challenges

func CheckSignature ¶

func CheckSignature(pub crypto.PublicKey, proof []byte, subject string) error

CheckSignature verifies a challenge, a signature over the subject or email of an OIDC token

func CheckSignatureWithVerifier ¶ added in v1.7.0

func CheckSignatureWithVerifier(verifier signature.Verifier, proof []byte, subject string) error

CheckSignatureWithVerifier verifies a challenge, a signature over the subject or email of an OIDC token

func ParsePublicKey ¶ added in v0.4.0

func ParsePublicKey(encodedPubKey string) (crypto.PublicKey, error)

ParsePublicKey parses a PEM or DER encoded public key. Returns an error if decoding fails or if no public key is found.

func PrincipalFromIDToken ¶ added in v0.5.0

func PrincipalFromIDToken(ctx context.Context, tok *oidc.IDToken) (identity.Principal, error)