upstream

package

Go to main page

Versions in this module

v0

v0.8.0

Jan 22, 2026

Changes in this version

+ const DefaultSubjectField

+ var ErrIdentityResolutionFailed = errors.New("failed to resolve user identity")

type BaseOAuth2Provider

+ func (p *BaseOAuth2Provider) FetchUserInfo(ctx context.Context, accessToken string) (*UserInfo, error)

+ func (p *BaseOAuth2Provider) ResolveIdentity(ctx context.Context, tokens *Tokens, _ string) (string, error)

type OAuth2Provider

+ FetchUserInfo func(ctx context.Context, accessToken string) (*UserInfo, error)

+ ResolveIdentity func(ctx context.Context, tokens *Tokens, nonce string) (subject string, err error)

type UserInfoFieldMapping

+ func (m *UserInfoFieldMapping) GetSubjectField() string

+ func (m *UserInfoFieldMapping) ResolveSubject(claims map[string]any) (string, error)

v0.7.2

Jan 19, 2026

Changes in this version

+ type AuthorizationOption func(*authorizationOptions)

+ func WithAdditionalParams(params map[string]string) AuthorizationOption

+ type BaseOAuth2Provider struct

+ func NewOAuth2Provider(config *OAuth2Config, opts ...OAuth2ProviderOption) (*BaseOAuth2Provider, error)

+ func (*BaseOAuth2Provider) Type() ProviderType

+ func (p *BaseOAuth2Provider) AuthorizationURL(state, codeChallenge string, opts ...AuthorizationOption) (string, error)

+ func (p *BaseOAuth2Provider) ExchangeCode(ctx context.Context, code, codeVerifier string) (*Tokens, error)

+ func (p *BaseOAuth2Provider) RefreshTokens(ctx context.Context, refreshToken string) (*Tokens, error)

+ type CommonOAuthConfig struct

+ ClientID string

+ ClientSecret string

+ RedirectURI string

+ Scopes []string

+ func (c *CommonOAuthConfig) Validate() error

+ type OAuth2Config struct

+ AuthorizationEndpoint string

+ TokenEndpoint string

+ UserInfo *UserInfoConfig

+ func (c *OAuth2Config) Validate() error

+ type OAuth2Provider interface

+ AuthorizationURL func(state, codeChallenge string, opts ...AuthorizationOption) (string, error)

+ ExchangeCode func(ctx context.Context, code, codeVerifier string) (*Tokens, error)

+ RefreshTokens func(ctx context.Context, refreshToken string) (*Tokens, error)

+ Type func() ProviderType

+ type OAuth2ProviderOption func(*BaseOAuth2Provider)

+ func WithOAuth2HTTPClient(client *http.Client) OAuth2ProviderOption

+ type ProviderType string

+ const ProviderTypeOAuth2

+ type UserInfoConfig struct

+ AdditionalHeaders map[string]string

+ EndpointURL string

+ FieldMapping *UserInfoFieldMapping

+ HTTPMethod string

+ func (c *UserInfoConfig) Validate() error

+ type UserInfoFetcher interface

+ FetchUserInfo func(ctx context.Context, accessToken string) (*UserInfo, error)

+ type UserInfoFieldMapping struct

+ EmailField string

+ NameField string

+ SubjectField string

v0.7.1

Jan 15, 2026

v0.7.0

Jan 15, 2026

Changes in this version

+ var ErrUserInfoSubjectMismatch = fmt.Errorf("userinfo subject does not match expected subject")

+ func ValidateRedirectURI(uri string) error

+ type Config struct

+ ClientID string

+ ClientSecret string

+ Issuer string

+ RedirectURI string

+ Scopes []string

+ func (c *Config) Validate() error

+ type IDTokenClaims struct

+ Audience []string

+ AuthTime time.Time

+ AuthorizedParty string

+ Email string

+ EmailVerified bool

+ ExpiresAt time.Time

+ IssuedAt time.Time

+ Issuer string

+ Name string

+ Nonce string

+ RawClaims map[string]any

+ Subject string

+ type IDTokenNonceValidator interface

+ ValidateIDTokenWithNonce func(idToken, expectedNonce string) (*IDTokenClaims, error)

+ type OIDCEndpoints struct

+ AuthorizationEndpoint string

+ CodeChallengeMethodsSupported []string

+ Issuer string

+ JWKSEndpoint string

+ TokenEndpoint string

+ UserInfoEndpoint string

+ type Provider interface

+ AuthorizationURL func(state, codeChallenge, nonce string) (string, error)

+ ExchangeCode func(ctx context.Context, code, codeVerifier string) (*Tokens, error)

+ Name func() string

+ RefreshTokens func(ctx context.Context, refreshToken string) (*Tokens, error)

+ UserInfo func(ctx context.Context, accessToken string) (*UserInfo, error)

+ type Tokens struct

+ AccessToken string

+ ExpiresAt time.Time

+ IDToken string

+ RefreshToken string

+ func (t *Tokens) IsExpired() bool

+ type UserInfo struct

+ Claims map[string]any

+ Email string

+ Name string

+ Subject string

+ type UserInfoSubjectValidator interface

+ UserInfoWithSubjectValidation func(ctx context.Context, accessToken, expectedSubject string) (*UserInfo, error)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL