agentauth

Jul 21, 2026

Changes in this version

+ const AccessTokenTTL

+ const IdentityAssertionTTL

+ const SigningAlg

+ const TypAccessToken

+ const TypIdentityAssertion

+ var ErrSigningDisabled = errors.New("agentauth: signing key not configured")

+ var ErrTokenInvalid = errors.New("agentauth: token invalid")

+ type Signer struct

+ func NewSigner(pemKey, kid string) (*Signer, error)

+ func (s *Signer) Enabled() bool

+ func (s *Signer) KeyID() string

+ func (s *Signer) PublicJWKS() jose.JSONWebKeySet

+ func (s *Signer) Sign(claims jwt.Claims, private map[string]interface{}) (string, error)

+ func (s *Signer) SignAccessToken(sub, scope string, assertionVersion int, issuer string) (string, time.Time, error)

+ func (s *Signer) SignIdentityAssertion(sub, scope string, assertionVersion int, issuer string) (string, time.Time, error)

+ func (s *Signer) VerifyToken(token, expectedType, issuer string) (*VerifiedClaims, error)

+ type VerifiedClaims struct

+ AssertionVersion int

+ Expiry time.Time

+ Scope string

+ Subject string

+ Type string