internal/

Package authpolicy resolves effective static and database policy.

Package buildvars exposes build-time version metadata.

Package challenge verifies bot-detection challenges.

Package cmd provides the truster command-line interface.

Package config provides JSONC configuration loading and validation.

Package dev serves live-reloading template previews with mock data.

Package dpop implements strict, reusable DPoP proof cryptographic primitives.

Package email sends verification messages over SMTP.

Package oidc implements the OpenID Connect server endpoints.

Package refresh implements rotating refresh-token exchange logic.

Package secrets retrieves secrets from configured providers.

Package servertls configures TLS for the Truster HTTP server.

Package statedb provides SQLite and PostgreSQL protocol state storage.

Package templates compiles and renders web page and email templates.

Package tokens signs tokens and resolves group claims.

Package trust verifies external OIDC tokens and evaluates compiled trust bindings.

Package upstream provides connectors for authenticating users with upstream OAuth2/OIDC providers.