pkg

package

Go to main page

Versions in this module

v0

v0.4.0

Jun 12, 2025

Changes in this version

type CollectedEntity

+ UIInfos map[string]UIInfo

type FederationEntityMetadata

+ Description string

+ DisplayName string

+ InformationURI string

+ Keywords []string

+ OrganizationURI string

type Metadata

+ Extra map[string]any

+ func (m *Metadata) FindEntityMetadata(entityType string, metadata any) error

+ func (m *Metadata) UnmarshalJSON(data []byte) error

+ func (m Metadata) IterateStringClaim(tag string, iterator func(entityType, value string))

+ func (m Metadata) IterateStringSliceClaim(tag string, iterator func(entityType string, value []string))

+ func (m Metadata) MarshalJSON() ([]byte, error)

type MetadataPolicies

+ Extra map[string]MetadataPolicy

+ func (m *MetadataPolicies) UnmarshalJSON(data []byte) error

+ func (m MetadataPolicies) MarshalJSON() ([]byte, error)

type OAuthProtectedResourceMetadata

+ Description string

+ DisplayName string

+ InformationURI string

+ Keywords []string

+ OrganizationURI string

type OpenIDProviderMetadata

+ Description string

+ DisplayName string

+ InformationURI string

+ Keywords []string

+ OrganizationURI string

type OpenIDRelyingPartyMetadata

+ Description string

+ DisplayName string

+ InformationURI string

+ Keywords []string

+ OrganizationURI string

type SliceOrSingleValue

+ func (v *SliceOrSingleValue[T]) UnmarshalYAML(value *yaml.Node) error

+ func (v SliceOrSingleValue[T]) MarshalYAML() (interface{}, error)

+ type UIInfo struct

+ Description string

+ DisplayName string

+ Extra map[string]interface{}

+ InformationURI string

+ Keywords []string

+ LogoURI string

+ PolicyURI string

+ func (i *UIInfo) UnmarshalJSON(data []byte) error

+ func (i UIInfo) MarshalJSON() ([]byte, error)

v0.3.1

Apr 25, 2025

Changes in this version

+ const MatchModeExactCaseInsensitive

+ const MatchModeExactCaseSensitive

+ const MatchModeFuzzy

+ const MatchModeSubstringCaseInsensitive

+ const MatchModeSubstringCaseSensitive

+ type CollectedEntity struct

+ DisplayNames map[string]string

+ EntityID string

+ EntityTypes []string

+ Extra map[string]interface{}

+ LogoURIs map[string]string

+ Metadata *Metadata

+ TrustChain JWSMessages

+ TrustMarks TrustMarkInfos

+ func (e *CollectedEntity) UnmarshalJSON(data []byte) error

+ func (e CollectedEntity) MarshalJSON() ([]byte, error)

+ type DisplayNameGuesser interface

+ GuessDisplayName func() string

+ type EntityCollectionFilter interface

+ Filter func(*CollectedEntity) bool

+ func EntityCollectionFilterOPSupportedGrantTypesIncludes(trustAnchorIDs []string, neededGrantTypes ...string) EntityCollectionFilter

+ func EntityCollectionFilterOPSupportedScopesIncludes(trustAnchorIDs []string, neededScopes ...string) EntityCollectionFilter

+ func EntityCollectionFilterOPSupportsAutomaticRegistration(trustAnchorIDs []string) EntityCollectionFilter

+ func EntityCollectionFilterOPSupportsExplicitRegistration(trustAnchorIDs []string) EntityCollectionFilter

+ func EntityCollectionFilterOPs(trustAnchorIDs []string) EntityCollectionFilter

+ func NewEntityCollectionFilter(filter func(entity *CollectedEntity) bool) EntityCollectionFilter

+ type EntityCollectionFilterVerifiedChains struct

+ TrustAnchors TrustAnchors

+ func (f EntityCollectionFilterVerifiedChains) Filter(e *CollectedEntity) bool

+ type EntityCollectionResponse struct

+ Extra map[string]interface{}

+ FederationEntities []*CollectedEntity

+ LastUpdated *unixtime.Unixtime

+ NextEntityID string

+ type EntityCollector interface

+ CollectEntities func(req apimodel.EntityCollectionRequest) []*CollectedEntity

type FederationEntityMetadata

+ func (m FederationEntityMetadata) GuessDisplayName() string

+ type FilterableVerifiedChainsEntityCollector struct

+ Collector EntityCollector

+ Filters []EntityCollectionFilter

+ func (d FilterableVerifiedChainsEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

type Metadata

+ func (m Metadata) CollectStringClaim(tag string) map[string]string

+ func (m Metadata) GuessDisplayNames() map[string]string

type OAuthAuthorizationServerMetadata

+ func (m OAuthAuthorizationServerMetadata) GuessDisplayName() string

type OAuthClientMetadata

+ func (m OAuthClientMetadata) GuessDisplayName() string

type OAuthProtectedResourceMetadata

+ ResourceName string

+ func (m OAuthProtectedResourceMetadata) GuessDisplayName() string

type OpenIDProviderMetadata

+ func (m OpenIDProviderMetadata) GuessDisplayName() string

type OpenIDRelyingPartyMetadata

+ func (m OpenIDRelyingPartyMetadata) GuessDisplayName() string

+ type SimpleEntityCollector struct

+ func (d *SimpleEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

+ type SimpleOPCollector struct

+ func (d *SimpleOPCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

+ type SimpleRemoteEntityCollector struct

+ EntityCollectionEndpoint string

+ func (c SimpleRemoteEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) []*CollectedEntity

+ type SmartRemoteEntityCollector struct

+ TrustAnchors []string

+ func (c SmartRemoteEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) []*CollectedEntity

+ type VerifiedChainsEntityCollector struct

+ func (VerifiedChainsEntityCollector) CollectEntities(req apimodel.EntityCollectionRequest) (entities []*CollectedEntity)

v0.3.0

Apr 15, 2025

Changes in this version

type EntityConfigurationTrustMarkConfig

+ SelfIssuanceSpec TrustMarkSpec

+ SelfIssued bool

v0.2.2

Mar 28, 2025

Changes in this version

type ResolveResponse

+ func (r ResolveResponse) MarshalJSON() ([]byte, error)

v0.2.1

Feb 4, 2025

v0.2.0

Feb 4, 2025

Changes in this version

+ const ClientRegistrationTypeAutomatic

+ const ClientRegistrationTypeExplicit

+ const InvalidClient

+ const InvalidIssuer

+ const InvalidMetadata

+ const InvalidRequest

+ const InvalidSubject

+ const InvalidTrustAnchor

+ const InvalidTrustChain

+ const NotFound

+ const ServerError

+ const TemporarilyUnavailable

+ const UnsupportedParameter

+ var OPDiscoveryFilterAutomaticRegistration opDiscoveryFilterAutomaticRegistration

+ var OPDiscoveryFilterExplicitRegistration opDiscoveryFilterExplicitRegistration

+ var OperatorOrder = []PolicyOperatorName

+ var TrustChainsFilterValidMetadata = NewTrustChainsFilterFromCheckerFnc(func(chain TrustChain) bool { ... })

+ func DisableDebugLogging()

+ func EnableDebugLogging()

+ func RegisterPolicyOperator(operator PolicyOperator)

+ func RegisterPolicyVerifier(v PolicyVerifier)

+ func TrustChainScoringPathLen(c TrustChain) int

+ type AllowedTrustMarkIssuers map[string][]string

+ type ConstraintSpecification struct

+ AllowedEntityTypes []string

+ MaxPathLength *int

+ NamingConstraints *NamingConstraints

+ type DelegationJWT struct

+ ExpiresAt *unixtime.Unixtime

+ Extra map[string]interface{}

+ ID string

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ Ref string

+ Subject string

+ func (djwt *DelegationJWT) UnmarshalJSON(data []byte) error

+ func (djwt DelegationJWT) MarshalJSON() ([]byte, error)

+ func (djwt DelegationJWT) VerifyExternal(jwks jwk.JWKS) error

+ func (djwt DelegationJWT) VerifyFederation(ta *EntityStatementPayload) error

+ type EntityConfigurationTrustMarkConfig struct

+ JWT string

+ MinLifetime unixtime.DurationInSeconds

+ Refresh bool

+ RefreshGracePeriod unixtime.DurationInSeconds

+ TrustMarkID string

+ TrustMarkIssuer string

+ func (c *EntityConfigurationTrustMarkConfig) TrustMarkJWT() (string, error)

+ func (c *EntityConfigurationTrustMarkConfig) Verify(sub, ownTrustMarkEndpoint string) error

+ type EntityStatement struct

+ func FetchEntityStatement(fetchEndpoint, subID, issID string) (*EntityStatement, error)

+ func GetEntityConfiguration(entityID string) (*EntityStatement, error)

+ func ParseEntityStatement(statementJWT []byte) (*EntityStatement, error)

+ func (e *EntityStatement) UnmarshalMsgpack(data []byte) error

+ func (e EntityStatement) MarshalMsgpack() ([]byte, error)

+ func (e EntityStatement) Verify(keys jwk.JWKS) bool

+ type EntityStatementPayload struct

+ Audience string

+ AuthorityHints []string

+ Constraints *ConstraintSpecification

+ CriticalExtensions []string

+ ExpiresAt unixtime.Unixtime

+ Extra map[string]interface{}

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ JWKS jwk.JWKS

+ Metadata *Metadata

+ MetadataPolicy *MetadataPolicies

+ MetadataPolicyCrit []PolicyOperatorName

+ SourceEndpoint string

+ Subject string

+ TrustAnchorID string

+ TrustMarkIssuers AllowedTrustMarkIssuers

+ TrustMarkOwners TrustMarkOwners

+ TrustMarks TrustMarkInfos

+ func (e *EntityStatementPayload) UnmarshalJSON(data []byte) error

+ func (e *EntityStatementPayload) UnmarshalMsgpack(data []byte) error

+ func (e EntityStatementPayload) MarshalJSON() ([]byte, error)

+ func (e EntityStatementPayload) TimeValid() bool

+ type EntityStatementSigner struct

+ func NewEntityStatementSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *EntityStatementSigner

+ func (s EntityStatementSigner) JWT(i any) (jwt []byte, err error)

+ type Error struct

+ Error string

+ ErrorDescription string

+ func ErrorInvalidClient(description string) Error

+ func ErrorInvalidIssuer(description string) Error

+ func ErrorInvalidMetadata(description string) Error

+ func ErrorInvalidRequest(description string) Error

+ func ErrorInvalidSubject(description string) Error

+ func ErrorInvalidTrustAnchor(description string) Error

+ func ErrorInvalidTrustChain(description string) Error

+ func ErrorNotFound(description string) Error

+ func ErrorServerError(description string) Error

+ func ErrorTemporarilyUnavailable(description string) Error

+ func ErrorUnsupportedParameter(description string) Error

+ type FederationEntity struct

+ AuthorityHints []string

+ ConfigurationLifetime int64

+ EntityID string

+ Metadata *Metadata

+ TrustMarkIssuers AllowedTrustMarkIssuers

+ TrustMarkOwners TrustMarkOwners

+ TrustMarks []*EntityConfigurationTrustMarkConfig

+ func NewFederationEntity(entityID string, authorityHints []string, metadata *Metadata, ...) (*FederationEntity, error)

+ func (f FederationEntity) EntityConfigurationJWT() ([]byte, error)

+ func (f FederationEntity) EntityConfigurationPayload() *EntityStatementPayload

+ func (f FederationEntity) SignEntityStatement(payload EntityStatementPayload) ([]byte, error)

+ type FederationEntityMetadata struct

+ Contacts []string

+ Extra map[string]any

+ FederationFetchEndpoint string

+ FederationHistoricalLKeysEndpoint string

+ FederationListEndpoint string

+ FederationResolveEndpoint string

+ FederationTrustMarkEndpoint string

+ FederationTrustMarkListEndpoint string

+ FederationTrustMarkStatusEndpoint string

+ HomepageURI string

+ LogoURI string

+ OrganizationName string

+ PolicyURI string

+ func (m *FederationEntityMetadata) UnmarshalJSON(data []byte) error

+ func (m *FederationEntityMetadata) UnmarshalMsgpack(data []byte) error

+ func (m FederationEntityMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m FederationEntityMetadata) MarshalJSON() ([]byte, error)

+ type FederationLeaf struct

+ TrustAnchors TrustAnchors

+ func NewFederationLeaf(entityID string, authorityHints []string, trustAnchors TrustAnchors, ...) (*FederationLeaf, error)

+ func (f FederationLeaf) CodeExchange(issuer, code, redirectURI string, additionalParameter url.Values) (*OIDCTokenResponse, *OIDCErrorResponse, error)

+ func (f FederationLeaf) GetAuthorizationURL(issuer, redirectURI, state, scope string, additionalParams url.Values) (string, error)

+ func (f FederationLeaf) RequestObjectProducer() *RequestObjectProducer

+ func (f FederationLeaf) ResolveOPMetadata(issuer string) (*OpenIDProviderMetadata, error)

+ type FilterableVerifiedChainsOPDiscoverer struct

+ Filters []OPDiscoveryFilter

+ func (d FilterableVerifiedChainsOPDiscoverer) Discover(authorities ...TrustAnchor) (opInfos []*OpenIDProviderMetadata)

+ type GeneralJWTSigner struct

+ func NewGeneralJWTSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *GeneralJWTSigner

+ func (s *GeneralJWTSigner) EntityStatementSigner() *EntityStatementSigner

+ func (s *GeneralJWTSigner) JWKS() myjwk.JWKS

+ func (s *GeneralJWTSigner) ResolveResponseSigner() *ResolveResponseSigner

+ func (s *GeneralJWTSigner) TrustMarkDelegationSigner() *TrustMarkDelegationSigner

+ func (s *GeneralJWTSigner) TrustMarkSigner() *TrustMarkSigner

+ func (s *GeneralJWTSigner) Typed(headerType string) *TypedJWTSigner

+ func (s GeneralJWTSigner) JWT(i any, headerType string) (jwt []byte, err error)

+ type JWSMessages []*jwx.ParsedJWT

+ func (m *JWSMessages) UnmarshalJSON(data []byte) error

+ func (m JWSMessages) MarshalJSON() ([]byte, error)

+ type JWTSigner interface

+ JWKS func() jwk.Set

+ JWT func(i any) (jwt []byte, err error)

+ type LocalMetadataResolver struct

+ func (LocalMetadataResolver) ResolvePossible(req apimodel.ResolveRequest) (bool, bool)

+ func (r LocalMetadataResolver) Resolve(req apimodel.ResolveRequest) (*Metadata, error)

+ func (r LocalMetadataResolver) ResolveResponsePayload(req apimodel.ResolveRequest) (res ResolveResponsePayload, err error)

+ type Metadata struct

+ FederationEntity *FederationEntityMetadata

+ OAuthAuthorizationServer *OAuthAuthorizationServerMetadata

+ OAuthClient *OAuthClientMetadata

+ OAuthProtectedResource *OAuthProtectedResourceMetadata

+ OpenIDProvider *OpenIDProviderMetadata

+ RelyingParty *OpenIDRelyingPartyMetadata

+ func (m Metadata) ApplyPolicy(p *MetadataPolicies) (*Metadata, error)

+ func (m Metadata) GuessEntityTypes() (entityTypes []string)

+ type MetadataPolicies struct

+ FederationEntity MetadataPolicy

+ OAuthAuthorizationServer MetadataPolicy

+ OAuthClient MetadataPolicy

+ OAuthProtectedResource MetadataPolicy

+ OpenIDProvider MetadataPolicy

+ RelyingParty MetadataPolicy

+ func MergeMetadataPolicies(policies ...*MetadataPolicies) (*MetadataPolicies, error)

+ type MetadataPolicy map[string]MetadataPolicyEntry

+ func CombineMetadataPolicy(pathInfo string, policies ...MetadataPolicy) (MetadataPolicy, error)

+ func (p MetadataPolicy) Verify(pathInfo string) error

+ type MetadataPolicyEntry map[PolicyOperatorName]any

+ func (p MetadataPolicyEntry) ApplyTo(value any, pathInfo string) (any, error)

+ func (p MetadataPolicyEntry) Verify(pathInfo string) error

+ type MetadataResolver interface

+ Resolve func(request apimodel.ResolveRequest) (*Metadata, error)

+ ResolvePossible func(request apimodel.ResolveRequest) (validConfirmed, invalidConfirmed bool)

+ ResolveResponsePayload func(request apimodel.ResolveRequest) (ResolveResponsePayload, error)

+ var DefaultMetadataResolver MetadataResolver = LocalMetadataResolver{}

+ type NamingConstraints struct

+ Excluded []string

+ Permitted []string

+ type OAuthAuthorizationServerMetadata OpenIDProviderMetadata

+ func (m *OAuthAuthorizationServerMetadata) UnmarshalJSON(data []byte) error

+ func (m OAuthAuthorizationServerMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OAuthAuthorizationServerMetadata) MarshalJSON() ([]byte, error)

+ type OAuthClientMetadata OpenIDRelyingPartyMetadata

+ func (m *OAuthClientMetadata) UnmarshalJSON(data []byte) error

+ func (m OAuthClientMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OAuthClientMetadata) MarshalJSON() ([]byte, error)

+ type OAuthProtectedResourceMetadata struct

+ AuthorizationServers []string

+ BearerMethodsSupported []string

+ Contacts []string

+ Extra map[string]any

+ HomepageURI string

+ JWKS *jwk.JWKS

+ JWKSURI string

+ LogoURI string

+ OrganizationName string

+ PolicyURI string

+ Resource string

+ ResourceDocumentation string

+ ResourceEncryptionAlgValuesSupported []string

+ ResourceEncryptionEncValuesSupported []string

+ ResourcePolicyURI string

+ ResourceSigningAlgValuesSupported []string

+ ResourceTOSURI string

+ ScopesSupported []string

+ SignedJWKSURI string

+ func (m *OAuthProtectedResourceMetadata) UnmarshalJSON(data []byte) error

+ func (m *OAuthProtectedResourceMetadata) UnmarshalMsgpack(data []byte) error

+ func (m OAuthProtectedResourceMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OAuthProtectedResourceMetadata) MarshalJSON() ([]byte, error)

+ type OIDCErrorResponse struct

+ Error string

+ ErrorDescription string

+ type OIDCTokenResponse struct

+ AccessToken string

+ ExpiresIn int64

+ Extra map[string]any

+ IDToken string

+ RefreshToken string

+ Scopes string

+ TokenType string

+ func (res *OIDCTokenResponse) UnmarshalJSON(data []byte) error

+ type OPDiscoverer interface

+ Discover func(authorities ...string) []*OpenIDProviderMetadata

+ type OPDiscoveryFilter interface

+ Filter func(*OpenIDProviderMetadata) bool

+ func NewOPDiscoveryFilter(filter func(metadata *OpenIDProviderMetadata) bool) OPDiscoveryFilter

+ func OPDiscoveryFilterSupportedGrantTypesIncludes(neededGrantTypes ...string) OPDiscoveryFilter

+ func OPDiscoveryFilterSupportedScopesIncludes(neededScopes ...string) OPDiscoveryFilter

+ type OPDiscoveryFilterVerifiedChains struct

+ TrustAnchors TrustAnchors

+ func (f OPDiscoveryFilterVerifiedChains) Filter(op *OpenIDProviderMetadata) bool

+ type OpenIDProviderMetadata struct

+ ACRValuesSupported []string

+ AuthorizationDetailsTypesSupported []string

+ AuthorizationEndpoint string

+ AuthorizationResponseIssParameterSupported bool

+ BackchannelAuthenticationEndpoint string

+ BackchannelAuthenticationRequestSigningAlgValuesSupported []string

+ BackchannelLogoutSessionSupported bool

+ BackchannelLogoutSupported bool

+ BackchannelTokenDeliveryModesSupported []string

+ BackchannelUserCodeParameterSupported bool

+ CheckSessionIFrame string

+ ClaimsLocalesSupported []string

+ ClaimsParameterSupported bool

+ ClaimsSupported []string

+ ClientRegistrationTypesSupported []string

+ CodeChallengeMethodsSupported []string

+ Contacts []string

+ DeviceAuthorizationEndpoint string

+ DisplayValuesSupported []string

+ EndSessionEndpoint string

+ Extra map[string]any

+ FederationRegistrationEndpoint string

+ FrontchannelLogoutSupported bool

+ GrantTypesSupported []string

+ HomepageURI string

+ IDTokenEncryptedResponseAlgValuesSupported []string

+ IDTokenEncryptedResponseEncValuesSupported []string

+ IDTokenSignedResponseAlgValuesSupported []string

+ IntrospectionEncryptionAlgValuesSupported []string

+ IntrospectionEncryptionEncValuesSupported []string

+ IntrospectionEndpoint string

+ IntrospectionEndpointAuthMethodsSupported []string

+ IntrospectionEndpointAuthSigningAlgValuesSupported []string

+ IntrospectionSigningAlgValuesSupported []string

+ Issuer string

+ JWKS *jwk.JWKS

+ JWKSURI string

+ LogoURI string

+ MTLSEndpointAliases map[string]string

+ NFVTokenEncryptionAlgValuesSupported []string

+ NFVTokenEncryptionEncValuesSupported []string

+ NFVTokenSigningAlgValuesSupported []string

+ OPPolicyURI string

+ OPTOSURI string

+ OrganizationName string

+ PolicyURI string

+ PushedAuthorizationRequestEndpoint string

+ RegistrationEndpoint string

+ RequestAuthenticationMethodsSupported map[string][]string

+ RequestAuthenticationSigningAlgValuesSupported []string

+ RequestEncryptedResponseAlgValuesSupported []string

+ RequestEncryptedResponseEncValuesSupported []string

+ RequestParameterSupported bool

+ RequestSignedResponseAlgValuesSupported []string

+ RequestURIParameterSupported bool

+ RequirePushedAuthorizationRequests bool

+ RequireRequestURIRegistration bool

+ RequireSignedRequestObject bool

+ ResponseModesSupported []string

+ ResponseTypesSupported []string

+ RevocationEndpoint string

+ RevocationEndpointAuthMethodsSupported []string

+ RevocationEndpointAuthSigningAlgValuesSupported []string

+ ScopesSupported []string

+ ServiceDocumentation string

+ SignedJWKSURI string

+ SignedMetadata string

+ SubjectTypesSupported []string

+ TLSClientCertificateBoundAccessTokens bool

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ TokenEndpointAuthSigningAlgValuesSupported []string

+ UILocalesSupported []string

+ UserinfoEncryptedResponseAlgValuesSupported []string

+ UserinfoEncryptedResponseEncValuesSupported []string

+ UserinfoEndpoint string

+ UserinfoSignedResponseAlgValuesSupported []string

+ func (m *OpenIDProviderMetadata) UnmarshalJSON(data []byte) error

+ func (m *OpenIDProviderMetadata) UnmarshalMsgpack(data []byte) error

+ func (m OpenIDProviderMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OpenIDProviderMetadata) MarshalJSON() ([]byte, error)

+ type OpenIDRelyingPartyMetadata struct

+ ApplicationType string

+ AuthorizationDetailsTypes []string

+ BackchannelLogoutSessionRequired bool

+ BackchannelLogoutURI string

+ ClaimsRedirectURIs []string

+ ClientID string

+ ClientIDIssuedAt int64

+ ClientName string

+ ClientRegistrationTypes []string

+ ClientSecret string

+ ClientSecretExpiresAt int64

+ ClientURI string

+ Contacts []string

+ DefaultACRValues []string

+ DefaultMaxAge int64

+ Extra map[string]any

+ FrontchannelLogoutSessionRequired bool

+ FrontchannelLogoutURI string

+ GrantTypes []string

+ HomepageURI string

+ IDTokenEncryptedResponseAlg string

+ IDTokenEncryptedResponseEnc string

+ IDTokenSignedResponseAlg string

+ InitiateLoginURI string

+ IntrospectionEncryptedResponseAlg string

+ IntrospectionEncryptedResponseEnc string

+ IntrospectionSignedResponseAlg string

+ JWKS *jwk.JWKS

+ JWKSURI string

+ LogoURI string

+ NFVTokenEncryptedResponseAlg string

+ NFVTokenEncryptedResponseEnc string

+ NFVTokenSignedResponseAlg string

+ OrganizationName string

+ PolicyURI string

+ PostLogoutRedirectURIs []string

+ RedirectURIS []string

+ RegistrationAccessToken string

+ RegistrationClientURI string

+ RequestEncryptedResponseAlg string

+ RequestEncryptedResponseEnc string

+ RequestSignedResponseAlg string

+ RequestURIs []string

+ RequireAuthTime bool

+ RequirePushedAuthorizationRequests bool

+ RequireSignedRequestObject bool

+ ResponseTypes []string

+ Scope string

+ SectorIdentifierURI string

+ SignedJWKSURI string

+ SoftwareID string

+ SoftwareVersion string

+ SubjectType string

+ TLSClientAuthSANDNS string

+ TLSClientAuthSANEMAIL string

+ TLSClientAuthSANIP string

+ TLSClientAuthSANURI string

+ TLSClientAuthSubjectDN string

+ TLSClientCertificateBoundAccessTokens bool

+ TOSURI string

+ TokenEndpointAuthMethod string

+ TokenEndpointAuthSigningAlg string

+ UserinfoEncryptedResponseAlg string

+ UserinfoEncryptedResponseEnc string

+ UserinfoSignedResponseAlg string

+ func (m *OpenIDRelyingPartyMetadata) UnmarshalJSON(data []byte) error

+ func (m *OpenIDRelyingPartyMetadata) UnmarshalMsgpack(data []byte) error

+ func (m OpenIDRelyingPartyMetadata) ApplyPolicy(policy MetadataPolicy) (any, error)

+ func (m OpenIDRelyingPartyMetadata) MarshalJSON() ([]byte, error)

+ type OwnedTrustMark struct

+ DelegationLifetime time.Duration

+ Extra map[string]any

+ ID string

+ Ref string

+ type PolicyOperator interface

+ Apply func(value, policyValue any, essential bool, pathInfo string) (any, error)

+ MayCombineWith func() []PolicyOperatorName

+ Merge func(a, b any, pathInfo string) (any, error)

+ Name func() PolicyOperatorName

+ func NewPolicyOperator(name PolicyOperatorName, merger func(a, b any, pathInfo string) (any, error), ...) PolicyOperator

+ type PolicyOperatorName string

+ const PolicyOperatorAdd

+ const PolicyOperatorDefault

+ const PolicyOperatorEssential

+ const PolicyOperatorOneOf

+ const PolicyOperatorSubsetOf

+ const PolicyOperatorSupersetOf

+ const PolicyOperatorValue

+ type PolicyVerifier func(p MetadataPolicyEntry, pathInfo string) error

+ type RequestObjectProducer struct

+ EntityID string

+ func NewRequestObjectProducer(entityID string, privateSigningKey crypto.Signer, ...) *RequestObjectProducer

+ func (rop RequestObjectProducer) ClientAssertion(aud string) ([]byte, error)

+ func (rop RequestObjectProducer) RequestObject(requestValues map[string]any) ([]byte, error)

+ type ResolveResponse struct

+ Audience string

+ ExpiresAt unixtime.Unixtime

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ Subject string

+ func ParseResolveResponse(body []byte) (*ResolveResponse, error)

+ type ResolveResponsePayload struct

+ Extra map[string]interface{}

+ Metadata *Metadata

+ TrustChain JWSMessages

+ TrustMarks TrustMarkInfos

+ func (r *ResolveResponsePayload) UnmarshalJSON(data []byte) error

+ func (r ResolveResponsePayload) MarshalJSON() ([]byte, error)

+ type ResolveResponseSigner struct

+ func NewResolveResponseSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *ResolveResponseSigner

+ func (s ResolveResponseSigner) JWT(i any) (jwt []byte, err error)

+ type SimpleOPDiscoverer struct

+ func (d *SimpleOPDiscoverer) Discover(authorities ...TrustAnchor) (opInfos []*OpenIDProviderMetadata)

+ type SimpleRemoteMetadataResolver struct

+ ResolveEndpoint string

+ func (r SimpleRemoteMetadataResolver) Resolve(req apimodel.ResolveRequest) (*Metadata, error)

+ func (r SimpleRemoteMetadataResolver) ResolvePossible(req apimodel.ResolveRequest) (bool, bool)

+ func (r SimpleRemoteMetadataResolver) ResolveResponse(req apimodel.ResolveRequest) (*ResolveResponse, int, error)

+ func (r SimpleRemoteMetadataResolver) ResolveResponsePayload(req apimodel.ResolveRequest) (ResolveResponsePayload, error)

+ type SliceOrSingleValue []T

+ func (v *SliceOrSingleValue[T]) UnmarshalJSON(data []byte) error

+ func (v SliceOrSingleValue[T]) MarshalJSON() ([]byte, error)

+ type SmartRemoteMetadataResolver struct

+ func (SmartRemoteMetadataResolver) ResolvePossible(req apimodel.ResolveRequest) (bool, bool)

+ func (SmartRemoteMetadataResolver) ResolveResponsePayload(req apimodel.ResolveRequest) (ResolveResponsePayload, error)

+ func (r SmartRemoteMetadataResolver) Resolve(req apimodel.ResolveRequest) (*Metadata, error)

+ type TrustAnchor struct

+ EntityID string

+ JWKS jwk.JWKS

+ type TrustAnchors []TrustAnchor

+ func NewTrustAnchorsFromEntityIDs(anchorIDs ...string) (anchors TrustAnchors)

+ func (anchors TrustAnchors) EntityIDs() (entityIDs []string)

+ type TrustChain []*EntityStatement

+ func (c TrustChain) ExpiresAt() unixtime.Unixtime

+ func (c TrustChain) Messages() (msgs JWSMessages)

+ func (c TrustChain) Metadata() (*Metadata, error)

+ func (c TrustChain) PathLen() int

+ type TrustChainChecker interface

+ Check func(TrustChain) bool

+ type TrustChainScoringFnc func(c TrustChain) int

+ type TrustChains []TrustChain

+ func (c TrustChains) Filter(filter ...TrustChainsFilter) TrustChains

+ func (c TrustChains) SortAsc(scorer TrustChainScoringFnc) TrustChains

+ func (c TrustChains) SortDesc(scorer TrustChainScoringFnc) TrustChains

+ type TrustChainsFilter interface

+ Filter func(TrustChains) TrustChains

+ var TrustChainsFilterMinPathLength TrustChainsFilter = trustChainsFilterPathLength{}

+ func NewTrustChainsFilterFromCheckerFnc(checker func(TrustChain) bool) TrustChainsFilter

+ func NewTrustChainsFilterFromTrustChainChecker(f TrustChainChecker) TrustChainsFilter

+ func TrustChainsFilterMaxPathLength(maxPathLen int) TrustChainsFilter

+ func TrustChainsFilterTrustAnchor(anchor string) TrustChainsFilter

+ type TrustMark struct

+ DelegationJWT string

+ ExpiresAt *unixtime.Unixtime

+ Extra map[string]interface{}

+ ID string

+ IssuedAt unixtime.Unixtime

+ Issuer string

+ LogoURI string

+ Ref string

+ Subject string

+ func ParseTrustMark(data []byte) (*TrustMark, error)

+ func (tm *TrustMark) Delegation() (*DelegationJWT, error)

+ func (tm *TrustMark) UnmarshalJSON(data []byte) error

+ func (tm *TrustMark) VerifyExternal(jwks jwk.JWKS, tmo ...TrustMarkOwnerSpec) error

+ func (tm *TrustMark) VerifyFederation(ta *EntityStatementPayload) error

+ func (tm TrustMark) MarshalJSON() ([]byte, error)

+ type TrustMarkDelegationSigner struct

+ func NewTrustMarkDelegationSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *TrustMarkDelegationSigner

+ func (s TrustMarkDelegationSigner) JWT(i any) (jwt []byte, err error)

+ type TrustMarkInfo struct

+ Extra map[string]interface{}

+ ID string

+ TrustMarkJWT string

+ func (tm *TrustMarkInfo) TrustMark() (*TrustMark, error)

+ func (tm *TrustMarkInfo) UnmarshalJSON(data []byte) error

+ func (tm *TrustMarkInfo) VerifyExternal(jwks jwk.JWKS, tmo ...TrustMarkOwnerSpec) error

+ func (tm *TrustMarkInfo) VerifyFederation(ta *EntityStatementPayload) error

+ func (tm TrustMarkInfo) MarshalJSON() ([]byte, error)

+ type TrustMarkInfos []TrustMarkInfo

+ func (tms TrustMarkInfos) Find(matcher func(info TrustMarkInfo) bool) *TrustMarkInfo

+ func (tms TrustMarkInfos) FindByID(id string) *TrustMarkInfo

+ func (tms TrustMarkInfos) VerifiedExternal(jwks jwk.JWKS, tmo ...TrustMarkOwnerSpec) (verified TrustMarkInfos)

+ func (tms TrustMarkInfos) VerifiedFederation(ta *EntityStatementPayload) (verified TrustMarkInfos)

+ type TrustMarkIssuer struct

+ EntityID string

+ func NewTrustMarkIssuer(entityID string, signer *TrustMarkSigner, trustMarkSpecs []TrustMarkSpec) *TrustMarkIssuer

+ func (tmi *TrustMarkIssuer) AddTrustMark(spec TrustMarkSpec)

+ func (tmi *TrustMarkIssuer) TrustMarkIDs() []string

+ func (tmi TrustMarkIssuer) IssueTrustMark(trustMarkID, sub string, lifetime ...time.Duration) (*TrustMarkInfo, error)

+ type TrustMarkOwner struct

+ EntityID string

+ func NewTrustMarkOwner(entityID string, signer *TrustMarkDelegationSigner, ...) *TrustMarkOwner

+ func (tmo *TrustMarkOwner) AddTrustMark(spec OwnedTrustMark)

+ func (tmo TrustMarkOwner) DelegationJWT(trustMarkID, sub string, lifetime ...time.Duration) ([]byte, error)

+ type TrustMarkOwnerSpec struct

+ ID string

+ JWKS jwk.JWKS

+ func (tmo *TrustMarkOwnerSpec) UnmarshalJSON(data []byte) error

+ func (tmo *TrustMarkOwnerSpec) UnmarshalMsgpack(data []byte) error

+ type TrustMarkOwners map[string]TrustMarkOwnerSpec

+ type TrustMarkSigner struct

+ func NewTrustMarkSigner(key crypto.Signer, alg jwa.SignatureAlgorithm) *TrustMarkSigner

+ func (s TrustMarkSigner) JWT(i any) (jwt []byte, err error)

+ type TrustMarkSpec struct

+ DelegationJWT string

+ Extra map[string]any

+ ID string

+ IncludeExtraClaimsInInfo bool

+ Lifetime unixtime.DurationInSeconds

+ LogoURI string

+ Ref string

+ func (tms *TrustMarkSpec) UnmarshalJSON(data []byte) error

+ func (tms *TrustMarkSpec) UnmarshalYAML(data *yaml.Node) error

+ func (tms TrustMarkSpec) MarshalJSON() ([]byte, error)

+ func (tms TrustMarkSpec) MarshalYAML() (any, error)

+ type TrustResolver struct

+ StartingEntity string

+ TrustAnchors []TrustAnchor

+ Types []string

+ func (r *TrustResolver) Resolve()

+ func (r *TrustResolver) ResolveToValidChains() TrustChains

+ func (r *TrustResolver) ResolveToValidChainsWithoutVerifyingMetadata() TrustChains

+ func (r *TrustResolver) VerifySignatures()

+ func (r TrustResolver) Chains() (chains TrustChains)

+ type TypedJWTSigner struct

+ HeaderType string

+ func (s TypedJWTSigner) JWT(i any) (jwt []byte, err error)

+ type VerifiedChainsOPDiscoverer struct

+ func (VerifiedChainsOPDiscoverer) Discover(authorities ...TrustAnchor) (ops []*OpenIDProviderMetadata)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL