Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

authn

package

Go to main page

Versions in this module

v0

v0.0.41

Aug 19, 2026

v0.0.40

Aug 13, 2026

v0.0.39

Aug 11, 2026

Changes in this version

+ func ParseBearer(headerValue string) (string, error)

+ func PossiblyOpaque(err error) bool

+ type Code string

+ const CodeInvalidRequest

+ const CodeInvalidToken

+ const CodeUnavailable

+ type Config struct

+ AcceptedTokenTypes []string

+ AllowAnyAudience bool

+ AllowPrivateIP bool

+ Audiences []string

+ AuthTokenFile string

+ CACertPath string

+ DisableLeeway bool

+ HTTPClient *http.Client

+ InsecureAllowHTTP bool

+ Issuer string

+ JWKSURL string

+ KeyProvider KeyProvider

+ Leeway time.Duration

+ MaxJWKSStaleness time.Duration

+ MaxTokenLifetime time.Duration

+ func ValidateConfig(cfg Config) (Config, error)

+ type Error struct

+ Code Code

+ Reason Reason

+ func (e *Error) Error() string

+ func (e *Error) Unwrap() error

+ type KeyProvider interface

+ PublicKeys func(ctx context.Context) ([]PublicKey, error)

+ type Principal struct

+ Claims map[string]any

+ Issuer string

+ Name string

+ Subject string

+ type PublicKey struct

+ Alg string

+ Key crypto.PublicKey

+ KeyID string

+ type Reason string

+ const ReasonAudience

+ const ReasonCriticalHeader

+ const ReasonExpirationMissing

+ const ReasonExpired

+ const ReasonInvalidClaims

+ const ReasonIssuedInFuture

+ const ReasonIssuer

+ const ReasonKeyUnsupported

+ const ReasonKeysStale

+ const ReasonKeysUnavailable

+ const ReasonLifetime

+ const ReasonMalformed

+ const ReasonMissingClaim

+ const ReasonMissingHeader

+ const ReasonNotYetValid

+ const ReasonSignature

+ const ReasonSubject

+ const ReasonTokenType

+ const ReasonUnknownKID

+ const ReasonUnsupportedAlg

+ type Validator struct

+ func NewValidator(ctx context.Context, cfg Config) (*Validator, error)

+ func (v *Validator) Close()

+ func (v *Validator) Validate(ctx context.Context, token string) (Principal, error)