crypto

type AESGCMEncryptor ¶

type AESGCMEncryptor struct {
	// contains filtered or unexported fields
}

func (e *AESGCMEncryptor) Decrypt(ctx context.Context, cyphertext []byte, associatedData []byte) ([]byte, error)

func (e *AESGCMEncryptor) Encrypt(ctx context.Context, data []byte, associatedData []byte) ([]byte, error)

type Encryptor ¶

type Encryptor interface {
	Encrypt(context.Context, []byte, []byte) ([]byte, error)
	Decrypt(context.Context, []byte, []byte) ([]byte, error)
}

func NewAESGCMEncryptor(key []byte) Encryptor

func NewNoOpEncryptor() Encryptor

type NoOpEncryptor ¶

type NoOpEncryptor struct {
}

func (e *NoOpEncryptor) Decrypt(ctx context.Context, data []byte, associatedData []byte) ([]byte, error)

func (e *NoOpEncryptor) Encrypt(ctx context.Context, data []byte, associatedData []byte) ([]byte, error)

type OIDCVerifier ¶

type OIDCVerifier struct {
	// contains filtered or unexported fields
}

To avoid always going to the /.well-known/openid-configuration endpoint, we rely on the way go-oidc caches public keys in oidc.IDTokenVerifier, and we keep a map of verifiers in memory for our integrations.

func NewOIDCVerifier() *OIDCVerifier

func (v *OIDCVerifier) Verify(ctx context.Context, issuer, audience, token string) (*oidc.IDToken, error)