jwt

package

v0.31.13 Latest Latest Go to latest Published: Jan 13, 2026 License: MIT Imports: 9 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/linkdata/rinse

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func FetchX09SignCert(keys JSONWebKeySet, kid string) (string, error)
func GetUsernameFromPayload(jwt string) (string, error)
func ParseX09AsPublicKey(key, kid string) (any, *time.Time, error)
func VerifyJWT(jwt string, certs JSONWebKeySet) (bool, error)
type JSONWebKey
type JSONWebKeySet
- func GetJSONKeyWebSet(endpoint string) (jwks JSONWebKeySet, err error)
type JWTHeader
type JWTPayload

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrNoJWKAvailable       = fmt.Errorf("no JWKs (certs or public keys) available")
	ErrNoMatchingJWKFound   = fmt.Errorf("no JWK with mathing KeyId found")
	ErrUnknownKeyType       = fmt.Errorf("JWK key of unknown type")
	ErrFailedToParseCertFn  = func(kid string, err error) error { return fmt.Errorf("error decoding certificate %q: %w", kid, err) }
	ErrUnsupportedCertChain = fmt.Errorf("JWK certificate chain unsupported")
)

View Source

var ErrInvalidJWTForm = fmt.Errorf("auth token not in JWT format")

View Source

var ErrJWTExpired = fmt.Errorf("jwt has expired")

View Source

var ErrUnidentifiedUser = fmt.Errorf("no username found with which to identify user")

Functions ¶

func FetchX09SignCert ¶

func FetchX09SignCert(keys JSONWebKeySet, kid string) (string, error)

func GetUsernameFromPayload ¶

func GetUsernameFromPayload(jwt string) (string, error)

func ParseX09AsPublicKey ¶

func ParseX09AsPublicKey(key, kid string) (any, *time.Time, error)

func VerifyJWT ¶

func VerifyJWT(jwt string, certs JSONWebKeySet) (bool, error)

Verify whether a JSON Web Token is valid. Takes the token in form of a string and a set of JSON Web Keys (public keys/certs) as input.

Types ¶

type JSONWebKey ¶

type JSONWebKey struct {
	KeyId     string   `json:"kid"`
	X509Certs []string `json:"x5c"`
}

type JSONWebKeySet ¶

type JSONWebKeySet map[string]JSONWebKey

func GetJSONKeyWebSet ¶

func GetJSONKeyWebSet(endpoint string) (jwks JSONWebKeySet, err error)

type JWTHeader ¶

type JWTHeader struct {
	Kid       string `json:"kid"`
	Algorithm string `json:"alg"`
}

type JWTPayload ¶

type JWTPayload struct {
	UniqueUsername    string `json:"unique_name,omitempty"`        // Microsoft Token V1.0
	PreferredUsername string `json:"preferred_username,omitempty"` // Microsoft Token V2.0, Keycloak
	Expires           int64  `json:"exp"`                          // UNIX timestamp
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL