session

Mar 30, 2026

Changes in this version

+ const LoginCSRFCookieName

type Manager

+ func (m *Manager) LoadState(ctx context.Context, stateID string) (State, error)

+ func (m *Manager) MakeLoginCSRFCookie(ctx context.Context, value string) (*http.Cookie, error)

+ type ManagerOption func(*Manager)

+ func WithAllowHttpScheme(allowHttpScheme bool) ManagerOption

+ func WithTransportCredentials(b credentials.Builder) ManagerOption

type State

+ LoginCSRFToken string

Jan 12, 2026

Changes in this version

type Manager

+ func (m *Manager) BCLogout(ctx context.Context, logoutJWT string) error

+ func (m *Manager) TriggerHousekeeping(ctx context.Context, concurrencyLimit int, ...) error

type Repository

+ BumpActive func(ctx context.Context, sessionID string, timeout time.Duration) error

+ IsActive func(ctx context.Context, sessionID string) (bool, error)

+ LoadSessionByProviderID func(ctx context.Context, providerID string) (Session, error)

Jan 6, 2026

Changes in this version

type Manager

+ func (m *Manager) Logout(ctx context.Context, sessionID string) (string, error)

Dec 17, 2025

Changes in this version

type OIDCSessionData

+ TenantID string

Dec 8, 2025

Changes in this version

type Manager

+ func (m *Manager) CleanupIdleSessions(ctx context.Context, timeout time.Duration) error

+ func (m *Manager) RefreshExpiringTokens(ctx context.Context, refreshTriggerInterval time.Duration) error

type Repository

+ DeleteSession func(ctx context.Context, session Session) error

type Session

+ LastVisited time.Time

Dec 1, 2025

Changes in this version

+ type Claims struct

+ Email string

+ FamilyName string

+ GivenName string

+ Groups []string

+ Subject string

+ UserUUID string

+ type Manager struct

+ func NewManager(cfg *config.SessionManager, oidc oidc.ProviderRepository, sessions Repository, ...) (*Manager, error)

+ func (m *Manager) FinaliseOIDCLogin(ctx context.Context, stateID, code, fingerprint string) (OIDCSessionData, error)

+ func (m *Manager) MakeAuthURI(ctx context.Context, tenantID, fingerprint, requestURI string) (string, error)

+ func (m *Manager) MakeCSRFCookie(ctx context.Context, value string) (*http.Cookie, error)

+ func (m *Manager) MakeSessionCookie(ctx context.Context, value string) (*http.Cookie, error)

+ func (m *Manager) RefreshExpiringSessions(ctx context.Context) error

+ func (m *Manager) RefreshSession(ctx context.Context, s *Session, provider oidc.Provider) error

+ func (m *Manager) ValidateCSRFToken(token, sessionID string) bool

+ type OIDCSessionData struct

+ CSRFToken string

+ RequestURI string

+ SessionID string

+ type Repository interface

+ DeleteState func(ctx context.Context, stateID string) error

+ ListSessions func(ctx context.Context) ([]Session, error)

+ LoadSession func(ctx context.Context, sessionID string) (Session, error)

+ LoadState func(ctx context.Context, stateID string) (State, error)

+ StoreSession func(ctx context.Context, session Session) error

+ StoreState func(ctx context.Context, state State) error

+ type Session struct

+ AccessToken string

+ AccessTokenExpiry time.Time

+ AuthContext map[string]string

+ CSRFToken string

+ Claims Claims

+ Expiry time.Time

+ Fingerprint string

+ ID string

+ Issuer string

+ ProviderID string

+ RefreshToken string

+ TenantID string

+ type State struct

+ Expiry time.Time

+ Fingerprint string

+ ID string

+ PKCEVerifier string

+ RequestURI string

+ TenantID string