auth

package

v0.2.0 Latest Latest Go to latest Published: Jul 3, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Details

View Source

const Issuer = "token-exchange"

View Source

var DefaultAudience = jwt.Audience{"autojoin"}

DefaultAudience is the default audience for JWT tokens. TODO(rd): Support audience selection (via different URLs or query string)

This section is empty.

type Claims struct {
	jwt.Claims
	Organization string `json:"org"`
}

Claims is a JWT claims set that extends jwt.Claims with an additional field for the Organization.

type JWTSigner struct {
	// contains filtered or unexported fields
}

JWTSigner is a JWT signer that can be used to sign JWT tokens.

func NewJWTSigner(keyPath string) (*JWTSigner, error)

NewJWTSigner loads a private key from a JWK file and prepares a signer.

func (s *JWTSigner) GenerateToken(org string) (string, error)

GenerateToken generates a JWT token for the given organization.

func (s *JWTSigner) GetPublicJWK() jose.JSONWebKey

GetPublicJWK returns the public key in jose.JSONWebKey format.