Versions in this module Expand all Collapse all v1 v1.1.0 Jul 10, 2026 Changes in this version type Claims + AMR []string v1.0.0 Jul 6, 2026 Changes in this version + type Authenticator struct + func NewAuthenticator(v *Verifier, ps PrincipalStore) *Authenticator + func (a *Authenticator) Authenticate(r *http.Request) (authz.Actor, error) + type Claims struct + BreakGlass bool + CapacityID uuid.UUID + ImpersonatorUserID uuid.UUID + TenantID uuid.UUID + func (c Claims) Subject() string + type Config struct + Audience string + Issuer string + Leeway time.Duration + type JWKSConfig struct + Client *http.Client + Issuer string + JWKSURI string + Now func() time.Time + TTL time.Duration + type KeySource interface + Key func(ctx context.Context, kid string) (any, error) + func NewJWKSKeySource(cfg JWKSConfig) (KeySource, error) + func NewStaticKeySource(keys map[string]any) KeySource + type PrincipalStore interface + UserIDBySubject func(ctx context.Context, subject string) (uuid.UUID, error) + ValidateCapacity func(ctx context.Context, userID, tenantID, capacityID uuid.UUID) error + type Verifier struct + func NewVerifier(keys KeySource, cfg Config) *Verifier + func (v *Verifier) Actor(ctx context.Context, claims Claims, ps PrincipalStore) (authz.Actor, error) + func (v *Verifier) Verify(ctx context.Context, tokenString string) (Claims, error)
Go to main page