Versions in this module Expand all Collapse all v0 v0.1.0 Aug 7, 2026 Changes in this version + func CoveredThreatIDs(corpus []Token) []string + func NewContext() (GenContext, Policy, error) + func ThreatIDs(corpus []Token) []string + type Finding struct + Actual Verdict + Token Token + func Evaluate(ctx context.Context, corpus []Token, verify VerifyFunc) ([]Finding, error) + func (f Finding) Vulnerability() bool + type GenContext struct + AttackerKey *rsa.PrivateKey + Audience string + Issuer string + Now time.Time + RequiredClaims []string + Trusted TrustedSigner + func NewLiveContext(trusted TrustedSigner, issuer, audience string, required []string, ...) (GenContext, error) + type HTTPTarget struct + AcceptCodes []int + Client *http.Client + Header string + Method string + Prefix string + URL string + func (t HTTPTarget) Verify(ctx context.Context, token string) (Verdict, error) + type Oracle struct + Policy Policy + func (o Oracle) Verify(_ context.Context, token string) (Verdict, error) + type Policy struct + Audience string + Issuer string + Now time.Time + RequiredClaims []string + Skew time.Duration + TrustedKey *rsa.PublicKey + type Token struct + Expect Verdict + JWS string + Name string + Rationale string + SelfContained bool + ThreatID string + func Corpus(c GenContext) ([]Token, error) + type TrustedSigner interface + PublicKeyPEM func() string + Sign func(claims map[string]any) (string, error) + type Verdict int + const Accept + const Reject + func (v Verdict) String() string + type VerifyFunc func(ctx context.Context, token string) (Verdict, error)
Go to main page