oidc

Nov 20, 2025

Changes in this version

+ type CachedDiscovery struct

+ Discovery *OIDCDiscovery

+ ExpiresAt time.Time

+ type CachedJWKS struct

+ ExpiresAt time.Time

+ JWKS *JWKS

+ type JWK struct

+ Alg string

+ Crv string

+ E string

+ Kid string

+ Kty string

+ N string

+ Use string

+ X string

+ Y string

+ type JWKS struct

+ Keys []JWK

+ type OIDCDiscovery struct

+ AuthorizationEndpoint string

+ ClaimsSupported []string

+ CodeChallengeMethodsSupported []string

+ EndSessionEndpoint string

+ GrantTypesSupported []string

+ IDTokenSigningAlgValuesSupported []string

+ Issuer string

+ JwksURI string

+ RegistrationEndpoint string

+ ResponseModesSupported []string

+ ResponseTypesSupported []string

+ RevocationEndpoint string

+ ScopesSupported []string

+ SubjectTypesSupported []string

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ UserinfoEndpoint string

+ type OIDCTokenResponse struct

+ AccessToken string

+ ExpiresIn int

+ IDToken string

+ RefreshToken string

+ Scope string

+ TokenType string

+ type OIDCUserInfo struct

+ Email string

+ EmailVerified bool

+ FamilyName string

+ GivenName string

+ Name string

+ Picture string

+ PreferredUsername string

+ Sub string

+ type PKCEChallenge struct

+ CodeChallenge string

+ CodeVerifier string

+ Method string

+ type Service struct

+ func NewService() *Service

+ func (s *Service) ExchangeCodeForTokens(ctx context.Context, ...) (*OIDCTokenResponse, error)

+ func (s *Service) FetchDiscovery(ctx context.Context, issuerURL string) (*OIDCDiscovery, error)

+ func (s *Service) FetchJWKS(ctx context.Context, jwksURL string) (*JWKS, error)

+ func (s *Service) GeneratePKCEChallenge() (*PKCEChallenge, error)

+ func (s *Service) GetPublicKeyFromJWK(jwk *JWK) (interface{}, error)

+ func (s *Service) GetUserInfo(ctx context.Context, userinfoEndpoint, accessToken string) (*OIDCUserInfo, error)

+ func (s *Service) RefreshTokens(ctx context.Context, ...) (*OIDCTokenResponse, error)

+ func (s *Service) ValidateIDToken(ctx context.Context, tokenString, jwksURL, issuer, clientID, nonce string) (*jwt.MapClaims, error)

+ func (s *Service) ValidateIDTokenWithJWKS(ctx context.Context, ...) (*jwt.MapClaims, error)