Documentation
¶
Overview ¶
Package utils holds the HTTP response writers the OAuth endpoints share: JSON bodies that must not be cached, and RFC 6749 §5.2 error bodies.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func WithRFCFields ¶ added in v1.87.0
WithRFCFields logs only the RFC fields of a fosite error: its debug field can hold internal context (storage errors, paths). A non-RFC error is attached whole; for an RFC error, callers that need more add its Cause().
func WriteBearerEndpointError ¶
func WriteBearerEndpointError(w http.ResponseWriter, r *http.Request, err error)
WriteBearerEndpointError is WriteRFC6749Error for an endpoint that accepts a bearer token. A 401 matches the scheme the client used, as RFC 6749 §5.2 requires, and every 400 also gets a Bearer challenge without an error code. RFC 6750 §3 requires one when the request has no credentials and allows it otherwise, which avoids inspecting the request.
func WriteNoStoreJSON ¶
func WriteNoStoreJSON(w http.ResponseWriter, status int, body any)
WriteNoStoreJSON writes body with the no-store headers token endpoints require (RFC 6749 §5.1, RFC 7662 §4). Encoding happens before the status is committed, so an unencodable body becomes a 500 instead of a success status over a truncated body; the headers are set first so the fallback carries them too.
func WriteRFC6749Error ¶
func WriteRFC6749Error(w http.ResponseWriter, r *http.Request, err error)
WriteRFC6749Error writes err as an RFC 6749 §5.2 error without its debug field, with a Basic WWW-Authenticate challenge on a 401. Client authentication is the only 401 source on these endpoints, so the challenge is Basic whatever credentials the request carried.
Types ¶
This section is empty.
Source Files