oauth

Documentation

Index

• Constants
• func BearerAuthMiddleware(validator TokenValidator, next http.Handler) http.Handler
• func ExtractBearer(authHeader string) (string, error)
• func HasAllScopes(current []string, required []string) bool
• func JoinScopes(s []string) string
• func RequireScopes(required []string, next http.Handler) http.Handler
• func SignHS256(secret []byte, issuer, audience, subject string, scopes []string, ...) (string, time.Time, error)
• type AuthConfig
  • func LoadAuthConfig(jsonPath string) (AuthConfig, error)
  • func LoadAuthConfigFromBytes(jsonBytes []byte) (AuthConfig, error)
• type JWTValidator
  • func (v *JWTValidator) Validate(token string) (string, []string, time.Time, error)
• type TokenValidator
  • func NewValidatorFromConfig(cfg AuthConfig) (TokenValidator, error)

Constants

const (
	CtxSubjectKey = "auth.subject"
	CtxScopesKey  = "auth.scopes"
)

Functions

func BearerAuthMiddleware

func BearerAuthMiddleware(validator TokenValidator, next http.Handler) http.Handler

func ExtractBearer

func ExtractBearer(authHeader string) (string, error)

func HasAllScopes

func HasAllScopes(current []string, required []string) bool

func JoinScopes

func JoinScopes(s []string) string

func RequireScopes

func RequireScopes(required []string, next http.Handler) http.Handler

func SignHS256

func SignHS256(secret []byte, issuer, audience, subject string, scopes []string, ttl time.Duration) (string, time.Time, error)

Types

type AuthConfig

type AuthConfig struct {
	Issuer       string `json:"issuer"`
	Audience     string `json:"audience"`
	HS256Secret  string `json:"hs256_secret"`
	JWKSURL      string `json:"jwks_url"`
	RSAPublicPEM string `json:"rsa_public_pem"`
}

func LoadAuthConfig

func LoadAuthConfig(jsonPath string) (AuthConfig, error)

func LoadAuthConfigFromBytes

func LoadAuthConfigFromBytes(jsonBytes []byte) (AuthConfig, error)

type JWTValidator

type JWTValidator struct {
	HS256Secret      []byte
	RSAPublic        *rsa.PublicKey
	ExpectedIssuer   string
	ExpectedAudience string
}

func (*JWTValidator) Validate

func (v *JWTValidator) Validate(token string) (string, []string, time.Time, error)

type TokenValidator

type TokenValidator interface {
	Validate(token string) (subject string, scopes []string, expiry time.Time, err error)
}

func NewValidatorFromConfig

func NewValidatorFromConfig(cfg AuthConfig) (TokenValidator, error)