server

package

v1.107.2 Latest Latest Go to latest Published: Oct 29, 2026 License: MIT Imports: 17 Imported by: 0

Documentation ¶

Index ¶

func InitMetrics(reg prometheus.Registerer) error
func WriteOAuthError(w http.ResponseWriter, err error)
type ErrorResponse
type OauthHandler
- func NewServer(provider *core.Provider, loginManager *login.Manager, ...) *OauthHandler
- func (o *OauthHandler) SetupRoutes(mux *http.ServeMux)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func InitMetrics ¶ added in v1.79.0

func InitMetrics(reg prometheus.Registerer) error

InitMetrics registers the token endpoint metrics with reg. Call once, from auth.NewComponents, before serving traffic.

func WriteOAuthError ¶

func WriteOAuthError(w http.ResponseWriter, err error)

Types ¶

type ErrorResponse ¶

type ErrorResponse struct {
	Error            string `json:"error"`
	ErrorDescription string `json:"error_description,omitempty"`
	ErrorHint        string `json:"error_hint,omitempty"`
	ErrorDebug       string `json:"error_debug,omitempty"`
}

type OauthHandler ¶

type OauthHandler struct {
	// contains filtered or unexported fields
}

func NewServer ¶

func NewServer(provider *core.Provider, loginManager *login.Manager, consentManager *consent.Manager, federationBroker *federation.Broker) *OauthHandler

func (*OauthHandler) SetupRoutes ¶

func (o *OauthHandler) SetupRoutes(mux *http.ServeMux)

Source Files ¶

View all Source files

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
accesstokens Package accesstokens is the public API for access-token persistence.	Package accesstokens is the public API for access-token persistence.
sqlcgen
authcodes Package authcodes is the public API for authorization-code persistence.	Package authcodes is the public API for authorization-code persistence.
sqlcgen
clients Package clients serves the OAuth client management API (gRPC, internal HTTP, and the public unauthenticated dynamic client registration endpoint).	Package clients serves the OAuth client management API (gRPC, internal HTTP, and the public unauthenticated dynamic client registration endpoint).
sqlcgen
consent Package consent persists consent challenges and verifiers as the consent stage of the oauth_flows table.	Package consent persists consent challenges and verifiers as the consent stage of the oauth_flows table.
sqlcgen
discovery Package discovery serves the authorization server's /.well-known metadata: OIDC/OAuth provider metadata, including the MCP-scoped variants, and RFC 7033 WebFinger.	Package discovery serves the authorization server's /.well-known metadata: OIDC/OAuth provider metadata, including the MCP-scoped variants, and RFC 7033 WebFinger.
doorkeeperrefreshtokens Package doorkeeperrefreshtokens is the public API for refresh tokens replicated from gitlab-rails/Doorkeeper.	Package doorkeeperrefreshtokens is the public API for refresh tokens replicated from gitlab-rails/Doorkeeper.
sqlcgen
internal
batch Package batch holds the per-record upsert pipeline and result handling shared by the bulk gRPC handlers.	Package batch holds the per-record upsert pipeline and result handling shared by the bulk gRPC handlers.
csrf Package csrf provides the CSRF cookie and token helpers shared by the OAuth login and consent flows.	Package csrf provides the CSRF cookie and token helpers shared by the OAuth login and consent flows.
mcp Package mcp lists GitLab's MCP resources and the scope each one maps to.	Package mcp lists GitLab's MCP resources and the scope each one maps to.
utils Package utils holds the HTTP response writers the OAuth endpoints share: JSON bodies that must not be cached, and RFC 6749 §5.2 error bodies.	Package utils holds the HTTP response writers the OAuth endpoints share: JSON bodies that must not be cached, and RFC 6749 §5.2 error bodies.
introspection Package introspection serves RFC 7662 token introspection over HTTP.	Package introspection serves RFC 7662 token introspection over HTTP.
jwk
login Package login creates the oauth_flows row from the authorize request, and persists login challenges and verifiers as the login stage of that row.	Package login creates the oauth_flows row from the authorize request, and persists login challenges and verifiers as the login stage of that row.
sqlcgen
oidc Package oidc is the public API for OpenID Connect session persistence.	Package oidc is the public API for OpenID Connect session persistence.
sqlcgen
pkce Package pkce is the public API for PKCE-request persistence.	Package pkce is the public API for PKCE-request persistence.
sqlcgen
refreshtokens Package refreshtokens is the public API for refresh-token persistence.	Package refreshtokens is the public API for refresh-token persistence.
sqlcgen
revocation Package revocation implements the OAuth 2.0 token revocation endpoint per RFC 7009.	Package revocation implements the OAuth 2.0 token revocation endpoint per RFC 7009.
revokedtokens Package revokedtokens is the public API for the revoked-token denylist.	Package revokedtokens is the public API for the revoked-token denylist.
sqlcgen
storage
tokens Package tokens serves the internal InternalOAuthTokensService gRPC API, through which gitlab-rails revokes the tokens IAM holds for a (user, client) pair on OAuth app de-authorization and checks whether an access token has been revoked.	Package tokens serves the internal InternalOAuthTokensService gRPC API, through which gitlab-rails revokes the tokens IAM holds for a (user, client) pair on OAuth app de-authorization and checks whether an access token has been revoked.
userinfo Package userinfo calls GitLab Rails' `/api/v4/iam/userinfo` endpoint, authenticated with the access token minted for the same token exchange as a bearer credential.	Package userinfo calls GitLab Rails' `/api/v4/iam/userinfo` endpoint, authenticated with the access token minted for the same token exchange as a bearer credential.