pkg/

Package azurefed implements Microsoft Entra ID (Azure AD) federated identity credentials: it presents a foreign OIDC token as a client_assertion (JWT-bearer) to the tenant's OAuth2 token endpoint in place of a client secret, and exposes the resulting Entra access token via an auto-refreshing oauth2.TokenSource.

Package gcpwif implements Google Cloud Workload Identity Federation: it exchanges a foreign OIDC subject token at Google's STS endpoint (sts.googleapis.com/v1/token) for a Google OAuth2 access token, optionally impersonating a service account via iamcredentials.

Package oidcauth implements a generic, provider-agnostic OpenID Connect machine-to-machine (client_credentials) auth exchange: it resolves the token endpoint (explicitly, via a discovery document, or via issuer discovery), requests a token, and returns the caller-selected token (access_token or id_token) for attachment to outbound requests.