jwt

type HMACKey struct {
	// contains filtered or unexported fields
}

type JWKS struct {
	// contains filtered or unexported fields
}

type JWKStore struct {
	// contains filtered or unexported fields
}

type JWTAuthenticator struct {
	// contains filtered or unexported fields
}

type JWTClaimsConfig struct {
	// Used when all of JWT claims are present in a single object within the decoded JWT.
	Namespace *JWTClaimsNamespace `json:"namespace,omitempty" yaml:"namespace,omitempty"`
	// Can be used when JWT claims are not all present in the single object,
	// but individual claims are provided a JSON pointer within the decoded JWT and optionally a default value.
	Locations map[string]jmes.FieldMappingEntryConfig `json:"locations,omitempty" yaml:"locations,omitempty"`
}

type JWTClaimsFormat string

type JWTClaimsNamespace struct {
	// Path to lookup the Hasura claims within the decoded claims.
	Location string `json:"location" yaml:"location"`
	// Format in which the Hasura claims will be present.
	ClaimsFormat JWTClaimsFormat `json:"claimsFormat" jsonschema:"enum=Json,enum=StringifiedJson" yaml:"claimsFormat"`
}

type JWTKey struct {
	// Algorithm specifies the cryptographic signing algorithm which is used to sign the JWTs.
	// This is required only if you are using the key property in the config.
	Algorithm jose.SignatureAlgorithm `json:"algorithm,omitempty" yaml:"algorithm,omitempty"`
	// An URL where a provider publishes their JWKs (JSON Web Keys - which are used for signing the JWTs).
	// The URL must publish the JWKs in the standard format as described in the RFC 7517 specification.
	// This is optional as you have the alternative of also providing the key (certificate, PEM-encoded public key) as a string - in the key field along with the type.
	JWKFromURL *goenvconf.EnvString `json:"jwkFromUrl,omitempty" yaml:"jwkFromUrl,omitempty"`
	// Inline value of the key to use for decoding the JWT.
	Key *goenvconf.EnvString `json:"key,omitempty" yaml:"key,omitempty"`
}

type JWTKeySet struct {
	// contains filtered or unexported fields
}

type PublicKey struct {
	// contains filtered or unexported fields
}

type RegisterJWKSOption func(*RegisterJWKSOptions)

type RegisterJWKSOptions struct {
	// contains filtered or unexported fields
}

type RelyAuthJWTConfig struct {
	// Unique identity of the auth config.
	// If not set, ID will be the index of the array.
	ID string `json:"id,omitempty" yaml:"id,omitempty"`
	// Authentication mode which is always jwt.
	Mode authmode.AuthMode `json:"mode" jsonschema:"enum=jwt" yaml:"mode"`
	// Brief description of the auth config.
	Description string `json:"description,omitempty" yaml:"description,omitempty"`
	// Validation to check that the aud field is a member of the audience received, otherwise will throw error.
	// Required if there are many JWT auth configurations.
	Audience []string `json:"audience,omitempty" yaml:"audience,omitempty"`
	// Validation to check that the iss field is a member of the iss received, otherwise will throw error.
	// Required if there are many JWT auth configurations.
	Issuer string `json:"issuer,omitempty" yaml:"issuer,omitempty"`
	// The allowed leeway (in seconds) to the exp validation to account for clock skew.
	AllowedSkew int `json:"allowedSkew,omitempty" yaml:"allowedSkew,omitempty"`
	// Source of the JWT authentication token.
	TokenLocation authscheme.TokenLocation `json:"tokenLocation" yaml:"tokenLocation"`
	// Information of the JWT key to verify the token.
	Key JWTKey `json:"key" yaml:"key"`
	// Configuration to describe how and where the engine should look for the claims within the decoded token.
	// You can vary the format and location of the claims.
	ClaimsConfig JWTClaimsConfig `json:"claimsConfig" yaml:"claimsConfig"`
}

type SignatureVerifier interface {
	// GetSignatureAlgorithms get signature algorithms of the keyset.
	GetSignatureAlgorithms() []jose.SignatureAlgorithm
	// VerifySignature verifies a JWT signature using the configured verification method.
	VerifySignature(ctx context.Context, sig *jose.JSONWebSignature) ([]byte, error)
	// Equal checks if the target value is equal.
	Equal(target SignatureVerifier) bool
}