Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

authn

package

Go to main page

Versions in this module

v0

v0.0.45

Sep 11, 2026

v0.0.44

Sep 10, 2026

v0.0.43

Sep 3, 2026

v0.0.42

Aug 24, 2026

v0.0.41

Aug 19, 2026

v0.0.40

Aug 13, 2026

v0.0.39

Aug 11, 2026

Changes in this version

+ func ParseBearer(headerValue string) (string, error)

+ func PossiblyOpaque(err error) bool

+ type Code string

+ const CodeInvalidRequest

+ const CodeInvalidToken

+ const CodeUnavailable

+ type Config struct

+ AcceptedTokenTypes []string

+ AllowAnyAudience bool

+ AllowPrivateIP bool

+ Audiences []string

+ AuthTokenFile string

+ CACertPath string

+ DisableLeeway bool

+ HTTPClient *http.Client

+ InsecureAllowHTTP bool

+ Issuer string

+ JWKSURL string

+ KeyProvider KeyProvider

+ Leeway time.Duration

+ MaxJWKSStaleness time.Duration

+ MaxTokenLifetime time.Duration

+ func ValidateConfig(cfg Config) (Config, error)

+ type Error struct

+ Code Code

+ Reason Reason

+ func (e *Error) Error() string

+ func (e *Error) Unwrap() error

+ type KeyProvider interface

+ PublicKeys func(ctx context.Context) ([]PublicKey, error)

+ type Principal struct

+ Claims map[string]any

+ Issuer string

+ Name string

+ Subject string

+ type PublicKey struct

+ Alg string

+ Key crypto.PublicKey

+ KeyID string

+ type Reason string

+ const ReasonAudience

+ const ReasonCriticalHeader

+ const ReasonExpirationMissing

+ const ReasonExpired

+ const ReasonInvalidClaims

+ const ReasonIssuedInFuture

+ const ReasonIssuer

+ const ReasonKeyUnsupported

+ const ReasonKeysStale

+ const ReasonKeysUnavailable

+ const ReasonLifetime

+ const ReasonMalformed

+ const ReasonMissingClaim

+ const ReasonMissingHeader

+ const ReasonNotYetValid

+ const ReasonSignature

+ const ReasonSubject

+ const ReasonTokenType

+ const ReasonUnknownKID

+ const ReasonUnsupportedAlg

+ type Validator struct

+ func NewValidator(ctx context.Context, cfg Config) (*Validator, error)

+ func (v *Validator) Close()

+ func (v *Validator) Validate(ctx context.Context, token string) (Principal, error)