consentpolicy

package

v0.60.0 Latest Latest Go to latest Published: Nov 2, 2026 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/stacklok/toolhive

Links

Open Source Insights

Documentation ¶

Overview ¶

Package consentpolicy validates the syntax, registration eligibility predicates, and deployment prerequisites for administrator consent preauthorization.

Index ¶

func IsBackChannelOnlyClient(client fosite.Client) bool
func IsEligibleClient(client fosite.Client) bool
func Validate(clientIDs []string, authorizationBase, issuer string, upstreamCount int) error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func IsBackChannelOnlyClient ¶

func IsBackChannelOnlyClient(client fosite.Client) bool

IsBackChannelOnlyClient reports whether client has no interactive /authorize flow, using the same explicit marker and metadata-shape exclusions at startup and runtime. Any client without the authorization_code grant qualifies, so /authorize answers it exactly like an unknown client ID instead of letting fosite's redirect_uri validation reveal that the ID exists.

func IsEligibleClient ¶

func IsEligibleClient(client fosite.Client) bool

IsEligibleClient reports whether client supports ToolHive's interactive authorization-code flow and can be preauthorized to skip its consent page.

func Validate ¶

func Validate(clientIDs []string, authorizationBase, issuer string, upstreamCount int) error

Validate checks the configured client IDs and the prerequisites for enabling consent preauthorization. An empty list preserves existing behavior.

Types ¶

This section is empty.

Source Files ¶

View all Source files

consentpolicy.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL