auth

Documentation

Index

• type Claims
  • func (c *Claims) Copy() *Claims
• type Validator
  • func NewValidator(cfg *config.Config, httpClient *http.Client) (Validator, error)

Types

type Claims

type Claims struct {
	protocol.BackendClaims
	// IssuedAtQuote is a server-side concern for attestation freshness.
	IssuedAtQuote string `json:"issued_at_quote"`
	jwt.RegisteredClaims
}

Claims represents the JWT payload expected from attested backends.

func (*Claims) Copy

func (c *Claims) Copy() *Claims

Copy returns a deep copy of claims to avoid sharing state across goroutines.

type Validator

type Validator interface {
	Validate(ctx context.Context, token string) (*Claims, error)
}

Validator validates backend attestation tokens and returns parsed claims.

func NewValidator

func NewValidator(cfg *config.Config, httpClient *http.Client) (Validator, error)

NewValidator returns a Validator that uses a remote verifier when configured and falls back to local HMAC validation with backendsJWTSecret.