVerificationKeyFunc(keyFunc jwt.Keyfunc) JWTVerifierOption

+ func WithJWTVerificationKeys(keys map[string]any) JWTVerifierOption

+ func WithJWTVerifierAllowMissingExpiration() JWTVerifierOption

+ type PasetoLocal struct

+ func NewPasetoLocal(opts ...PasetoLocalOption) (*PasetoLocal, error)

+ func (p *PasetoLocal) Decrypt(tokenString string) (*paseto.Token, error)

+ func (p *PasetoLocal) Encrypt(token *paseto.Token) (string, error)

+ type PasetoLocalOption func(*pasetoLocalConfig) error

+ func WithPasetoLocalAllowMissingExpiration() PasetoLocalOption

+ func WithPasetoLocalAudience(audience string) PasetoLocalOption

+ func WithPasetoLocalClock(clock func() time.Time) PasetoLocalOption

+ func WithPasetoLocalIssuer(issuer string) PasetoLocalOption

+ func WithPasetoLocalKey(key paseto.V4SymmetricKey) PasetoLocalOption

+ func WithPasetoLocalKeyBytes(key []byte) PasetoLocalOption

+ func WithPasetoLocalKeyHex(hexKey string) PasetoLocalOption

+ func WithPasetoLocalSubject(subject string) PasetoLocalOption

+ type PasetoPublicSigner struct

+ func NewPasetoPublicSigner(opts ...PasetoPublicSignerOption) (*PasetoPublicSigner, error)

+ func (p *PasetoPublicSigner) Sign(token *paseto.Token) (string, error)

+ type PasetoPublicSignerOption func(*pasetoPublicSignerConfig) error

+ func WithPasetoPublicSecretKey(key paseto.V4AsymmetricSecretKey) PasetoPublicSignerOption

+ func WithPasetoPublicSecretKeyBytes(key []byte) PasetoPublicSignerOption

+ func WithPasetoPublicSecretKeyHex(hexKey string) PasetoPublicSignerOption

+ func WithPasetoPublicSignerAllowMissingExpiration() PasetoPublicSignerOption

+ type PasetoPublicVerifier struct

+ func NewPasetoPublicVerifier(opts ...PasetoPublicVerifierOption) (*PasetoPublicVerifier, error)

+ func (p *PasetoPublicVerifier) Verify(tokenString string) (*paseto.Token, error)

+ type PasetoPublicVerifierOption func(*pasetoPublicVerifierConfig) error

+ func WithPasetoPublicAllowMissingExpiration() PasetoPublicVerifierOption

+ func WithPasetoPublicAudience(audience string) PasetoPublicVerifierOption

+ func WithPasetoPublicClock(clock func() time.Time) PasetoPublicVerifierOption

+ func WithPasetoPublicIssuer(issuer string) PasetoPublicVerifierOption

+ func WithPasetoPublicKey(key paseto.V4AsymmetricPublicKey) PasetoPublicVerifierOption

+ func WithPasetoPublicKeyBytes(key []byte) PasetoPublicVerifierOption

+ func WithPasetoPublicKeyHex(hexKey string) PasetoPublicVerifierOption

+ func WithPasetoPublicSubject(subject string) PasetoPublicVerifierOption