Documentation
¶
Overview ¶
Package resourceuri holds the RFC 8707 section 2 syntax rule for a resource indicator, in one place both the OAuth2 provider and the core settings can reach.
The provider validates what a client sends; the core validates what an operator configures as session.resource_identifier. Those two values are compared against each other at request time, so a rule enforced on one side and not the other is worse than no rule: the deployment looks configured and matches nothing. The provider plugin already imports the root package, so the root cannot import the provider back, which is why the rule lives here rather than in either of them.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func SyntaxError ¶
SyntaxError checks one resource indicator and returns a description of what is wrong with it, or an empty string when it is valid.
A string return rather than an error because the callers wrap it in their own error shapes: an OAuth2 invalid_target response on one side, a settings write rejection on the other.
Types ¶
This section is empty.
Source Files