connoauth

May 24, 2026

Changes in this version

type Config

+ CABundlePEM string

May 18, 2026

Changes in this version

+ type RefreshInput struct

+ Config Config

+ RefreshToken string

+ type RefreshResult struct

+ AccessToken string

+ ExpiresAt time.Time

+ RefreshExpiresAt time.Time

+ RefreshToken string

+ Scope string

+ func Refresh(ctx context.Context, in RefreshInput) (*RefreshResult, error)

May 16, 2026

Changes in this version

type MemoryStore

+ func (s *MemoryStore) Lock(_ context.Context, key Key) (func(), error)

type PostgresStore

+ func (s *PostgresStore) Lock(ctx context.Context, key Key) (func(), error)

type Store

+ Lock func(ctx context.Context, key Key) (func(), error)

May 14, 2026

Changes in this version

type Config

+ Grant string

type OAuthStatus

+ Grant string

May 13, 2026

Changes in this version

+ var ErrConfigNotResolvable = errors.New("connoauth: connection config not resolvable")

+ type AdvisoryLocker interface

+ TryLock func(ctx context.Context, k Key) (release func(), ok bool, err error)

+ type ConfigResolver interface

+ MaxLifetime func(ctx context.Context, key Key) time.Duration

+ ResolveConfig func(ctx context.Context, key Key) (Config, error)

type MemoryStore

+ func (s *MemoryStore) List(_ context.Context) ([]PersistedToken, error)

+ type NoopLocker struct

+ func (NoopLocker) TryLock(_ context.Context, _ Key) (release func(), ok bool, err error)

type OAuthStatus

+ LastRevocation *RevocationEvent

+ type PostgresLocker struct

+ func NewPostgresLocker(db *sql.DB) *PostgresLocker

+ func (l *PostgresLocker) TryLock(ctx context.Context, k Key) (release func(), ok bool, err error)

type PostgresStore

+ func (s *PostgresStore) List(ctx context.Context) ([]PersistedToken, error)

+ type Refresher struct

+ func NewRefresher(store Store, configs ConfigResolver, events *authevents.Writer, ...) *Refresher

+ func (r *Refresher) Start()

+ func (r *Refresher) Stop(ctx context.Context) error

+ type RefresherConfig struct

+ AccessLeadTime time.Duration

+ Interval time.Duration

+ RefreshLeadTime time.Duration

+ type RevocationEvent struct

+ IDPHost string

+ OccurredAt time.Time

+ Reason string

type Source

+ func (s *Source) WithActor(actor string) *Source

+ func (s *Source) WithEvents(w *authevents.Writer) *Source

type Store

+ List func(ctx context.Context) ([]PersistedToken, error)

May 13, 2026

Changes in this version

+ const KindAPI

+ const KindMCP

+ var ErrNeedsReauth = errors.New("connoauth: connection needs admin reconnect")

+ var ErrTokenNotFound = errors.New("connoauth: token not found")

+ type Config struct

+ AuthorizationURL string

+ ClientID string

+ ClientSecret string

+ EndpointAuthStyle oauth2.AuthStyle

+ Prompt string

+ Scopes []string

+ TokenURL string

+ type ExchangeInput struct

+ Code string

+ CodeVerifier string

+ Config Config

+ RedirectURI string

+ type ExchangeResult struct

+ AccessToken string

+ ExpiresAt time.Time

+ IDToken string

+ RefreshExpiresAt time.Time

+ RefreshToken string

+ Scope string

+ func Exchange(ctx context.Context, in ExchangeInput) (*ExchangeResult, error)

+ type FieldEncryptor interface

+ Decrypt func(ciphertext string) (string, error)

+ Encrypt func(plaintext string) (string, error)

+ type Key struct

+ Kind string

+ Name string

+ func (k Key) IsValid() bool

+ type MemoryStore struct

+ func NewMemoryStore() *MemoryStore

+ func (s *MemoryStore) Delete(_ context.Context, key Key) error

+ func (s *MemoryStore) Get(_ context.Context, key Key) (*PersistedToken, error)

+ func (s *MemoryStore) Set(_ context.Context, t PersistedToken) error

+ type OAuthStatus struct

+ AuthenticatedAt time.Time

+ AuthenticatedBy string

+ Configured bool

+ ExpiresAt time.Time

+ HasRefreshToken bool

+ LastError string

+ LastRefreshedAt time.Time

+ NeedsReauth bool

+ RefreshExpiresAt time.Time

+ Scope string

+ TokenAcquired bool

+ TokenURL string

+ type PersistedToken struct

+ AccessToken string

+ AuthenticatedAt time.Time

+ AuthenticatedBy string

+ ExpiresAt time.Time

+ Key Key

+ RefreshExpiresAt time.Time

+ RefreshToken string

+ Scope string

+ UpdatedAt time.Time

+ type PostgresStore struct

+ func NewPostgresStore(db *sql.DB, enc FieldEncryptor) *PostgresStore

+ func (s *PostgresStore) Delete(ctx context.Context, key Key) error

+ func (s *PostgresStore) Get(ctx context.Context, key Key) (*PersistedToken, error)

+ func (s *PostgresStore) Set(ctx context.Context, t PersistedToken) error

+ type Source struct

+ func NewSource(store Store, key Key, cfg Config) *Source

+ func (s *Source) Reacquire(ctx context.Context) error

+ func (s *Source) Status(ctx context.Context) OAuthStatus

+ func (s *Source) Token(ctx context.Context) (string, error)

+ type Store interface

+ Delete func(ctx context.Context, key Key) error

+ Get func(ctx context.Context, key Key) (*PersistedToken, error)

+ Set func(ctx context.Context, t PersistedToken) error