Documentation
¶
Overview ¶
Package resourceurl defines the canonical protected-resource URL identity shared by the server, enrollment registry, and discovery client.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Canonical ¶
Canonical validates and canonicalizes an RFC 9728 HTTPS resource. Root slash, host case, and the default HTTPS port have one stable representation.
func MetadataURL ¶
MetadataURL returns the RFC 9728 metadata URL for a canonical resource.
func Safe ¶
Safe reports whether value is a non-empty, bounded string free of control and Unicode format characters. Shared by the server, enrollment registry, and discovery client so an identity-safety tightening cannot drift between them.
func ValidScopeToken ¶
ValidScopeToken reports whether scope is a single RFC 6749 §3.3 scope-token (VSCHAR minus DQUOTE/backslash, no comma — a comma is the CSV separator wherever scopes are joined for display or storage). Shared by the server's protected-resource profile, the OIDC CLI/Helm flag parser, and the discovery client so an untrusted metadata response cannot smuggle a separator character into a scope value.
Types ¶
This section is empty.
Source Files