oauth

Jan 22, 2026

Changes in this version

+ const GrantTypeAuthorizationCode

+ const GrantTypeRefreshToken

+ const PKCEMethodS256

+ const ResponseTypeCode

+ const TokenEndpointAuthMethodNone

+ const WellKnownOAuthResourcePath

+ const WellKnownOAuthServerPath

+ const WellKnownOIDCPath

+ var ErrMissingAuthorizationEndpoint = errors.New("missing authorization_endpoint")

+ var ErrMissingIssuer = errors.New("missing issuer")

+ var ErrMissingJWKSURI = errors.New("missing jwks_uri")

+ var ErrMissingResponseTypesSupported = errors.New("missing response_types_supported")

+ var ErrMissingTokenEndpoint = errors.New("missing token_endpoint")

+ type AuthorizationServerMetadata struct

+ AuthorizationEndpoint string

+ CodeChallengeMethodsSupported []string

+ GrantTypesSupported []string

+ IntrospectionEndpoint string

+ Issuer string

+ JWKSURI string

+ RegistrationEndpoint string

+ ResponseTypesSupported []string

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ UserinfoEndpoint string

+ type OIDCDiscoveryDocument struct

+ ClaimsSupported []string

+ IDTokenSigningAlgValuesSupported []string

+ ScopesSupported []string

+ SubjectTypesSupported []string

+ func (d *OIDCDiscoveryDocument) SupportsGrantType(grantType string) bool

+ func (d *OIDCDiscoveryDocument) SupportsPKCE() bool

+ func (d *OIDCDiscoveryDocument) Validate(isOIDC bool) error

Oct 17, 2025

Changes in this version

+ func GenerateUniqueSecretNameWithProvider(workloadName string, secretManager secrets.Provider) (string, error)

+ func ProcessOAuthClientSecret(workloadName, clientSecret string) (string, error)

+ func ProcessOAuthClientSecretWithProvider(workloadName, clientSecret string, secretManager secrets.Provider) (string, error)

+ func StoreSecretInManager(ctx context.Context, secretName, secretValue string) error

+ func StoreSecretInManagerWithProvider(ctx context.Context, secretName, secretValue string, ...) error