Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

oauthclient

package

Go to main page

Versions in this module

v0

v0.13.0

Oct 7, 2026

v0.12.0

Oct 6, 2026

Changes in this version

+ const DefaultGitHubAPIURL

+ const DefaultGoogleUserInfoURL

+ const ProviderGitHub

+ const ProviderGoogle

+ const ProviderSystemAuth

+ var ErrInvalidState = errors.New("oauthclient: invalid or expired state")

+ var ErrUnsupportedProvider = errors.New("oauthclient: unsupported provider")

+ type Connector struct

+ APIURL string

+ HTTPClient *http.Client

+ OAuth2 *oauth2.Config

+ Provider string

+ func NewGitHubConnector(cfg ProviderConfig) *Connector

+ func NewGoogleConnector(cfg ProviderConfig) *Connector

+ func (c *Connector) AuthCodeURL(state string, opts ...oauth2.AuthCodeOption) string

+ func (c *Connector) Exchange(ctx context.Context, code string, opts ...oauth2.AuthCodeOption) (*oauth2.Token, error)

+ func (c *Connector) FetchUser(ctx context.Context, token *oauth2.Token) (*User, error)

+ type MemoryStateStore struct

+ func NewMemoryStateStore() *MemoryStateStore

+ func (s *MemoryStateStore) Put(_ context.Context, state string, data StateData, ttl time.Duration) error

+ func (s *MemoryStateStore) Take(_ context.Context, state string) (StateData, error)

+ type StateData struct

+ Nonce string

+ PKCEVerifier string

+ Provider string

+ RedirectURL string

+ type StateStore interface

+ Put func(ctx context.Context, state string, data StateData, ttl time.Duration) error

+ Take func(ctx context.Context, state string) (StateData, error)

type User

+ EmailVerified bool

v0.11.0

Oct 3, 2026

Changes in this version

+ type SystemAuthConfig struct

+ BaseURL string

+ func (c SystemAuthConfig) AuthorizationURL() string

+ func (c SystemAuthConfig) OAuth2Config() *oauth2.Config

+ func (c SystemAuthConfig) TokenURL() string

+ func (c SystemAuthConfig) UserInfoURL() string

type User

+ func FetchSystemAuthUser(ctx context.Context, cfg SystemAuthConfig, accessToken string) (*User, error)

v0.10.0

Sep 6, 2026

Changes in this version

+ const StateCookieMaxAge

+ const StateCookieName

+ func GenerateState() (string, error)

+ func GitHubConfig(cfg ProviderConfig) *oauth2.Config

+ func GoogleConfig(cfg ProviderConfig) *oauth2.Config

+ type CoreControlConfig struct

+ BaseURL string

+ func (c CoreControlConfig) AuthorizationURL() string

+ func (c CoreControlConfig) OAuth2Config() *oauth2.Config

+ func (c CoreControlConfig) TokenURL() string

+ func (c CoreControlConfig) UserInfoURL() string

+ type ProviderConfig struct

+ ClientID string

+ ClientSecret string

+ RedirectURL string

+ Scopes []string

+ func (c ProviderConfig) Enabled() bool

+ type StateManager struct

+ CookieName string

+ MaxAge int

+ SameSite http.SameSite

+ Secure bool

+ func NewStateManager() *StateManager

+ func NewStateManagerInsecure() *StateManager

+ func (m *StateManager) SetStateCookie(w http.ResponseWriter, state string)

+ func (m *StateManager) ValidateState(w http.ResponseWriter, r *http.Request, state string) bool

+ type User struct

+ AccessToken string

+ AvatarURL string

+ Email string

+ Name string

+ Provider string

+ ProviderID string

+ Raw map[string]any

+ RefreshToken string

+ TokenExpiry time.Time

+ Username string

+ func FetchCoreControlUser(ctx context.Context, cfg CoreControlConfig, accessToken string) (*User, error)

+ func FetchGitHubUser(ctx context.Context, cfg *oauth2.Config, code string) (*User, error)

+ func FetchGoogleUser(ctx context.Context, cfg *oauth2.Config, code string) (*User, error)