Versions in this module Expand all Collapse all v0 v0.5.3 Jun 12, 2026 Changes in this version + const DefaultGroupsClaim + const DefaultUsernameClaim + var ErrGroupNotAllowed = errors.New("oidc: user not in required group") + var ErrIDTokenVerify = errors.New("oidc: id_token verification failed") + var ErrIdPError = errors.New("oidc: identity provider returned error") + var ErrMissingCode = errors.New("oidc: authorization code missing from callback") + var ErrNonceMismatch = errors.New("oidc: nonce mismatch") + var ErrStateMismatch = errors.New("oidc: state mismatch") + var ErrTokenExchange = errors.New("oidc: token exchange failed") + var ErrUsernameInvalid = errors.New("oidc: username failed character validation") + type Config struct + ClientID string + ClientSecret string + GroupsClaim string + IssuerURL string + JITProvision bool + LegacyPermissiveUsername bool + RedirectURL string + RequiredGroups []string + Scopes []string + UsePKCE bool + UsernameClaim string + func (c Config) Validate() error + type Provider struct + func NewOIDCProvider(ctx context.Context, cfg Config) (*Provider, error) + func (p *Provider) EndSessionURL() string + func (p *Provider) HandleCallback(parentCtx context.Context, r *http.Request, state auth.State) (auth.ResolvedIdentity, error) + func (p *Provider) LoginURL(ctx context.Context, state auth.State) (string, error) + func (p *Provider) Type() string