authclient

package module

Go to main page

Versions in this module

v0

v0.11.1

Sep 11, 2026

Changes in this version

+ const GrantTypeTokenExchange

+ const TokenTypeAccessToken

+ const TokenTypeIDToken

+ const TokenTypeRefreshToken

+ func TokenExchangeForm(subjectToken, audience string, opts ...ExchangeOption) url.Values

type Client

+ func (c *Client) ExchangeToken(ctx context.Context, subjectToken, audience string, opts ...ExchangeOption) (*ExchangeResponse, error)

+ type ExchangeOption func(url.Values)

+ func WithActorToken(actorToken string) ExchangeOption

+ func WithRequestedTokenType(tokenType string) ExchangeOption

+ func WithScope(scope string) ExchangeOption

+ func WithSubjectTokenType(tokenType string) ExchangeOption

+ type ExchangeResponse struct

+ AccessToken string

+ ExpiresIn int

+ IssuedTokenType string

+ Scope string

+ TokenType string

v0.11.0

Sep 7, 2026

Changes in this version

type APIKeyCreate

+ RateLimit *int64

+ type AdminUserUpdate struct

+ Status *string

+ type AssertionResult struct

+ Expectation bool

+ Got bool

+ Passed bool

+ Reason string

+ TupleKey AssertionTupleKey

+ type AssertionTupleKey struct

+ Object string

+ Relation string

+ User string

+ type AssertionsResponse struct

+ Assertions []ModelAssertion

+ AuthorizationModelID string

+ type AssertionsRunResponse struct

+ AuthorizationModelID string

+ Passed bool

+ Results []AssertionResult

type Client

+ func (c *Client) DeleteAllRelationshipsForSubject(ctx context.Context, storeID, subjectType, subjectID, token string) (int, error)

+ func (c *Client) GetModelAssertions(ctx context.Context, storeID, modelID, token string) (*AssertionsResponse, error)

+ func (c *Client) PutModelAssertions(ctx context.Context, storeID, modelID string, req PutAssertionsRequest, ...) (*MessageResponse, error)

+ func (c *Client) ReadRelationshipsForSubject(ctx context.Context, storeID, subjectType, subjectID, token string) ([]SubjectRelationship, error)

+ func (c *Client) RunModelAssertions(ctx context.Context, storeID, modelID, token string) (*AssertionsRunResponse, error)

type ClientRegistration

+ ClientURI string

+ SoftwareID string

+ SoftwareVersion string

+ TOSURI string

+ type InviteResult struct

+ ExpiresAt string

+ InvitationCode string

+ InvitationID string

+ Message string

+ UserID string

type LoginConfig

+ AuthMethods *LoginConfigAuthMethods

+ Branding *LoginConfigBranding

+ Content *LoginConfigContent

+ Registration *LoginConfigRegistration

+ Security *LoginConfigSecurity

+ type LoginConfigAuthMethods struct

+ EmailPassword *bool

+ InvitationOnly *bool

+ SignupEnabled *bool

+ type LoginConfigBranding struct

+ BackgroundColor *string

+ CustomCSS *string

+ HidePoweredBy *bool

+ LoginTemplate *string

+ LogoURL *string

+ PageTitle *string

+ PrimaryColor *string

+ SecurityBadge map[string]any

+ type LoginConfigContent struct

+ FooterLinkPrefix *string

+ FooterLinkText *string

+ FooterLinkURL *string

+ FooterMessage *string

+ PrivacyURL *string

+ SignupMessage *string

+ SupportURL *string

+ TermsURL *string

+ TrustLogos []any

+ TrustSectionLabel *string

+ WelcomeMessage *string

+ type LoginConfigRegistration struct

+ CollectName *bool

+ DefaultLanding *string

+ DefaultRole *string

+ DefaultTeam *string

+ OrgStructure map[string]any

+ RequireEmailVerification *bool

+ type LoginConfigSecurity struct

+ AcceptInviteAllowedOrigins []string

+ AcceptInviteErrorURL *string

+ AcceptInviteURL *string

+ PostLogoutRedirectURI *string

+ RememberMeEnabled *bool

+ type ModelAssertion struct

+ Expectation bool

+ TupleKey AssertionTupleKey

type OrgClientSafe

+ ClientType string

+ ClientURI string

+ LogoURI string

+ OrgID string

+ ResponseTypes []string

+ Scope string

+ Status string

+ type OrgHierarchyChild struct

+ Children []OrgHierarchyChild

type OrgMember

+ AvatarURL string

+ CreatedAt string

+ EmailVerified bool

+ ID string

+ Language string

+ LastLogin string

+ Metadata map[string]any

+ OrgID string

+ OrgPermissions []string

+ Phone string

+ ProviderType string

+ TeamID string

+ Timezone string

+ UpdatedAt string

type OrgRegisterRequest

+ ClientID string

+ InvitationCode string

type OrgSession

+ LastAccessed string

+ SessionID string

+ UserEmail string

+ UserName string

type OrgSessionsResponse

+ OrganizationID string

+ TotalSessions int

type Organization

+ AudienceStatus string

type OrganizationCreate

+ Industry string

+ LogoURL string

+ Size string

+ Website string

type OrganizationInvite

+ Permissions []string

+ TeamID string

type OrganizationUpdate

+ Industry *string

+ LogoURL *string

+ ParentID *string

+ Size *string

+ Slug *string

+ Website *string

type ProviderConfigCreate

+ Description string

+ IsDefault bool

+ Metadata map[string]any

+ ProviderType string

type ProviderConfigUpdate

+ Description *string

+ IsActive *bool

+ IsDefault *bool

+ Metadata map[string]any

+ type PutAssertionsRequest struct

+ Assertions []ModelAssertion

type RegisterRequest

+ InvitationCode string

type SessionRevokeResponse

+ SessionsRevoked int

+ type SubjectRelationship struct

+ CreatedAt string

+ ExpiresAt string

+ Object string

+ Relation string

+ Subject string

type TeamCreate

+ Permissions []string

type TeamMember

+ JoinedAt string

+ Permissions []string

+ TeamID string

type TeamPermissionsResponse

+ InheritedPermissions []string

type TeamUpdate

+ Permissions *[]string

type TransactRelationshipsRequest

+ func (r TransactRelationshipsRequest) MarshalJSON() ([]byte, error)

+ type TransactResponse struct

+ ConsistencyToken string

+ Deleted int

+ Message string

+ Success bool

+ Written int

type WriteAuthorizationModelRequest

+ func (r WriteAuthorizationModelRequest) MarshalJSON() ([]byte, error)

v0.10.2

Sep 1, 2026

v0.10.1

Aug 29, 2026

Changes in this version

type DelegationGrant

+ ExpiresInHours *int

+ Scope []string

v0.10.0

Aug 28, 2026

Changes in this version

+ const DefaultValidationCacheMaxEntries

+ const DefaultValidationCacheNegativeTTL

+ const DefaultValidationCacheTTL

+ func CredentialHeader(cred string) (name, value string)

+ func LooksLikeJWT(cred string) bool

type APIKey

+ IsActive bool

+ LastUsed string

+ RateLimit int64

type APIKeyUpdate

+ IsActive *bool

+ Metadata map[string]any

+ RateLimit *int64

type APIKeyValidation

+ ActingAs string

+ Audience []string

+ DelegationChain []string

+ DelegationScope []string

+ Email string

+ ExpiresAt string

+ IsDelegation bool

+ type AccessCheckResponse struct

+ Enforced bool

+ NetworkZone string

+ OrgID string

+ PermissionsScope []string

+ Status string

type ActiveMagicLinksResponse

+ ActiveLinks json.RawMessage

+ Count int64

type Actor

+ ActingAs string

+ DelegationChain []string

+ DelegationScope []string

+ IsDelegation bool

type AttributeMappingCreateResponse

+ MappingID string

type AttributeMappingListResponse

+ Count int64

type CircuitBreakerResetAllResponse

+ NewStatus json.RawMessage

+ ResetBy string

+ Warning string

type CircuitBreakerStatusResponse

+ CircuitBreakers json.RawMessage

+ OverallHealth json.RawMessage

+ SLAImpact json.RawMessage

type Client

+ func (c *Client) ConfigureHRISConnection(ctx context.Context, orgID string, req HRISConfigureRequest, ...) (*HRISConnectionStatus, error)

+ func (c *Client) CreateScimGroup(ctx context.Context, g ScimGroup, callerToken string) (*ScimGroup, error)

+ func (c *Client) CreateScimUser(ctx context.Context, u ScimUser, callerToken string) (*ScimUser, error)

+ func (c *Client) DeleteHRISConnection(ctx context.Context, orgID, callerToken string) (*DeleteResult, error)

+ func (c *Client) DeleteRelationshipByObject(ctx context.Context, ...) (*WriteOperationResponse, error)

+ func (c *Client) DeleteSCIMConnection(ctx context.Context, orgID, callerToken string) error

+ func (c *Client) DeleteScimGroup(ctx context.Context, id, callerToken string) error

+ func (c *Client) DeleteScimUser(ctx context.Context, id, callerToken string) error

+ func (c *Client) EnableSCIMConnection(ctx context.Context, orgID, callerToken string) (*SCIMConnection, error)

+ func (c *Client) EvaluateNetworkAccess(ctx context.Context, callerToken string) (*AccessCheckResponse, error)

+ func (c *Client) GetHRISConnection(ctx context.Context, orgID, callerToken string) (*HRISConnectionStatus, error)

+ func (c *Client) GetInvitation(ctx context.Context, orgID, invitationID, callerToken string) (*InvitationListItem, error)

+ func (c *Client) GetSCIMConnection(ctx context.Context, orgID, callerToken string) (*SCIMConnection, error)

+ func (c *Client) GetScimGroup(ctx context.Context, id, callerToken string) (*ScimGroup, error)

+ func (c *Client) GetScimUser(ctx context.Context, id, callerToken string) (*ScimUser, error)

+ func (c *Client) InvalidateValidation(cred string)

+ func (c *Client) ListScimGroups(ctx context.Context, callerToken string) (*ScimListResponse, error)

+ func (c *Client) ListScimUsers(ctx context.Context, callerToken string) (*ScimListResponse, error)

+ func (c *Client) NetworkAccessCheck(ctx context.Context, callerToken string) (*AccessCheckResponse, error)

+ func (c *Client) PatchScimGroup(ctx context.Context, id string, req ScimPatchRequest, callerToken string) (*ScimGroup, error)

+ func (c *Client) PatchScimUser(ctx context.Context, id string, req ScimPatchRequest, callerToken string) (*ScimUser, error)

+ func (c *Client) ReplaceScimGroup(ctx context.Context, id string, g ScimGroup, callerToken string) (*ScimGroup, error)

+ func (c *Client) ReplaceScimUser(ctx context.Context, id string, u ScimUser, callerToken string) (*ScimUser, error)

+ func (c *Client) ResetValidationCache()

+ func (c *Client) SAMLInitiateSLO(ctx context.Context, callerToken string) (string, error)

+ func (c *Client) SAMLServiceProviderMetadata(ctx context.Context) (string, error)

+ func (c *Client) ScimResourceTypes(ctx context.Context, callerToken string) (*ScimListResponse, error)

+ func (c *Client) ScimSchemas(ctx context.Context, callerToken string) (*ScimListResponse, error)

+ func (c *Client) ScimServiceProviderConfig(ctx context.Context, callerToken string) (json.RawMessage, error)

+ func (c *Client) SyncHRIS(ctx context.Context, orgID, callerToken string) (*HRISSyncResult, error)

+ func (c *Client) ValidationCacheStats() ValidationCacheStats

type ClientRegistrationResponse

+ ClientURI string

+ Contacts []string

+ LogoURI string

+ OrgID string

+ PolicyURI string

+ ResponseTypes []string

+ SoftwareID string

+ SoftwareVersion string

+ TOSURI string

+ TokenEndpointAuthMethod string

type CreateNetworkPolicyRequest

+ Action string

+ ExpiresAt string

+ GeoCountries []string

+ GeoMode string

+ Networks []string

+ OrgID string

+ RequireMFA bool

+ RestrictedPermissions []string

type DelegationCheckResponse

+ Allowed bool

+ Scope []string

type DelegationResponse

+ Success bool

+ type DeleteResult struct

+ Deleted bool

type DeviceListResponse

+ Count int64

type DomainTokenResponse

+ TokenType string

type ElevatePrivilegesResponse

+ ElevationExpiresAt string

+ NewRole string

+ PasswordResetRequired bool

+ StricterPolicyApplied bool

type EmailHistoryResponse

+ Count int64

+ Items json.RawMessage

+ OrgID string

type EmailStatsResponse

+ ByStatus map[string]int64

+ ByType map[string]int64

+ OrgID string

+ Total int64

type EmergencyOverrideCreateResponse

+ Status string

+ UserID string

type EmergencyRevokeResponse

+ IncidentID string

+ KeyID string

+ Reason string

+ RevokedAt string

+ RevokedBy string

+ Severity string

+ type EventFilter struct

+ Field string

+ Operator string

+ Value any

type EventSubscription

+ BatchSize int

+ BatchTimeoutMs int

+ CreatedBy string

+ DeliveryMethod string

+ Endpoint string

+ FailedDeliveries int

+ Filters []EventFilter

+ IsActive bool

+ LastDeliveryAt string

+ LastDeliveryStatus string

+ MaxEventsPerMinute int

+ Name string

+ RetryPolicy *RetryPolicy

+ Secret string

+ SubscriptionID string

+ TenantID string

+ TotalDeliveries int

type EventSubscriptionCreate

+ BatchSize int

+ BatchTimeoutMs int

+ DeliveryMethod string

+ Endpoint string

+ Filters []EventFilter

+ MaxEventsPerMinute int

+ Name string

+ RetryPolicy *RetryPolicy

type EventSubscriptionListResponse

+ Count int

+ Items []EventSubscription

+ NextToken string

+ TotalScanned int64

type EventSubscriptionUpdate

+ BatchSize *int

+ BatchTimeoutMs *int

+ DeliveryMethod *string

+ Endpoint *string

+ Filters *[]EventFilter

+ IsActive *bool

+ MaxEventsPerMinute *int

+ Name *string

+ RetryPolicy *RetryPolicy

type EventTypesResponse

+ APIKeys json.RawMessage

+ Authentication json.RawMessage

+ Organization json.RawMessage

+ Permissions json.RawMessage

+ Providers json.RawMessage

+ Security json.RawMessage

type FederationStatsResponse

+ SAML json.RawMessage

+ SSO json.RawMessage

+ Webauthn json.RawMessage

type ForcePasswordResetResponse

+ AffectedUsers int64

+ GracePeriodHours int64

type GlobalEmailConfigResponse

+ SafeMode bool

+ TestMode bool

+ type HRISConfigureRequest struct

+ APIKey string

+ BaseURL string

+ Provider string

+ type HRISConnectionStatus struct

+ Active bool

+ BaseURL string

+ Configured bool

+ CreatedAt string

+ LastSyncAt string

+ Provider string

+ type HRISSyncResult struct

+ Deprovisioned int64

+ Errors []string

+ Provider string

+ Provisioned int64

+ RosterSize int64

+ Unchanged int64

type HealthCheckResponse

+ Checks json.RawMessage

+ CircuitBreakers json.RawMessage

+ Dependencies json.RawMessage

+ Enterprise json.RawMessage

+ Metrics json.RawMessage

+ OAuth21 json.RawMessage

+ PasswordPolicy json.RawMessage

+ Runtime json.RawMessage

+ Service string

+ Timestamp float64

+ UptimeSec float64

+ ZanzibarMigration json.RawMessage

type InvitationListItem

+ CancelledAt string

+ Permissions []string

+ TeamID string

+ UsedAt string

type JITConfigResponse

+ AutoActivate bool

+ SyncAttributes bool

type JwksHealthResponse

+ ActiveKeyCreated string

+ ActiveKeyID string

+ Algorithm string

+ Error string

+ Status string

+ TotalKeys int64

type JwksMetricsResponse

+ Configuration json.RawMessage

+ KeyMetrics json.RawMessage

+ RotationHealth json.RawMessage

+ RotationMetrics json.RawMessage

type JwksRecoverResponse

+ ActiveKeyID string

+ Status string

+ TotalKeys int64

type KeyActivateResponse

+ ActivatedAt string

+ Success bool

type KeyCleanupResponse

+ DryRun bool

+ Force bool

+ KeysCleaned int64

+ KeysIdentified json.RawMessage

+ Timestamp string

+ TotalKeysBefore int64

type KeyGenerateResponse

+ CreatedAt string

+ ExpiresAt string

+ Status string

+ Success bool

type KeyRevocationResponse

+ NotificationsSent int64

+ ReplacementKey json.RawMessage

+ RevokedAt string

+ Success bool

type KeyRotationResponse

+ Error string

+ NewKey json.RawMessage

+ NextRotationDate string

+ Reason string

+ RotationCompletedAt string

+ Success bool

type LogoutPropagationResponse

+ SessionID string

+ Status string

type MagicLinkAnalyticsResponse

+ AverageVerificationTime int64

+ RecentActivity []string

+ TopDomains []string

+ TotalSentThisWeek int64

+ TotalSentToday int64

+ TotalVerified int64

type MagicLinkConfigResponse

+ CooldownSeconds int64

+ ExpiryMinutes int64

+ MaxAttempts int64

+ RequireCode bool

type NetworkPolicy

+ Action string

+ CreatedBy string

+ ExpiresAt string

+ GeoCountries []string

+ GeoMode string

+ Networks []string

+ OrgID string

+ PolicyID string

+ RequireMFA bool

+ RestrictedPermissions []string

+ UpdatedAt string

type NetworkPolicyCreateResponse

+ Action string

+ CreatedAt string

+ Name string

+ OrgID string

+ Status string

type NetworkPolicyListResponse

+ Count int64

type NetworkPolicyStatusResponse

+ EntryID string

+ OverrideID string

+ PolicyID string

type NextRotationResponse

+ CurrentKeyAgeDays int64

+ DaysUntilRotation int64

+ NextRotationDate string

+ RotationNeeded bool

+ Timestamp string

type OpenIDConfiguration

+ AuthorizationDetailsTypesSupported []string

+ ClaimsParameterSupported bool

+ ClaimsSupported []string

+ DPoPSigningAlgValuesSupported []string

+ Features json.RawMessage

+ IntrospectionEndpoint string

+ IntrospectionEndpointAuthMethodsSupported []string

+ JWKSRefreshInterval int64

+ JWKSSupportsProviderAggregation bool

+ KeyRotationInterval int64

+ OpPolicyURI string

+ OpTOSURI string

+ PushedAuthorizationRequestEndpoint string

+ RequestParameterSupported bool

+ RequestURIParameterSupported bool

+ RequirePushedAuthorizationRequests bool

+ RequireRequestURIRegistration bool

+ ResponseModesSupported []string

+ RevocationEndpoint string

+ RevocationEndpointAuthMethodsSupported []string

+ ServiceDocumentation string

+ TokenEndpointAuthSigningAlgValuesSupported []string

+ UiLocalesSupported []string

type Option

+ func WithValidationCache(ttl time.Duration) Option

+ func WithValidationCacheOptions(o ValidationCacheOptions) Option

type Organization

+ CreatedAt string

+ Industry string

+ LogoURL string

+ Size string

+ UpdatedAt string

+ Website string

type OverrideListResponse

+ Count int64

type PasswordAgeUpdateResponse

+ AgeDays int64

type PasswordAuditEventsResponse

+ AuditEvents json.RawMessage

type PasswordComplianceResponse

+ ComplianceReport json.RawMessage

+ OrgID string

type PasswordPolicySetResponse

+ PolicyID string

type PasswordResetConfirmResponse

+ Detail string

type PasswordResetResponse

+ Detail string

+ Note string

type PasswordlessAuthResponse

+ CustomClaims map[string]string

+ RedirectURL string

type PermissionDecision

+ Scope string

type PermissionValidationResponse

+ Action string

+ Reason string

+ Resource string

+ Service string

+ Type string

type Provider

+ CreatedAt string

+ Description string

+ IsActive bool

+ IsDefault bool

+ Metadata json.RawMessage

+ OrgID string

+ ProviderType string

+ Status string

+ UpdatedAt string

type ProviderStatusUpdateResponse

+ NewStatus string

+ PreviousStatus string

+ Reason string

+ StatusUpdated bool

+ UpdatedAt string

type ProviderTestResponse

+ Error string

+ Metadata json.RawMessage

+ ResponseTimeMs float64

type QuotaCheckResponse

+ CurrentUsage int64

+ Message string

+ Tier string

+ type QuotaTierLimits struct

+ APIRateLimitPerHour int64

+ MaxAPIKeysPerOrg int64

+ MaxDelegationsPerUser int64

+ MaxOrganizationsPerUser int64

+ MaxPermissionsPerUser int64

+ MaxTeamsPerOrg int64

+ MaxUsersPerOrg int64

+ StorageQuotaMB int64

type QuotaTiersResponse

+ UpgradeURL string

type QuotaUsageResponse

+ Limits map[string]int64

+ Percentages map[string]float64

+ UserID string

type RecentAlertsResponse

+ TimeRange json.RawMessage

+ TotalCount int64

+ UnresolvedCount int64

type RecoveryCodesResponse

+ Message string

+ RecoveryCodes []string

type RegistryStatsResponse

+ ServicesList []string

+ type RetryPolicy struct

+ BackoffMultiplier float64

+ InitialDelaySeconds int

+ Jitter bool

+ MaxAttempts int

+ MaxDelaySeconds int

type RevokedKeysListResponse

+ Count int64

+ RetrievedAt string

type RotationStatusResponse

+ Configuration json.RawMessage

+ KeyInventory json.RawMessage

+ RotationCheck json.RawMessage

+ RotationServiceHealthy bool

+ StatusTimestamp string

+ Warnings []string

type SAMLAnalyticsResponse

+ AuthenticationsThisWeek int64

+ AuthenticationsToday int64

+ RecentActivity []string

+ TopServiceProviders []string

+ TotalSps int64

type SAMLAttributeMappingResponse

+ Format string

type SAMLCertificateGenerateResponse

+ CertificateID string

+ ExpiresAt string

type SAMLCertificateStatusResponse

+ CertificateStatus json.RawMessage

+ SigningEnabled bool

type SAMLSPDetailResponse

+ AllowedBindings []string

+ AssertionConsumerServiceURL string

+ AttributeMapping map[string]string

+ AttributesMapping map[string]string

+ Certificate string

+ CreatedAt string

+ Description string

+ EntityID string

+ IdPEntityID string

+ IdPSloURL string

+ MetadataURL string

+ Name string

+ NameIDFormat string

+ OrgID string

+ SingleLogoutServiceURL string

+ Status string

+ UpdatedAt string

+ WantAssertionsEncrypted bool

+ WantAssertionsSigned bool

+ X509Cert string

type SAMLSPListResponse

+ Count int64

type SAMLSPRegistrationResponse

+ ComplianceFindings []string

type SAMLSPUpdateResponse

+ EntityID string

type SAMLSessionListResponse

+ Count int64

+ type SCIMConnection struct

+ Active bool

+ Configured bool

+ CreatedAt string

+ OrgID string

+ RotatedAt string

+ SCIMBaseURL string

+ Token string

type SSOConfigResponse

+ AllowedDomains []string

+ CookieDomain string

+ MaxSessionDuration int64

+ RequireMFA bool

+ SessionTimeout int64

type SSODomainConfigResponse

+ Active bool

+ AllowedAuthMethods []string

+ AllowedRedirectUrls []string

+ CreatedAt string

+ DisplayName string

+ EntityID string

+ ExpiresAt string

+ IPWhitelist []string

+ LoginCallbackURL string

+ LogoutCallbackURL string

+ Metadata json.RawMessage

+ RequireMFA bool

+ SessionTimeout int64

+ UpdatedAt string

type SSODomainListResponse

+ Page int64

+ PageSize int64

type SSOPropagateResponse

+ PropagatedDomains []string

+ SessionID string

+ Status string

type SSOSessionCreateResponse

+ CreatedAt string

+ Domains []string

+ ExpiresIn int64

+ RememberMe bool

type SSOSessionDetailResponse

+ Active bool

+ CreatedAt string

+ Domains []string

+ ExpiresAt string

+ RememberMe bool

+ SessionID string

+ UserID string

type SSOSessionListResponse

+ Count int64

+ type ScimEmail struct

+ Primary bool

+ Type string

+ Value string

+ type ScimGroup struct

+ DisplayName string

+ ExternalID string

+ ID string

+ Members []ScimGroupMember

+ Meta *ScimMeta

+ Schemas []string

+ type ScimGroupMember struct

+ Display string

+ Ref string

+ Value string

+ type ScimListResponse struct

+ ItemsPerPage int

+ Resources json.RawMessage

+ Schemas []string

+ StartIndex int

+ TotalResults int

+ type ScimMeta struct

+ Created string

+ LastModified string

+ Location string

+ ResourceType string

+ Version string

+ type ScimName struct

+ FamilyName string

+ Formatted string

+ GivenName string

+ type ScimPatchOperation struct

+ Op string

+ Path string

+ Value any

+ type ScimPatchRequest struct

+ Operations []ScimPatchOperation

+ Schemas []string

+ type ScimUser struct

+ Active bool

+ DisplayName string

+ Emails []ScimEmail

+ ExternalID string

+ ID string

+ Meta *ScimMeta

+ Name *ScimName

+ Schemas []string

+ UserName string

type SelfDeleteResponse

+ Detail string

type ServiceAccountResponse

+ CreatedAt string

+ Email string

+ ID string

type ServiceDiscoveryResponse

+ APIGroups json.RawMessage

+ AuthMethods json.RawMessage

+ Capabilities json.RawMessage

+ Description string

+ Discovery json.RawMessage

+ DiscoveryVersion string

+ MeshNetwork json.RawMessage

+ Resources json.RawMessage

+ StartHere json.RawMessage

+ Status string

type ServicePermissionResponse

+ Actions int64

+ Reason string

+ RegisteredAt string

+ Resources int64

+ Valid bool

type ServiceStatusResponse

+ Checks map[string]string

+ CircuitBreakers json.RawMessage

+ Configuration json.RawMessage

+ Dependencies map[string]string

+ Enterprise json.RawMessage

+ Features json.RawMessage

+ Metrics json.RawMessage

+ Oauth21 json.RawMessage

+ PasswordPolicy json.RawMessage

+ Runtime string

+ Service string

+ Timestamp float64

+ UptimeSec int64

+ Version string

+ ZanzibarMigration json.RawMessage

type SuperAdminActiveGrantsResponse

+ ActiveGrants json.RawMessage

+ Count int64

+ RetrievedAt string

type SuperAdminCleanupResponse

+ CleanupTime string

+ ExpiredCount int64

+ Success bool

type SuperAdminExtendResponse

+ Status string

+ Success bool

type SuperAdminGrantResponse

+ ApprovalID string

+ Instructions string

+ SessionID string

+ Success bool

type SuperAdminRevokeResponse

+ RevokedAt string

+ Success bool

type Team

+ ParentTeamID string

+ Permissions []string

+ Settings json.RawMessage

+ UpdatedAt string

type TempAllowlistCreateResponse

+ IPAddress string

+ Status string

+ UserID string

type TempAllowlistListResponse

+ Count int64

+ type TokenActorInfo struct

+ Email string

+ ID string

+ Name string

type TokenSet

+ Provider string

+ Scope string

type TokenUserInfo

+ Actor *TokenActorInfo

type UpdateNetworkPolicyRequest

+ Action *string

+ ExpiresAt *string

+ GeoCountries *[]string

+ GeoMode *string

+ Networks *[]string

+ RequireMFA *bool

+ RestrictedPermissions *[]string

type User

+ CreatedAt string

+ LastLogin string

+ Roles []string

+ UpdatedAt string

type ValidPermissionsResponse

+ Service string

+ type ValidationCacheOptions struct

+ MaxEntries int

+ NegativeTTL time.Duration

+ TTL time.Duration

+ type ValidationCacheStats struct

+ Enabled bool

+ Entries int

+ Hits uint64

+ Misses uint64

type ViolationListResponse

+ Count int64

type WebAuthnConfigResponse

+ Features json.RawMessage

+ SupportedAlgorithms json.RawMessage

+ SupportedTransports []string

+ Timeout int64

type WebAuthnCredentialListResponse

+ Count int64

type WebAuthnRegistrationResult

+ Verified bool

v0.9.2

Jul 26, 2026

v0.9.1

Jul 26, 2026

v0.9.0

Jul 26, 2026

Changes in this version

+ type HierarchyTeam struct

+ ID string

+ Members []HierarchyUser

+ Type string

+ type HierarchyUser struct

+ ID string

+ Role string

+ Type string

type OrgHierarchyResponse

+ Children []OrgHierarchyResponse

+ Organization *OrgInfo

+ TeamCount int

+ Teams []HierarchyTeam

+ UserCount int

+ func (r *OrgHierarchyResponse) WalkOrgTree(fn func(node *OrgHierarchyResponse, depth int))

+ type OrgInfo struct

+ BillingType string

+ CreatedAt string

+ Domain string

+ ID string

+ Industry string

+ LogoURL string

+ Name string

+ ParentID string

+ Size string

+ Slug string

+ Status string

+ Timezone string

+ UpdatedAt string

+ Website string

v0.8.0

Jul 26, 2026

Changes in this version

type ZanzibarStore

+ func (s *ZanzibarStore) RelateUntil(ctx context.Context, subject, relation, object string, expires time.Time) error

v0.7.1

Jul 26, 2026

v0.7.0

Jul 26, 2026

v0.6.0

Jul 25, 2026

v0.5.0

Jul 25, 2026

Changes in this version

+ type Observer func(RequestInfo)

type Option

+ func WithObserver(fn Observer) Option

+ type RequestInfo struct

+ Attempt int

+ Duration time.Duration

+ Endpoint string

+ Err error

+ Method string

+ RequestID string

+ Retrying bool

+ Status int

v0.4.0

Jul 25, 2026

v0.3.0

Jul 25, 2026

Changes in this version

type CheckPermissionRequest

+ func Check(subjectType, subjectID, permission, objectType, objectID string) CheckPermissionRequest

type Client

+ func (c *Client) Store(storeID, callerToken string) *ZanzibarStore

+ type ZanzibarStore struct

+ func (s *ZanzibarStore) As(callerToken string) *ZanzibarStore

+ func (s *ZanzibarStore) Can(ctx context.Context, ...) (bool, error)

+ func (s *ZanzibarStore) CanAll(ctx context.Context, checks ...CheckPermissionRequest) (bool, error)

+ func (s *ZanzibarStore) CanAny(ctx context.Context, checks ...CheckPermissionRequest) (bool, error)

+ func (s *ZanzibarStore) CanID(ctx context.Context, subject, permission, object string) (bool, error)

+ func (s *ZanzibarStore) ID() string

+ func (s *ZanzibarStore) Relate(ctx context.Context, ...) error

+ func (s *ZanzibarStore) RelateID(ctx context.Context, subject, relation, object string) error

+ func (s *ZanzibarStore) RelationsOn(ctx context.Context, objectType, objectID, relation string) ([]RelationshipEntry, error)

+ func (s *ZanzibarStore) Unrelate(ctx context.Context, ...) error

+ func (s *ZanzibarStore) UnrelateID(ctx context.Context, subject, relation, object string) error

+ func (s *ZanzibarStore) WhatCan(ctx context.Context, subject, permission, objectType string) ([]string, error)

+ func (s *ZanzibarStore) WhoCan(ctx context.Context, object, permission string) ([]string, error)

+ func (s *ZanzibarStore) Why(ctx context.Context, subject, permission, object string) (*CheckPermissionResponse, error)

v0.2.0

Jul 25, 2026

Changes in this version

+ type ErrUntypedID struct

+ Field string

+ Value string

+ func (e *ErrUntypedID) Error() string

v0.1.0

Jul 25, 2026

Changes in this version

+ const APIKeyPrefix

+ const DefaultBaseURL

+ const ScopeAdminAuditRead

+ const ScopeAdminCircuitBreakerRead

+ const ScopeAdminCircuitBreakerWrite

+ const ScopeAdminJWKSAdmin

+ const ScopeAdminJWKSRead

+ const ScopeAdminJWKSRevoke

+ const ScopeAdminJWKSRotate

+ const ScopeAdminJWKSWrite

+ const ScopeAdminMetricsRead

+ const ScopeAdminPasswordPolicyRead

+ const ScopeAdminPasswordPolicyWrite

+ const ScopeAdminPasswordResetWrite

+ const ScopeAdminReportsRead

+ const ScopeAdminServiceAccountsWrite

+ const ScopeAdminTestWrite

+ const ScopeAdminUsersElevate

+ const ScopeEventsDelete

+ const ScopeEventsRead

+ const ScopeEventsSubscribe

+ const ScopeEventsTest

+ const ScopeEventsUpdate

+ const ScopeOrgAdmin

+ const ScopeOrgRead

+ const ScopePermissionsRegister

+ const ScopeSAMLAdmin

+ const ScopeSAMLRead

+ const ScopeSSOAdmin

+ const ScopeSystemAdmin

+ const ScopeTeamsRead

+ const ScopeTeamsWrite

+ const ScopeUsersElevate

+ const ScopeUsersInvite

+ const ScopeUsersRead

+ const ScopeUsersWrite

+ const ScopeZanzibarAdmin

+ const Version

+ func IsAPIKey(cred string) bool

+ func IsBadRequest(err error) bool

+ func IsConflict(err error) bool

+ func IsForbidden(err error) bool

+ func IsNotFound(err error) bool

+ func IsRateLimited(err error) bool

+ func IsRetryable(err error) bool

+ func IsServerError(err error) bool

+ func IsUnauthorized(err error) bool

+ func IsValidationError(err error) bool

+ func Object(typ, id string) string

+ func StatusCode(err error) int

+ func Subject(typ, id string) string

+ type APIError struct

+ Body string

+ Code string

+ Endpoint string

+ Message string

+ Method string

+ RequestID string

+ StatusCode int

+ func AsAPIError(err error) (*APIError, bool)

+ func (e *APIError) Error() string

+ type APIKey struct

+ CreatedAt string

+ Enabled bool

+ ExpiresAt string

+ ID string

+ LastUsedAt string

+ Name string

+ OrgID string

+ Permissions []string

+ Prefix string

+ type APIKeyCreate struct

+ Audience []string

+ ExpiresAt string

+ Name string

+ OrgID string

+ Permissions []string

+ type APIKeyUpdate struct

+ Enabled *bool

+ ExpiresAt *string

+ Name *string

+ Permissions *[]string

+ type APIKeyValidation struct

+ OrgID string

+ Permissions []string

+ Reason string

+ UserID string

+ Valid bool

+ type APIKeyWithToken struct

+ Token string

+ type ActiveMagicLink struct

+ CreatedAt string

+ Email string

+ ExpiresAt string

+ Token string

+ type ActiveMagicLinksResponse struct

+ Links []ActiveMagicLink

+ type Actor struct

+ Audience []string

+ Email string

+ Error string

+ ExpiresAt string

+ OrgID string

+ Permissions []string

+ UserID string

+ Valid bool

+ func (a Actor) HasPermission(p string) bool

+ type AlertEntry struct

+ Level string

+ Message string

+ Source string

+ Timestamp string

+ type ApprovalRequestModel struct

+ Approve bool

+ Comment string

+ GrantID string

+ type AttributeMapping struct

+ ID string

+ ProviderID string

+ SourceAttr string

+ TargetAttr string

+ Transform string

+ type AttributeMappingCreateResponse struct

+ Mapping AttributeMapping

+ Message string

+ type AttributeMappingListResponse struct

+ Mappings []AttributeMapping

+ Total int

+ type AuthorizationModel struct

+ DSL string

+ SchemaVersion string

+ TypeDefinitions []map[string]any

+ type AuthorizationModelResponse struct

+ AuthorizationModelID string

+ CreatedAt string

+ DSL string

+ SchemaVersion string

+ TypeDefinitions []map[string]any

+ type AuthorizationResponse struct

+ Code string

+ ConsentURL string

+ Extra map[string]any

+ Location string

+ RedirectURI string

+ State string

+ type AuthorizationServerMetadata = OpenIDConfiguration

+ type Authorizer interface

+ Authorize func(ctx context.Context, token, action string, resource Resource) (bool, error)

+ type BulkCheckRequest struct

+ Checks []CheckPermissionRequest

+ type BulkCheckResults []CheckPermissionResponse

+ func (b BulkCheckResults) AllAllowed() bool

+ func (b BulkCheckResults) Allowed(i int) bool

+ type ChangePassword struct

+ CurrentPassword string

+ NewPassword string

+ type CheckPermissionRequest struct

+ ConsistencyToken string

+ Context map[string]any

+ Object string

+ OrgID string

+ Permission string

+ Subject string

+ type CheckPermissionResponse struct

+ Allowed bool

+ Cached bool

+ CheckTimeMS float64

+ Path []string

+ Reason string

+ type CircuitBreakerResetAllResponse struct

+ Message string

+ ResetCount int

+ type CircuitBreakerResetResponse struct

+ Message string

+ Name string

+ Reset bool

+ type CircuitBreakerStatusResponse struct

+ Breakers map[string]any

+ type Client struct

+ func New(baseURL string, opts ...Option) *Client

+ func (c *Client) AcceptInvitePage(ctx context.Context, slug, inviteToken string) (map[string]any, error)

+ func (c *Client) ActivateSigningKey(ctx context.Context, kid, callerToken string) (*KeyActivateResponse, error)

+ func (c *Client) ActivateUser(ctx context.Context, userID, callerToken string) (*MessageDetailResponse, error)

+ func (c *Client) AddTeamMember(ctx context.Context, teamID string, req TeamMemberAdd, callerToken string) (*MessageResponse, error)

+ func (c *Client) AuthorizationServerMetadata(ctx context.Context) (*AuthorizationServerMetadata, error)

+ func (c *Client) Authorize(ctx context.Context, token, action string, resource Resource) (bool, error)

+ func (c *Client) BaseURL() string

+ func (c *Client) ChangeMyPassword(ctx context.Context, token string, req ChangePassword) (*MessageResponse, error)

+ func (c *Client) CheckDelegation(ctx context.Context, targetUserID, token string) (*DelegationCheckResponse, error)

+ func (c *Client) CheckPermission(ctx context.Context, req PermissionCheckRequest, callerToken string) (*PermissionDecision, error)

+ func (c *Client) CheckPermissionPublic(ctx context.Context, req PermissionCheckRequest) (*PermissionDecision, error)

+ func (c *Client) CheckQuota(ctx context.Context, resourceType, token string) (*QuotaCheckResponse, error)

+ func (c *Client) CircuitBreakerStatus(ctx context.Context, callerToken string) (*CircuitBreakerStatusResponse, error)

+ func (c *Client) CleanupSigningKeys(ctx context.Context, req KeyCleanupRequest, callerToken string) (*KeyCleanupResponse, error)

+ func (c *Client) ConfirmPasswordResetAuth(ctx context.Context, req PasswordResetConfirm) (*PasswordResetConfirmResponse, error)

+ func (c *Client) ConfirmVerificationEmail(ctx context.Context, token string) error

+ func (c *Client) CreateAPIKey(ctx context.Context, req APIKeyCreate, token string) (*APIKeyWithToken, error)

+ func (c *Client) CreateAttributeMapping(ctx context.Context, req AttributeMapping, callerToken string) (*AttributeMappingCreateResponse, error)

+ func (c *Client) CreateDomainToken(ctx context.Context, token string) (*DomainTokenResponse, error)

+ func (c *Client) CreateEmergencyOverride(ctx context.Context, req EmergencyOverrideRequest, callerToken string) (*EmergencyOverrideCreateResponse, error)

+ func (c *Client) CreateEventSubscription(ctx context.Context, req EventSubscriptionCreate, token string) (*EventSubscription, error)

+ func (c *Client) CreateNamespace(ctx context.Context, storeID string, req NamespaceRequest, callerToken string) (*ZanzibarMessageResponse, error)

+ func (c *Client) CreateNetworkPolicy(ctx context.Context, req CreateNetworkPolicyRequest, callerToken string) (*NetworkPolicyCreateResponse, error)

+ func (c *Client) CreateOrganization(ctx context.Context, req OrganizationCreate, token string) (*Organization, error)

+ func (c *Client) CreateProvider(ctx context.Context, req ProviderConfigCreate, callerToken string) (*Provider, error)

+ func (c *Client) CreateSSODomain(ctx context.Context, domain string, req SSODomainConfigRequest, ...) (*SSODomainConfigResponse, error)

+ func (c *Client) CreateSSOSession(ctx context.Context, token string) (*SSOSessionCreateResponse, error)

+ func (c *Client) CreateServiceAccount(ctx context.Context, req ServiceAccountCreate, callerToken string) (*ServiceAccountResponse, error)

+ func (c *Client) CreateTeam(ctx context.Context, orgID string, req TeamCreate, callerToken string) (*Team, error)

+ func (c *Client) CreateTempAllowlist(ctx context.Context, req TempAllowlistRequest, callerToken string) (*TempAllowlistCreateResponse, error)

+ func (c *Client) DeactivateUser(ctx context.Context, userID, callerToken string) (*MessageDetailResponse, error)

+ func (c *Client) Delegate(ctx context.Context, req DelegateTokenRequest, token string) (*TokenSet, error)

+ func (c *Client) DeleteAPIKey(ctx context.Context, keyID, callerToken string) (*MessageResponse, error)

+ func (c *Client) DeleteAllRelationshipsForObject(ctx context.Context, storeID, objectType, objectID, token string) (int, error)

+ func (c *Client) DeleteClientRegistration(ctx context.Context, clientID string) error

+ func (c *Client) DeleteCurrentUser(ctx context.Context, confirmEmail, callerToken string) (*SelfDeleteResponse, error)

+ func (c *Client) DeleteEventSubscription(ctx context.Context, subscriptionID, token string) error

+ func (c *Client) DeleteNetworkOverride(ctx context.Context, overrideID, callerToken string) (*NetworkPolicyStatusResponse, error)

+ func (c *Client) DeleteNetworkPolicy(ctx context.Context, policyID, callerToken string) (*NetworkPolicyStatusResponse, error)

+ func (c *Client) DeleteOrgEmailConfig(ctx context.Context, orgID, callerToken string) (*EmailConfigDeleteResponse, error)

+ func (c *Client) DeleteOrgEmailTemplate(ctx context.Context, orgID, templateType, callerToken string) (*EmailTemplateDeleteResponse, error)

+ func (c *Client) DeleteOrganization(ctx context.Context, orgID, callerToken string) (*MessageResponse, error)

+ func (c *Client) DeleteProvider(ctx context.Context, providerID, callerToken string) (*MessageResponse, error)

+ func (c *Client) DeleteRelationships(ctx context.Context, storeID string, req RelationshipRequest, token string) (*WriteOperationResponse, error)

+ func (c *Client) DeleteSAMLSP(ctx context.Context, spID, callerToken string) (*EnterpriseMessageResponse, error)

+ func (c *Client) DeleteSSODomain(ctx context.Context, domain, callerToken string) (*MessageResponse, error)

+ func (c *Client) DeleteSSOSession(ctx context.Context, sessionID, token string) (*MessageResponse, error)

+ func (c *Client) DeleteTeam(ctx context.Context, teamID, callerToken string) (*MessageResponse, error)

+ func (c *Client) DeleteTempAllowlist(ctx context.Context, entryID, callerToken string) (*NetworkPolicyStatusResponse, error)

+ func (c *Client) DeleteWebAuthnCredential(ctx context.Context, token, credentialID string) (*EnterpriseMessageResponse, error)

+ func (c *Client) Discover(ctx context.Context) (*ServiceDiscoveryResponse, error)

+ func (c *Client) DismissReport(ctx context.Context, reportID, callerToken string) (*LeakReportActionResponse, error)

+ func (c *Client) ElevatePrivileges(ctx context.Context, req ElevatePrivilegesRequest, callerToken string) (*ElevatePrivilegesResponse, error)

+ func (c *Client) EmailHistory(ctx context.Context, callerToken string) (*EmailHistoryResponse, error)

+ func (c *Client) EmailStats(ctx context.Context, callerToken string) (*EmailStatsResponse, error)

+ func (c *Client) EmailTemplateTypes(ctx context.Context, callerToken string) (*TemplateTypesResponse, error)

+ func (c *Client) EmergencyRevokeAPIKeys(ctx context.Context, req EmergencyRevokeRequest, callerToken string) (*EmergencyRevokeResponse, error)

+ func (c *Client) EnsureAuthorizationModel(ctx context.Context, storeID string, model AuthorizationModel, ...) (modelID string, changed bool, err error)

+ func (c *Client) EnterpriseHelp(ctx context.Context) (map[string]any, error)

+ func (c *Client) EnterpriseLicense(ctx context.Context) (map[string]any, error)

+ func (c *Client) EvaluateNetworkPolicy(ctx context.Context, ip string) (*PolicyEvaluationResult, error)

+ func (c *Client) EventSubscriptionStats(ctx context.Context, subscriptionID, token string) (*EventSubscriptionStatsResponse, error)

+ func (c *Client) EventTypes(ctx context.Context) (*EventTypesResponse, error)

+ func (c *Client) FederationStats(ctx context.Context, callerToken string) (*FederationStatsResponse, error)

+ func (c *Client) ForcePasswordReset(ctx context.Context, req ForcePasswordResetRequest, callerToken string) (*ForcePasswordResetResponse, error)

+ func (c *Client) ForwardAuth(ctx context.Context, method, token string) (*ForwardAuthDecision, error)

+ func (c *Client) ForwardAuthFail(ctx context.Context, method, token string) (*ForwardAuthDecision, error)

+ func (c *Client) ForwardAuthLive(ctx context.Context, method, token string) (*ForwardAuthDecision, error)

+ func (c *Client) ForwardAuthPass(ctx context.Context, method, token string) (*ForwardAuthDecision, error)

+ func (c *Client) GenerateRecoveryCodes(ctx context.Context, token string) (*RecoveryCodesResponse, error)

+ func (c *Client) GenerateSAMLCertificate(ctx context.Context, callerToken string) (*SAMLCertificateGenerateResponse, error)

+ func (c *Client) GenerateSigningKey(ctx context.Context, req KeyGenerationRequest, callerToken string) (*KeyGenerateResponse, error)

+ func (c *Client) GetAPIKey(ctx context.Context, keyID, token string) (*APIKey, error)

+ func (c *Client) GetClientRegistration(ctx context.Context, clientID string) (*ClientRegistrationResponse, error)

+ func (c *Client) GetEventSubscription(ctx context.Context, subscriptionID, token string) (*EventSubscription, error)

+ func (c *Client) GetHostedLoginPage(ctx context.Context, slug string) (map[string]any, error)

+ func (c *Client) GetJITConfig(ctx context.Context, callerToken string) (*JITConfigResponse, error)

+ func (c *Client) GetLoginConfig(ctx context.Context, orgID, callerToken string) (*LoginConfigResponse, error)

+ func (c *Client) GetMeshProvider(ctx context.Context, serviceID, callerToken string) (*MeshProvider, error)

+ func (c *Client) GetMyOrganizations(ctx context.Context, token string) ([]UserOrganizationInfo, error)

+ func (c *Client) GetMyProfile(ctx context.Context, token string) (*User, error)

+ func (c *Client) GetNamespace(ctx context.Context, storeID, name, callerToken string) (*NamespaceDetailResponse, error)

+ func (c *Client) GetNetworkPolicy(ctx context.Context, policyID, callerToken string) (*NetworkPolicy, error)

+ func (c *Client) GetOrgEmailConfig(ctx context.Context, orgID, callerToken string) (*OrgEmailConfigResponse, error)

+ func (c *Client) GetOrgEmailTemplate(ctx context.Context, orgID, templateType, callerToken string) (*OrgEmailTemplateResponse, error)

+ func (c *Client) GetOrgHierarchy(ctx context.Context, orgID, callerToken string) (*OrgHierarchyResponse, error)

+ func (c *Client) GetOrganization(ctx context.Context, orgID, callerToken string) (*Organization, error)

+ func (c *Client) GetPasswordPolicy(ctx context.Context, orgID, callerToken string) (*PasswordPolicyGetResponse, error)

+ func (c *Client) GetProvider(ctx context.Context, providerID, callerToken string) (*Provider, error)

+ func (c *Client) GetPublicLoginConfig(ctx context.Context, slug string) (*PublicLoginConfig, error)

+ func (c *Client) GetRoles(ctx context.Context, callerToken string) (map[string]RoleDefinition, error)

+ func (c *Client) GetSAMLAttributeMappings(ctx context.Context, callerToken string) (*SAMLAttributeMappingResponse, error)

+ func (c *Client) GetSAMLCertificates(ctx context.Context, callerToken string) (*SAMLCertificateStatusResponse, error)

+ func (c *Client) GetSAMLSP(ctx context.Context, spID, callerToken string) (*SAMLSPDetailResponse, error)

+ func (c *Client) GetSSOConfig(ctx context.Context, callerToken string) (*SSOConfigResponse, error)

+ func (c *Client) GetSSODomain(ctx context.Context, domain, callerToken string) (*SSODomainConfigResponse, error)

+ func (c *Client) GetSSOSession(ctx context.Context, sessionID, token string) (*SSOSessionDetailResponse, error)

+ func (c *Client) GetTeam(ctx context.Context, teamID, callerToken string) (*Team, error)

+ func (c *Client) GetTeamPermissions(ctx context.Context, teamID, callerToken string) (*TeamPermissionsResponse, error)

+ func (c *Client) GetUser(ctx context.Context, userID, callerToken string) (*User, error)

+ func (c *Client) GetUserPermissions(ctx context.Context, userID, callerToken string) (*UserPermissions, error)

+ func (c *Client) GlobalEmailConfig(ctx context.Context, callerToken string) (*GlobalEmailConfigResponse, error)

+ func (c *Client) GrantDelegation(ctx context.Context, req DelegationGrant, token string) (*DelegationResponse, error)

+ func (c *Client) GrantPermission(ctx context.Context, userID, orgID, permission, callerToken string) (*MessageResponse, error)

+ func (c *Client) Health(ctx context.Context) (*HealthCheckResponse, error)

+ func (c *Client) Help(ctx context.Context) (map[string]any, error)

+ func (c *Client) Introspect(ctx context.Context, token, hint string) (*Introspection, error)

+ func (c *Client) InviteToOrganization(ctx context.Context, orgID string, req OrganizationInvite, callerToken string) (*MessageResponse, error)

+ func (c *Client) JWKS(ctx context.Context) (JWKS, error)

+ func (c *Client) JWKSHealth(ctx context.Context) (map[string]any, error)

+ func (c *Client) JWKSHealthDetail(ctx context.Context) (*JwksHealthResponse, error)

+ func (c *Client) JWKSMetrics(ctx context.Context, callerToken string) (*JwksMetricsResponse, error)

+ func (c *Client) JWKSNextRotation(ctx context.Context, callerToken string) (*NextRotationResponse, error)

+ func (c *Client) JWKSRotationStatus(ctx context.Context, callerToken string) (*RotationStatusResponse, error)

+ func (c *Client) ListAPIKeys(ctx context.Context, callerToken string) ([]APIKey, error)

+ func (c *Client) ListActiveMagicLinks(ctx context.Context, token string) (*ActiveMagicLinksResponse, error)

+ func (c *Client) ListAttributeMappings(ctx context.Context, callerToken string) (*AttributeMappingListResponse, error)

+ func (c *Client) ListAuthorizationModels(ctx context.Context, storeID, pageToken, callerToken string) (*ListAuthorizationModelsResponse, error)

+ func (c *Client) ListDelegations(ctx context.Context, userID, token string) ([]DelegationEntry, error)

+ func (c *Client) ListDevices(ctx context.Context, token string) (*DeviceListResponse, error)

+ func (c *Client) ListEventSubscriptions(ctx context.Context, token string) (*EventSubscriptionListResponse, error)

+ func (c *Client) ListInvitations(ctx context.Context, orgID, callerToken string) ([]InvitationListItem, error)

+ func (c *Client) ListMeshProviders(ctx context.Context, q url.Values, callerToken string) (*MeshProvidersListResponse, error)

+ func (c *Client) ListNamespaces(ctx context.Context, storeID, callerToken string) (*NamespaceListResponse, error)

+ func (c *Client) ListNetworkOverrides(ctx context.Context, callerToken string) (*OverrideListResponse, error)

+ func (c *Client) ListNetworkPolicies(ctx context.Context, callerToken string) (*NetworkPolicyListResponse, error)

+ func (c *Client) ListNetworkViolations(ctx context.Context, callerToken string) (*ViolationListResponse, error)

+ func (c *Client) ListObjectsPaged(ctx context.Context, storeID string, req ListObjectsRequest, ...) (*ListObjectsResponse, error)

+ func (c *Client) ListOrgClients(ctx context.Context, orgID, callerToken string) (*OrgClientSafeResponse, error)

+ func (c *Client) ListOrgEmailTemplates(ctx context.Context, orgID, callerToken string) (*OrgEmailTemplateResponse, error)

+ func (c *Client) ListOrgSessions(ctx context.Context, orgID, callerToken string) (*OrgSessionsResponse, error)

+ func (c *Client) ListOrgUsers(ctx context.Context, orgID, callerToken string) (*OrgUserResponse, error)

+ func (c *Client) ListProviders(ctx context.Context, callerToken string) ([]Provider, error)

+ func (c *Client) ListRegisteredServices(ctx context.Context, callerToken string) (*RegisteredServicesResponse, error)

+ func (c *Client) ListRelationships(ctx context.Context, ...) (*RelationshipsResponse, error)

+ func (c *Client) ListRelationshipsPaged(ctx context.Context, ...) (*RelationshipsPage, error)

+ func (c *Client) ListReports(ctx context.Context, callerToken string) (*LeakReportListResponse, error)

+ func (c *Client) ListRevokedKeys(ctx context.Context, callerToken string) (*RevokedKeysListResponse, error)

+ func (c *Client) ListSAMLSPs(ctx context.Context, callerToken string) (*SAMLSPListResponse, error)

+ func (c *Client) ListSAMLSessions(ctx context.Context, token string) (*SAMLSessionListResponse, error)

+ func (c *Client) ListSSODomains(ctx context.Context, callerToken string) (*SSODomainListResponse, error)

+ func (c *Client) ListSSOSessions(ctx context.Context, token string) (*SSOSessionListResponse, error)

+ func (c *Client) ListTeamMembers(ctx context.Context, teamID, callerToken string) ([]TeamMember, error)

+ func (c *Client) ListTeams(ctx context.Context, orgID, callerToken string) ([]Team, error)

+ func (c *Client) ListTempAllowlist(ctx context.Context, callerToken string) (*TempAllowlistListResponse, error)

+ func (c *Client) ListValidPermissions(ctx context.Context) (*ValidPermissionsResponse, error)

+ func (c *Client) ListWebAuthnCredentials(ctx context.Context, token string) (*WebAuthnCredentialListResponse, error)

+ func (c *Client) Login(ctx context.Context, req LoginRequest) (*TokenSet, error)

+ func (c *Client) Logout(ctx context.Context, token string) (*LogoutResult, error)

+ func (c *Client) MagicLinkAnalytics(ctx context.Context, token string) (*MagicLinkAnalyticsResponse, error)

+ func (c *Client) MagicLinkConfig(ctx context.Context) (*MagicLinkConfigResponse, error)

+ func (c *Client) Me(ctx context.Context, token string) (*User, error)

+ func (c *Client) Metrics(ctx context.Context, callerToken string) (map[string]any, error)

+ func (c *Client) MigratePermissions(ctx context.Context, storeID, userID string, permissions []string, ...) (*ZanzibarMessageResponse, error)

+ func (c *Client) MigrateSetupDefaults(ctx context.Context, storeID, callerToken string) (*ZanzibarMessageResponse, error)

+ func (c *Client) MyQuotaUsage(ctx context.Context, token string) (*QuotaUsageResponse, error)

+ func (c *Client) OAuthAuthorize(ctx context.Context, token string, params url.Values) (*AuthorizationResponse, error)

+ func (c *Client) OAuthAuthorizeURL(ctx context.Context, p OAuthAuthorizeParams) (*OAuthAuthorize, error)

+ func (c *Client) OAuthCallback(ctx context.Context, p OAuthCallbackParams) (*TokenSet, error)

+ func (c *Client) OAuthToken(ctx context.Context, form url.Values) (*TokenResponse, error)

+ func (c *Client) OpenIDConfiguration(ctx context.Context) (*OpenIDConfiguration, error)

+ func (c *Client) OrgAuthProviders(ctx context.Context, slug string) (*OrgProvidersResponse, error)

+ func (c *Client) OrgEmailHistory(ctx context.Context, orgID, callerToken string) (*EmailHistoryResponse, error)

+ func (c *Client) OrgJWKS(ctx context.Context, orgID string) (JWKS, error)

+ func (c *Client) OrgLogin(ctx context.Context, slug string, req OrgLoginRequest) (*TokenSet, error)

+ func (c *Client) OrgLogout(ctx context.Context, slug, token string) (*HostedLoginMessageResponse, error)

+ func (c *Client) OrgRefresh(ctx context.Context, slug, refreshToken string) (*TokenResponse, error)

+ func (c *Client) OrgRegister(ctx context.Context, slug string, req OrgRegisterRequest) (*TokenSet, error)

+ func (c *Client) OrgResetPassword(ctx context.Context, slug string, req OrgPasswordResetRequest) (*HostedLoginMessageResponse, error)

+ func (c *Client) OrgSSOCallback(ctx context.Context, slug string, form url.Values) (map[string]any, error)

+ func (c *Client) OrgSSOInitiate(ctx context.Context, slug string, params url.Values) (map[string]any, error)

+ func (c *Client) OrgToken(ctx context.Context, slug string, form url.Values) (*TokenResponse, error)

+ func (c *Client) PasswordAuditEvents(ctx context.Context, callerToken string) (*PasswordAuditEventsResponse, error)

+ func (c *Client) PasswordComplianceReport(ctx context.Context, callerToken string) (*PasswordComplianceResponse, error)

+ func (c *Client) PreviewOrgEmailTemplate(ctx context.Context, orgID, templateType string, vars map[string]any, ...) (*TemplatePreviewResponse, error)

+ func (c *Client) PropagateLogout(ctx context.Context, token string) (*LogoutPropagationResponse, error)

+ func (c *Client) PropagateSSO(ctx context.Context, callerToken string) (*SSOPropagateResponse, error)

+ func (c *Client) ProviderAuthorizeInfo(ctx context.Context, provider string, params url.Values) (*OAuthProviderAuthorizeResponse, error)

+ func (c *Client) PublishMeshProvider(ctx context.Context, req MeshProviderPublishRequest, callerToken string) (*MeshProviderPublishResponse, error)

+ func (c *Client) PushedAuthorizationRequest(ctx context.Context, params url.Values) (*PushedAuthorizationResponse, error)

+ func (c *Client) QuotaTiers(ctx context.Context) (*QuotaTiersResponse, error)

+ func (c *Client) ReadAuthorizationModel(ctx context.Context, storeID, modelID, callerToken string) (*AuthorizationModelResponse, error)

+ func (c *Client) RecentAlerts(ctx context.Context, callerToken string) (*RecentAlertsResponse, error)

+ func (c *Client) RecoverJWKS(ctx context.Context) (*JwksRecoverResponse, error)

+ func (c *Client) Refresh(ctx context.Context, refreshToken string) (*TokenSet, error)

+ func (c *Client) RefreshJWKS(ctx context.Context) (JWKS, error)

+ func (c *Client) RefreshTokenForm(ctx context.Context, refreshToken string) (*TokenResponse, error)

+ func (c *Client) Register(ctx context.Context, req RegisterRequest) (*TokenSet, error)

+ func (c *Client) RegisterClient(ctx context.Context, req ClientRegistration) (*ClientRegistrationResponse, error)

+ func (c *Client) RegisterSAMLSP(ctx context.Context, req SAMLServiceProviderConfig, callerToken string) (*SAMLSPRegistrationResponse, error)

+ func (c *Client) RegisterServicePermissions(ctx context.Context, req ServicePermissionRegister, callerToken string) (*ServicePermissionResponse, error)

+ func (c *Client) RegistryStats(ctx context.Context) (*RegistryStatsResponse, error)

+ func (c *Client) RemoveOrgUser(ctx context.Context, orgID, userID, callerToken string) (*MessageResponse, error)

+ func (c *Client) RemoveTeamMember(ctx context.Context, teamID, userID, callerToken string) (*MessageResponse, error)

+ func (c *Client) RequestPasswordReset(ctx context.Context, req PasswordReset) (*PasswordResetResponse, error)

+ func (c *Client) RequestPasswordResetAuth(ctx context.Context, req PasswordReset) (*PasswordResetResponse, error)

+ func (c *Client) ResetAllCircuitBreakers(ctx context.Context, callerToken string) (*CircuitBreakerResetAllResponse, error)

+ func (c *Client) ResetCircuitBreaker(ctx context.Context, name, callerToken string) (*CircuitBreakerResetResponse, error)

+ func (c *Client) ResetPassword(ctx context.Context, req PasswordResetConfirm) (*PasswordResetConfirmResponse, error)

+ func (c *Client) ResolveReport(ctx context.Context, reportID, callerToken string) (*LeakReportActionResponse, error)

+ func (c *Client) RevocationAuditLog(ctx context.Context, callerToken string) ([]RevocationAuditEntry, error)

+ func (c *Client) RevokeDelegation(ctx context.Context, actorID, token string) (*MessageResponse, error)

+ func (c *Client) RevokeInvitation(ctx context.Context, orgID, invitationID, callerToken string) (*MessageResponse, error)

+ func (c *Client) RevokeMagicLink(ctx context.Context, callerToken, linkToken string) (*EnterpriseMessageResponse, error)

+ func (c *Client) RevokeOrgSessions(ctx context.Context, orgID, callerToken string) (*MessageResponse, error)

+ func (c *Client) RevokePermission(ctx context.Context, userID, orgID, permission, callerToken string) (*MessageResponse, error)

+ func (c *Client) RevokeSigningKey(ctx context.Context, kid string, req KeyRevocationRequest, callerToken string) (*KeyRevocationResponse, error)

+ func (c *Client) RevokeToken(ctx context.Context, callerToken, tokenToRevoke, hint string) (*RevokeResult, error)

+ func (c *Client) RevokeTokenPublic(ctx context.Context, token, hint string) error

+ func (c *Client) RevokeUserSessions(ctx context.Context, orgID, userID, callerToken string) (*SessionRevokeResponse, error)

+ func (c *Client) RotateSigningKeys(ctx context.Context, req KeyRotationRequest, callerToken string) (*KeyRotationResponse, error)

+ func (c *Client) SAMLAnalytics(ctx context.Context, callerToken string) (*SAMLAnalyticsResponse, error)

+ func (c *Client) SAMLAssertionConsumer(ctx context.Context, form url.Values) (*SAMLAssertionResult, error)

+ func (c *Client) SAMLMetadata(ctx context.Context) (string, error)

+ func (c *Client) SAMLSPMetadata(ctx context.Context, spID string) (string, error)

+ func (c *Client) SAMLSSOPost(ctx context.Context, form url.Values) (string, error)

+ func (c *Client) SAMLSSORedirect(ctx context.Context, params url.Values) (string, error)

+ func (c *Client) SAMLSingleLogout(ctx context.Context, form url.Values) (*SAMLLogoutResult, error)

+ func (c *Client) SendMagicLink(ctx context.Context, form url.Values) (*MagicLinkSendResponse, error)

+ func (c *Client) SendTestEmail(ctx context.Context, orgID string, req TestEmailRequest, callerToken string) (*TestEmailSentResponse, error)

+ func (c *Client) SendVerificationEmail(ctx context.Context, req VerifyEmailSendRequest) error

+ func (c *Client) SetPasswordPolicy(ctx context.Context, req PasswordPolicyRequest, callerToken string) (*PasswordPolicySetResponse, error)

+ func (c *Client) SetupOrgHierarchy(ctx context.Context, storeID string, req OrgHierarchyRequest, ...) (*ZanzibarMessageResponse, error)

+ func (c *Client) SetupTeamMembership(ctx context.Context, storeID string, req TeamMembershipRequest, ...) (*ZanzibarMessageResponse, error)

+ func (c *Client) SigningKey(ctx context.Context, kid string) (JWK, error)

+ func (c *Client) Status(ctx context.Context) (*ServiceStatusResponse, error)

+ func (c *Client) SubmitReport(ctx context.Context, req LeakReportSubmission) (*LeakReportSubmissionResponse, error)

+ func (c *Client) SuperAdminActiveGrants(ctx context.Context, callerToken string) (*SuperAdminActiveGrantsResponse, error)

+ func (c *Client) SuperAdminApprove(ctx context.Context, req ApprovalRequestModel, callerToken string) (*MessageResponse, error)

+ func (c *Client) SuperAdminAuditLog(ctx context.Context, callerToken string) (*MessageResponse, error)

+ func (c *Client) SuperAdminCleanupExpired(ctx context.Context, callerToken string) (*SuperAdminCleanupResponse, error)

+ func (c *Client) SuperAdminExtend(ctx context.Context, req SuperAdminExtendRequestModel, callerToken string) (*SuperAdminExtendResponse, error)

+ func (c *Client) SuperAdminGrant(ctx context.Context, req SuperAdminGrantRequestModel, callerToken string) (*SuperAdminGrantResponse, error)

+ func (c *Client) SuperAdminRevoke(ctx context.Context, req SuperAdminRevokeRequestModel, callerToken string) (*SuperAdminRevokeResponse, error)

+ func (c *Client) SupportedProviderTypes(ctx context.Context) (map[string]any, error)

+ func (c *Client) SwitchOrganization(ctx context.Context, token, orgID string) (*TokenSet, error)

+ func (c *Client) TestEventSubscription(ctx context.Context, subscriptionID, token string) (*EventSubscriptionTestResponse, error)

+ func (c *Client) TestProvider(ctx context.Context, req ProviderTestRequest, callerToken string) (*ProviderTestResponse, error)

+ func (c *Client) ToggleEventSubscription(ctx context.Context, subscriptionID, token string) (*EventSubscription, error)

+ func (c *Client) UpdateAPIKey(ctx context.Context, keyID string, req APIKeyUpdate, callerToken string) (*MessageResponse, error)

+ func (c *Client) UpdateClientRegistration(ctx context.Context, clientID string, req ClientRegistration) (*ClientRegistrationResponse, error)

+ func (c *Client) UpdateEventSubscription(ctx context.Context, subscriptionID string, req EventSubscriptionUpdate, ...) (*EventSubscription, error)

+ func (c *Client) UpdateJITConfig(ctx context.Context, config map[string]any, callerToken string) (*MessageResponse, error)

+ func (c *Client) UpdateLoginConfig(ctx context.Context, orgID string, req LoginConfigUpdate, callerToken string) (*LoginConfigResponse, error)

+ func (c *Client) UpdateMyProfile(ctx context.Context, token string, upd UserUpdate) (*User, error)

+ func (c *Client) UpdateNetworkPolicy(ctx context.Context, policyID string, req UpdateNetworkPolicyRequest, ...) (*NetworkPolicyStatusResponse, error)

+ func (c *Client) UpdateOrgEmailConfig(ctx context.Context, orgID string, req OrgEmailConfigUpdate, ...) (*OrgEmailConfigResponse, error)

+ func (c *Client) UpdateOrgEmailTemplate(ctx context.Context, orgID, templateType string, req OrgEmailTemplateUpdate, ...) (*OrgEmailTemplateResponse, error)

+ func (c *Client) UpdateOrgUserRole(ctx context.Context, orgID, userID string, req OrgRoleUpdate, ...) (*RoleUpdateResponse, error)

+ func (c *Client) UpdateOrganization(ctx context.Context, orgID string, req OrganizationUpdate, callerToken string) (*MessageResponse, error)

+ func (c *Client) UpdatePasswordAge(ctx context.Context, req PasswordAgeUpdate, callerToken string) (*PasswordAgeUpdateResponse, error)

+ func (c *Client) UpdateProvider(ctx context.Context, providerID string, req ProviderConfigUpdate, ...) (*MessageResponse, error)

+ func (c *Client) UpdateProviderStatus(ctx context.Context, req ProviderStatusUpdateRequest, callerToken string) (*ProviderStatusUpdateResponse, error)

+ func (c *Client) UpdateSAMLAttributeMappings(ctx context.Context, req SAMLAttributeMappingUpdate, callerToken string) (*EnterpriseMessageResponse, error)

+ func (c *Client) UpdateSAMLSP(ctx context.Context, spID string, req SAMLServiceProviderConfig, ...) (*SAMLSPUpdateResponse, error)

+ func (c *Client) UpdateSSOConfig(ctx context.Context, config map[string]any, callerToken string) (*SSOConfigUpdateResponse, error)

+ func (c *Client) UpdateSSODomain(ctx context.Context, domain string, req SSODomainConfigRequest, ...) (*SSODomainConfigResponse, error)

+ func (c *Client) UpdateTeam(ctx context.Context, teamID string, req TeamUpdate, callerToken string) (*MessageResponse, error)

+ func (c *Client) UpdateTeamMemberRole(ctx context.Context, teamID, userID string, req TeamMemberRoleUpdate, ...) (*MessageResponse, error)

+ func (c *Client) UpdateUser(ctx context.Context, userID string, upd UserUpdate, callerToken string) (*MessageResponse, error)

+ func (c *Client) UpdateWebAuthnCredential(ctx context.Context, token, credentialID string, req WebAuthnCredentialUpdate) (*EnterpriseMessageResponse, error)

+ func (c *Client) ValidateAPIKey(ctx context.Context, req ValidateAPIKeyRequest) (*APIKeyValidation, error)

+ func (c *Client) ValidatePasswordResetToken(ctx context.Context, token string) (*PasswordResetValidateResponse, error)

+ func (c *Client) ValidatePermissions(ctx context.Context, perms []string) (*PermissionValidationResponse, error)

+ func (c *Client) ValidateToken(ctx context.Context, token string) (*Actor, error)

+ func (c *Client) ValidateTokenWith(ctx context.Context, req TokenValidationRequest) (*Actor, error)

+ func (c *Client) VerifyMagicLink(ctx context.Context, form url.Values) (*PasswordlessAuthResponse, error)

+ func (c *Client) VerifyRecoveryCode(ctx context.Context, form url.Values) (*PasswordlessAuthResponse, error)

+ func (c *Client) VerifyUserEmail(ctx context.Context, userID, callerToken string) (*MessageResponse, error)

+ func (c *Client) VisualizeHierarchy(ctx context.Context, storeID string, req VisualizationRequest, ...) (*HierarchyVisualizationResponse, error)

+ func (c *Client) VisualizePermissions(ctx context.Context, storeID, userID, callerToken string) (*PermissionsVisualizationResponse, error)

+ func (c *Client) WatchStatus(ctx context.Context, storeID, callerToken string) (*WatchStatusResponse, error)

+ func (c *Client) WebAuthnAuthenticateFinish(ctx context.Context, assertion map[string]any) (*PasswordlessAuthResponse, error)

+ func (c *Client) WebAuthnAuthenticateStart(ctx context.Context, req map[string]any) (map[string]any, error)

+ func (c *Client) WebAuthnConfig(ctx context.Context) (*WebAuthnConfigResponse, error)

+ func (c *Client) WebAuthnRegisterFinish(ctx context.Context, token string, credential map[string]any) (*WebAuthnRegistrationResult, error)

+ func (c *Client) WebAuthnRegisterStart(ctx context.Context, token string, req map[string]any) (map[string]any, error)

+ func (c *Client) WriteAndDeleteRelationships(ctx context.Context, storeID string, req TransactRelationshipsRequest, ...) (*WriteOperationResponse, error)

+ func (c *Client) WriteAuthorizationModel(ctx context.Context, storeID string, req WriteAuthorizationModelRequest, ...) (*WriteAuthorizationModelResponse, error)

+ func (c *Client) WriteRelationships(ctx context.Context, storeID string, req RelationshipRequest, token string) (*WriteOperationResponse, error)

+ func (c *Client) ZanzibarCheck(ctx context.Context, storeID string, req CheckPermissionRequest, ...) (*CheckPermissionResponse, error)

+ func (c *Client) ZanzibarCheckBulk(ctx context.Context, storeID string, req BulkCheckRequest, callerToken string) (BulkCheckResults, error)

+ func (c *Client) ZanzibarCheckWildcard(ctx context.Context, storeID string, q url.Values, callerToken string) (*WildcardCheckResponse, error)

+ func (c *Client) ZanzibarExpand(ctx context.Context, storeID string, req ExpandRequest, callerToken string) (*ExpandResponse, error)

+ func (c *Client) ZanzibarGrant(ctx context.Context, storeID string, req PermissionGrantRequest, ...) (*WriteOperationResponse, error)

+ func (c *Client) ZanzibarListObjects(ctx context.Context, storeID string, req ListObjectsRequest, ...) (*ListObjectsResponse, error)

+ func (c *Client) ZanzibarListUsers(ctx context.Context, storeID string, req ListUsersRequest, callerToken string) (*ListUsersResponse, error)

+ func (c *Client) ZanzibarRevoke(ctx context.Context, storeID string, req PermissionGrantRequest, ...) (*WriteOperationResponse, error)

+ type ClientRegistration struct

+ ClientName string

+ Contacts []string

+ GrantTypes []string

+ LogoURI string

+ PolicyURI string

+ RedirectURIs []string

+ ResponseTypes []string

+ Scope string

+ TokenEndpointAuthMethod string

+ type ClientRegistrationResponse struct

+ ClientID string

+ ClientIDIssuedAt int64

+ ClientName string

+ ClientSecret string

+ ClientSecretExpiresAt int64

+ GrantTypes []string

+ RedirectURIs []string

+ RegistrationAccessToken string

+ RegistrationClientURI string

+ Scope string

+ type CreateNetworkPolicyRequest struct

+ CIDRs []string

+ Description string

+ Enabled bool

+ Mode string

+ Name string

+ Priority int

+ type DelegateTokenRequest struct

+ OrgID string

+ Permissions []string

+ TargetUserID string

+ type DelegationCheckResponse struct

+ CanDelegate bool

+ Permissions []string

+ Reason string

+ type DelegationEntry struct

+ ActorID string

+ CreatedAt string

+ ExpiresAt string

+ ID string

+ Permissions []string

+ TargetUserID string

+ type DelegationGrant struct

+ ActorID string

+ ExpiresAt string

+ Permissions []string

+ Reason string

+ TargetUserID string

+ type DelegationResponse struct

+ ActorID string

+ ExpiresAt string

+ ID string

+ Message string

+ Permissions []string

+ TargetUserID string

+ type Device struct

+ ID string

+ LastSeenAt string

+ Name string

+ Trusted bool

+ Type string

+ type DeviceListResponse struct

+ Devices []Device

+ type DomainTokenResponse struct

+ Domain string

+ ExpiresIn int

+ Token string

+ type ElevatePrivilegesRequest struct

+ DurationSeconds int

+ Permissions []string

+ Reason string

+ UserID string

+ type ElevatePrivilegesResponse struct

+ ExpiresAt string

+ Granted []string

+ Message string

+ UserID string

+ type EmailConfigDeleteResponse struct

+ Message string

+ Success bool

+ type EmailHistoryEntry struct

+ Error string

+ ID string

+ Provider string

+ SentAt string

+ Status string

+ Subject string

+ Template string

+ To string

+ type EmailHistoryResponse struct

+ Emails []EmailHistoryEntry

+ Total int

+ type EmailStatsResponse struct

+ Bounced int

+ Delivered int

+ Failed int

+ Sent int

+ Stats map[string]any

+ type EmailTemplateDeleteResponse struct

+ Message string

+ Success bool

+ type EmergencyOverrideCreateResponse struct

+ ExpiresAt string

+ Message string

+ OverrideID string

+ type EmergencyOverrideRequest struct

+ IP string

+ Reason string

+ TTLSeconds int

+ type EmergencyRevokeRequest struct

+ AllKeys bool

+ KeyIDs []string

+ OrgID string

+ Reason string

+ type EmergencyRevokeResponse struct

+ Message string

+ RevokedCount int

+ type EnterpriseMessageResponse struct

+ Detail string

+ Message string

+ Success bool

+ type EventSubscription struct

+ Active bool

+ CreatedAt string

+ Description string

+ EventTypes []string

+ Headers map[string]string

+ ID string

+ URL string

+ UpdatedAt string

+ type EventSubscriptionCreate struct

+ Active bool

+ Description string

+ EventTypes []string

+ Headers map[string]string

+ Secret string

+ URL string

+ type EventSubscriptionListResponse struct

+ Subscriptions []EventSubscription

+ Total int

+ type EventSubscriptionStatsResponse struct

+ Delivered int

+ Failed int

+ Pending int

+ Stats map[string]any

+ type EventSubscriptionTestResponse struct

+ Message string

+ ResponseBody string

+ StatusCode int

+ Success bool

+ type EventSubscriptionUpdate struct

+ Active *bool

+ Description *string

+ EventTypes *[]string

+ Headers *map[string]string

+ Secret *string

+ URL *string

+ type EventTypeInfo struct

+ Category string

+ Description string

+ Type string

+ type EventTypesResponse struct

+ EventTypes []EventTypeInfo

+ type ExpandRequest struct

+ MaxDepth int

+ Object string

+ OrgID string

+ Permission string

+ type ExpandResponse struct

+ Object string

+ Permission string

+ Subjects []string

+ UsersetTree map[string]any

+ type FederationStatsResponse struct

+ ActiveSessions int

+ Domains int

+ Providers int

+ Stats map[string]any

+ type ForcePasswordResetRequest struct

+ AllUsers bool

+ OrgID string

+ UserIDs []string

+ type ForcePasswordResetResponse struct

+ AffectedCount int

+ Message string

+ type ForwardAuthDecision struct

+ Allowed bool

+ Body string

+ StatusCode int

+ type GlobalEmailConfigResponse struct

+ Configured bool

+ FromAddress string

+ FromName string

+ Provider string

+ Settings map[string]any

+ type HealthCheckResponse struct

+ Components map[string]string

+ Status string

+ Version string

+ type HierarchyVisualizationResponse struct

+ Children []any

+ ID string

+ Permissions []any

+ Teams []map[string]any

+ Type string

+ Users []map[string]any

+ type HostedLoginMessageResponse struct

+ Message string

+ Success bool

+ type Introspection struct

+ Active bool

+ Audience any

+ ClientID string

+ Exp int64

+ Iat int64

+ Issuer string

+ JTI string

+ OrgID string

+ Scope string

+ Subject string

+ TokenType string

+ Username string

+ type InvitationListItem struct

+ CreatedAt string

+ Email string

+ ExpiresAt string

+ ID string

+ InvitedBy string

+ Role string

+ Status string

+ type JITConfigResponse struct

+ AllowedDomains []string

+ Config map[string]any

+ DefaultRole string

+ Enabled bool

+ type JWK struct

+ Alg string

+ Crv string

+ E string

+ Kid string

+ Kty string

+ N string

+ Use string

+ X string

+ X5c []string

+ X5t string

+ Y string

+ type JWKS struct

+ Keys []JWK

+ func (s JWKS) Key(kid string) (JWK, bool)

+ type JwksHealthResponse struct

+ ActiveKeys int

+ Healthy bool

+ Message string

+ type JwksMetricsResponse struct

+ ActiveKeys int

+ LastRotation string

+ Metrics map[string]any

+ NextRotation string

+ RevokedKeys int

+ type JwksRecoverResponse struct

+ Message string

+ Recovered bool

+ type KeyActivateResponse struct

+ Active bool

+ Kid string

+ Message string

+ type KeyCleanupRequest struct

+ DryRun bool

+ OlderThanDays int

+ type KeyCleanupResponse struct

+ Message string

+ RemovedCount int

+ RemovedKids []string

+ type KeyGenerateResponse struct

+ Kid string

+ Message string

+ type KeyGenerationRequest struct

+ Activate bool

+ Algorithm string

+ type KeyRevocationRequest struct

+ Reason string

+ type KeyRevocationResponse struct

+ Kid string

+ Message string

+ Revoked bool

+ type KeyRotationRequest struct

+ Algorithm string

+ Force bool

+ type KeyRotationResponse struct

+ Message string

+ NewKid string

+ type LeakReport struct

+ CreatedAt string

+ Description string

+ ID string

+ Status string

+ Type string

+ type LeakReportActionResponse struct

+ Message string

+ ReportID string

+ Status string

+ type LeakReportListResponse struct

+ Reports []LeakReport

+ Total int

+ type LeakReportSubmission struct

+ Description string

+ Evidence string

+ Metadata map[string]any

+ ReporterEmail string

+ Type string

+ URL string

+ type LeakReportSubmissionResponse struct

+ Message string

+ ReportID string

+ Status string

+ type ListAuthorizationModelsResponse struct

+ ContinuationToken string

+ Models []AuthorizationModelResponse

+ type ListObjectsRequest struct

+ ConsistencyToken string

+ MaxResults int

+ ObjectType string

+ OrgID string

+ Permission string

+ Subject string

+ type ListObjectsResponse struct

+ ContinuationToken string

+ ObjectType string

+ Objects []string

+ Permission string

+ ResultCount int

+ Subject string

+ type ListUsersRequest struct

+ ConsistencyToken string

+ ExpandGroups *bool

+ MaxResults int

+ Object string

+ OrgID string

+ Permission string

+ type ListUsersResponse struct

+ ContinuationToken string

+ Object string

+ Permission string

+ ResultCount int

+ Users []string

+ type LoginConfig struct

+ AllowPassword bool

+ AllowPasswordless bool

+ AllowSignup bool

+ BackgroundColor string

+ CustomCSS string

+ LogoURL string

+ OrgID string

+ PrimaryColor string

+ PrivacyURL string

+ Settings map[string]any

+ TermsURL string

+ type LoginConfigResponse struct

+ Config LoginConfig

+ type LoginConfigUpdate struct

+ AllowPassword *bool

+ AllowPasswordless *bool

+ AllowSignup *bool

+ BackgroundColor *string

+ CustomCSS *string

+ LogoURL *string

+ PrimaryColor *string

+ PrivacyURL *string

+ Settings *map[string]any

+ TermsURL *string

+ type LoginRequest struct

+ Email string

+ OrgID string

+ Password string

+ ProviderType string

+ type LogoutPropagationResponse struct

+ LoggedOutOf []string

+ Message string

+ Success bool

+ type LogoutResult struct

+ Message string

+ Success bool

+ type MagicLinkAnalyticsResponse struct

+ Expired int

+ Sent int

+ Stats map[string]any

+ Verified int

+ type MagicLinkConfigResponse struct

+ Enabled bool

+ MaxActive int

+ TTLSeconds int

+ type MagicLinkSendResponse struct

+ ExpiresIn int

+ Message string

+ Success bool

+ type MeshConsumerRegistration struct

+ Enabled bool

+ OrgSlug string

+ RegisterURL string

+ Tiers []MeshProviderTier

+ type MeshProvider struct

+ ConnectPrompt string

+ ConsumerRegistration *MeshConsumerRegistration

+ DisplayName string

+ DocsURL string

+ LLMsTxtURL string

+ QuickstartURL string

+ SchemaURL string

+ ServiceID string

+ SupportURL string

+ UpdatedAt string

+ type MeshProviderPublishRequest struct

+ ConnectPrompt string

+ DisplayName string

+ DocsURL string

+ LLMsTxtURL string

+ OrgSlug string

+ PrivilegedPerms []string

+ PublicMesh bool

+ QuickstartURL string

+ RegisterURL string

+ SchemaURL string

+ ServiceID string

+ SignupEnabled bool

+ SupportURL string

+ Tiers []MeshProviderTierInput

+ type MeshProviderPublishResponse struct

+ DocsURLWarning bool

+ Listed bool

+ PrivilegeViolations []string

+ PrivilegeWarning bool

+ Reason string

+ ServiceID string

+ Valid bool

+ type MeshProviderTier struct

+ Default bool

+ Name string

+ PermissionCount int

+ Permissions []string

+ PrivilegedAck bool

+ type MeshProviderTierInput struct

+ Default bool

+ Name string

+ Permissions []string

+ PrivilegedAck bool

+ type MeshProvidersListResponse struct

+ Providers []MeshProvider

+ type MessageDetailResponse struct

+ Message string

+ Status string

+ Success bool

+ UserID string

+ type MessageResponse struct

+ Message string

+ Success bool

+ type NamespaceDetailResponse struct

+ Metadata map[string]any

+ Name string

+ ParentNamespace string

+ Permissions map[string]any

+ Relations map[string]any

+ Version *int

+ type NamespaceListResponse struct

+ Namespaces []NamespaceSummary

+ type NamespaceRequest struct

+ Metadata map[string]any

+ Name string

+ ParentNamespace string

+ Permissions map[string]any

+ Relations map[string]any

+ type NamespaceSummary struct

+ Name string

+ ParentNamespace string

+ Permissions []string

+ Relations []string

+ Version *int

+ type NetworkOverride struct

+ CreatedAt string

+ ExpiresAt string

+ ID string

+ IP string

+ Reason string

+ type NetworkPolicy struct

+ CIDRs []string

+ CreatedAt string

+ Description string

+ Enabled bool

+ ID string

+ Mode string

+ Name string

+ Priority int

+ type NetworkPolicyCreateResponse struct

+ Message string

+ PolicyID string

+ type NetworkPolicyListResponse struct

+ Policies []NetworkPolicy

+ Total int

+ type NetworkPolicyStatusResponse struct

+ Message string

+ Status string

+ Success bool

+ type NetworkViolation struct

+ IP string

+ Path string

+ PolicyID string

+ Reason string

+ Timestamp string

+ type NextRotationResponse struct

+ NextRotation string

+ type OAuthAuthorize struct

+ AuthorizationURL string

+ CodeVerifier string

+ Provider string

+ State string

+ type OAuthAuthorizeParams struct

+ CodeChallenge string

+ CodeChallengeMethod string

+ LoginHint string

+ OrgID string

+ Provider string

+ RedirectURI string

+ Scope string

+ State string

+ type OAuthCallbackParams struct

+ Code string

+ CodeVerifier string

+ Error string

+ ErrorDescription string

+ Provider string

+ RedirectURI string

+ State string

+ type OAuthProviderAuthorizeResponse struct

+ AuthorizationURL string

+ Provider string

+ State string

+ type OpenIDConfiguration struct

+ AuthorizationEndpoint string

+ CodeChallengeMethodsSupported []string

+ GrantTypesSupported []string

+ IDTokenSigningAlgValuesSupported []string

+ Issuer string

+ JWKSURI string

+ RegistrationEndpoint string

+ ResponseTypesSupported []string

+ ScopesSupported []string

+ SubjectTypesSupported []string

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ UserinfoEndpoint string

+ type Option func(*Client)

+ func WithAPIKey(key string) Option

+ func WithBackoff(base, max time.Duration) Option

+ func WithBaseURL(u string) Option

+ func WithExpectedAudience(aud string) Option

+ func WithHTTPClient(h *http.Client) Option

+ func WithMaxRetries(n int) Option

+ func WithTimeout(d time.Duration) Option

+ func WithUserAgent(ua string) Option

+ type OrgClientSafe struct

+ ClientID string

+ ClientName string

+ CreatedAt string

+ GrantTypes []string

+ RedirectURIs []string

+ type OrgClientSafeResponse struct

+ Clients []OrgClientSafe

+ Total int

+ type OrgEmailConfig struct

+ FromAddress string

+ FromName string

+ Provider string

+ ReplyTo string

+ Settings map[string]any

+ type OrgEmailConfigResponse struct

+ Config OrgEmailConfig

+ type OrgEmailConfigUpdate struct

+ APIKey *string

+ FromAddress *string

+ FromName *string

+ Provider *string

+ ReplyTo *string

+ Settings *map[string]any

+ type OrgEmailTemplate struct

+ Enabled bool

+ HTMLBody string

+ Subject string

+ TextBody string

+ Type string

+ type OrgEmailTemplateResponse struct

+ Template *OrgEmailTemplate

+ Templates []OrgEmailTemplate

+ type OrgEmailTemplateUpdate struct

+ Enabled *bool

+ HTMLBody *string

+ Subject *string

+ TextBody *string

+ type OrgHierarchyNode struct

+ Children []OrgHierarchyNode

+ ID string

+ Name string

+ ParentID string

+ Slug string

+ Type string

+ type OrgHierarchyRequest struct

+ OrgID string

+ ParentOrgID string

+ WorkspaceID string

+ type OrgHierarchyResponse struct

+ Organizations []OrgHierarchyNode

+ Root *OrgHierarchyNode

+ type OrgLoginRequest struct

+ Email string

+ Password string

+ type OrgMember struct

+ Email string

+ JoinedAt string

+ Name string

+ Permissions []string

+ Role string

+ Status string

+ UserID string

+ type OrgPasswordResetRequest struct

+ Email string

+ type OrgProviderInfo struct

+ ID string

+ Name string

+ Priority int

+ Type string

+ type OrgProvidersResponse struct

+ Providers []OrgProviderInfo

+ type OrgRegisterRequest struct

+ Email string

+ FirstName string

+ LastName string

+ Name string

+ Password string

+ type OrgRoleUpdate struct

+ Permissions []string

+ Role string

+ type OrgSession struct

+ CreatedAt string

+ ExpiresAt string

+ ID string

+ IPAddress string

+ LastSeenAt string

+ UserAgent string

+ UserID string

+ type OrgSessionsResponse struct

+ Sessions []OrgSession

+ Total int

+ type OrgUserResponse struct

+ Total int

+ Users []OrgMember

+ type Organization struct

+ BillingType string

+ Domain string

+ ID string

+ Metadata map[string]any

+ Name string

+ ParentID string

+ ServiceAudience string

+ Settings map[string]any

+ Slug string

+ Status string

+ Timezone string

+ type OrganizationCreate struct

+ BillingType string

+ Domain string

+ Metadata map[string]any

+ Name string

+ ParentID string

+ ServiceAudience string

+ Settings map[string]any

+ Slug string

+ Timezone string

+ type OrganizationInvite struct

+ Email string

+ Message string

+ Resend bool

+ Role string

+ TeamIDs []string

+ type OrganizationUpdate struct

+ BillingType *string

+ Domain *string

+ Metadata *map[string]any

+ Name *string

+ Settings *map[string]any

+ Status *string

+ Timezone *string

+ type OverrideListResponse struct

+ Overrides []NetworkOverride

+ type PasswordAgeUpdate struct

+ AgeDays int

+ UserID string

+ type PasswordAgeUpdateResponse struct

+ Message string

+ UserID string

+ type PasswordAuditEventsResponse struct

+ Events []map[string]any

+ Total int

+ type PasswordComplianceResponse struct

+ Compliant int

+ Details map[string]any

+ NonCompliant int

+ type PasswordPolicyGetResponse struct

+ OrgID string

+ Policy *PasswordPolicyRequest

+ type PasswordPolicyRequest struct

+ HistoryCount int

+ MaxAgeDays int

+ MinLength int

+ OrgID string

+ RequireLowercase bool

+ RequireNumbers bool

+ RequireSymbols bool

+ RequireUppercase bool

+ type PasswordPolicySetResponse struct

+ Message string

+ Policy *PasswordPolicyRequest

+ type PasswordReset struct

+ Email string

+ OrgID string

+ type PasswordResetConfirm struct

+ NewPassword string

+ Token string

+ type PasswordResetConfirmResponse struct

+ Message string

+ Success bool

+ type PasswordResetResponse struct

+ Message string

+ Success bool

+ type PasswordResetValidateResponse struct

+ Email string

+ Message string

+ Valid bool

+ type PasswordlessAuthResponse struct

+ AccessToken string

+ ExpiresIn int

+ RefreshToken string

+ TokenType string

+ User *TokenUserInfo

+ type PermissionCheckRequest struct

+ OrgID string

+ Permission string

+ ResourceID string

+ ResourceType string

+ UserID string

+ type PermissionDecision struct

+ Allowed bool

+ EffectivePermissions []string

+ Reason string

+ Source string

+ type PermissionGrantRequest struct

+ Conditions map[string]any

+ ExpiresAt *time.Time

+ Permission string

+ Resource string

+ Subject string

+ type PermissionValidationRequest struct

+ Permissions []string

+ type PermissionValidationResponse struct

+ Invalid []string

+ Results map[string]bool

+ Valid bool

+ type PermissionsVisualizationResponse struct

+ DirectPermissions []map[string]any

+ InheritedFrom []map[string]any

+ UserID string

+ type PolicyEvaluationResult struct

+ Allowed bool

+ IP string

+ MatchedID string

+ Reason string

+ type Provider struct

+ Config map[string]any

+ Domain string

+ Enabled bool

+ ID string

+ IssuerURL string

+ Name string

+ Priority int

+ Type string

+ type ProviderConfigCreate struct

+ ClientID string

+ ClientSecret string

+ Config map[string]any

+ Domain string

+ Enabled bool

+ IssuerURL string

+ Name string

+ Priority int

+ Type string

+ type ProviderConfigUpdate struct

+ ClientID *string

+ ClientSecret *string

+ Config *map[string]any

+ Domain *string

+ Enabled *bool

+ IssuerURL *string

+ Name *string

+ Priority *int

+ type ProviderStatusUpdateRequest struct

+ Enabled bool

+ ProviderID string

+ Reason string

+ type ProviderStatusUpdateResponse struct

+ Enabled bool

+ Message string

+ ProviderID string

+ type ProviderTestRequest struct

+ Config map[string]any

+ ProviderID string

+ Type string

+ type ProviderTestResponse struct

+ Details map[string]any

+ Message string

+ Success bool

+ type PublicLoginConfig struct

+ AllowPassword bool

+ AllowPasswordless bool

+ AllowSignup bool

+ BackgroundColor string

+ LogoURL string

+ OrgName string

+ OrgSlug string

+ PrimaryColor string

+ Providers []OrgProviderInfo

+ type PushedAuthorizationResponse struct

+ ExpiresIn int

+ RequestURI string

+ type QuotaCheckResponse struct

+ Allowed bool

+ Limit int64

+ Remaining int64

+ ResourceType string

+ Used int64

+ type QuotaTier struct

+ Limits map[string]int64

+ Name string

+ Price string

+ type QuotaTiersResponse struct

+ Tiers []QuotaTier

+ type QuotaUsageItem struct

+ Limit int64

+ Percent float64

+ Remaining int64

+ ResourceType string

+ Used int64

+ type QuotaUsageResponse struct

+ Tier string

+ Usage []QuotaUsageItem

+ type RecentAlertsResponse struct

+ Alerts []AlertEntry

+ type RecoveryCodesResponse struct

+ Codes []string

+ Generated int

+ type RefreshRequest struct

+ RefreshToken string

+ type RegisterRequest struct

+ Email string

+ Name string

+ OrgID string

+ Password string

+ ProviderType string

+ type RegisteredService struct

+ Description string

+ Permissions []string

+ Service string

+ type RegisteredServicesResponse struct

+ Services []RegisteredService

+ Total int

+ type RegistryStatsResponse struct

+ TotalPermissions int

+ TotalServices int

+ type RelationshipEntry struct

+ Context map[string]any

+ CreatedAt string

+ ExpiresAt string

+ Relation string

+ Subject string

+ type RelationshipRequest struct

+ Context map[string]any

+ ExpiresAt *time.Time

+ Object string

+ Relation string

+ Subject string

+ type RelationshipsPage struct

+ ContinuationToken string

+ Object string

+ Relationships []RelationshipEntry

+ type RelationshipsResponse struct

+ Object string

+ Relationships []RelationshipEntry

+ type Resource struct

+ ID string

+ Type string

+ func (r Resource) IsZero() bool

+ type RevocationAuditEntry struct

+ Actor string

+ ID string

+ Reason string

+ Subject string

+ Timestamp string

+ Type string

+ type RevokeResult struct

+ Message string

+ Revoked bool

+ type RevokedKeysListResponse struct

+ RevokedKeys []map[string]any

+ Total int

+ type RoleDefinition struct

+ Description string

+ Name string

+ Permissions []string

+ type RoleUpdateResponse struct

+ Message string

+ Role string

+ UserID string

+ type RolesResponse struct

+ Roles map[string]RoleDefinition

+ type RotationStatusResponse struct

+ CurrentKid string

+ LastRotated string

+ Rotating bool

+ type SAMLAnalyticsResponse struct

+ ActiveSessions int

+ Stats map[string]any

+ TotalLogins int

+ type SAMLAssertionResult struct

+ AccessToken string

+ Attributes map[string]any

+ NameID string

+ RefreshToken string

+ RelayState string

+ SessionIndex string

+ type SAMLAttributeMappingResponse struct

+ Mappings map[string]string

+ type SAMLAttributeMappingUpdate struct

+ Mappings map[string]string

+ type SAMLCertificate struct

+ Active bool

+ Fingerprint string

+ NotAfter string

+ NotBefore string

+ Use string

+ type SAMLCertificateGenerateResponse struct

+ Certificate string

+ Fingerprint string

+ Message string

+ type SAMLCertificateStatusResponse struct

+ Certificates []SAMLCertificate

+ type SAMLLogoutResult struct

+ Message string

+ RedirectURL string

+ Success bool

+ type SAMLSPDetailResponse struct

+ ServiceProvider SAMLServiceProvider

+ type SAMLSPListResponse struct

+ ServiceProviders []SAMLServiceProvider

+ Total int

+ type SAMLSPRegistrationResponse struct

+ EntityID string

+ Message string

+ MetadataURL string

+ SPID string

+ type SAMLSPUpdateResponse struct

+ Message string

+ SPID string

+ Success bool

+ type SAMLServiceProvider struct

+ ACSURL string

+ CreatedAt string

+ EntityID string

+ Name string

+ NameIDFormat string

+ SLOURL string

+ SPID string

+ Status string

+ type SAMLServiceProviderConfig struct

+ ACSURL string

+ AllowedRedirectURLs []string

+ AttributeMapping map[string]string

+ EntityID string

+ MetadataURL string

+ MetadataXML string

+ Name string

+ NameIDFormat string

+ SLOURL string

+ SignAuthnRequests bool

+ WantAssertionsSigned bool

+ type SAMLSession struct

+ CreatedAt string

+ NameID string

+ SPEntityID string

+ SessionIndex string

+ type SAMLSessionListResponse struct

+ Sessions []SAMLSession

+ type SSOConfigResponse struct

+ Config map[string]any

+ Enabled bool

+ type SSOConfigUpdateResponse struct

+ Config map[string]any

+ Message string

+ type SSODomainConfigRequest struct

+ Config map[string]any

+ Enabled bool

+ ProviderID string

+ type SSODomainConfigResponse struct

+ Config map[string]any

+ Domain string

+ Enabled bool

+ ProviderID string

+ type SSODomainListResponse struct

+ Domains []SSODomainConfigResponse

+ Total int

+ type SSOPropagateResponse struct

+ Message string

+ PropagatedTo []string

+ Success bool

+ type SSOSession struct

+ CreatedAt string

+ Domain string

+ ExpiresAt string

+ ID string

+ Provider string

+ UserID string

+ type SSOSessionCreateResponse struct

+ Session SSOSession

+ SessionID string

+ type SSOSessionDetailResponse struct

+ Session SSOSession

+ type SSOSessionListResponse struct

+ Sessions []SSOSession

+ Total int

+ type SelfDeleteRequest struct

+ ConfirmEmail string

+ type SelfDeleteResponse struct

+ Message string

+ Success bool

+ UserID string

+ type ServiceAccountCreate struct

+ Description string

+ Name string

+ OrgID string

+ Permissions []string

+ type ServiceAccountResponse struct

+ APIKey string

+ Message string

+ Name string

+ Permissions []string

+ UserID string

+ type ServiceDiscoveryResponse struct

+ Endpoints map[string]string

+ Links map[string]string

+ Service string

+ Version string

+ type ServicePermissionRegister struct

+ Description string

+ Permissions []string

+ Service string

+ type ServicePermissionResponse struct

+ Message string

+ Permissions []string

+ Service string

+ type ServiceStatusResponse struct

+ Details map[string]any

+ Status string

+ Uptime string

+ type SessionRevokeResponse struct

+ Message string

+ RevokedCount int

+ type SuperAdminActiveGrantsResponse struct

+ Grants []map[string]any

+ Total int

+ type SuperAdminCleanupResponse struct

+ CleanedCount int

+ Message string

+ type SuperAdminExtendRequestModel struct

+ AdditionalSeconds int

+ GrantID string

+ Reason string

+ type SuperAdminExtendResponse struct

+ ExpiresAt string

+ GrantID string

+ Message string

+ type SuperAdminGrantRequestModel struct

+ DurationSeconds int

+ Permissions []string

+ Reason string

+ RequiresApproval bool

+ UserID string

+ type SuperAdminGrantResponse struct

+ ExpiresAt string

+ GrantID string

+ Message string

+ Status string

+ UserID string

+ type SuperAdminRevokeRequestModel struct

+ GrantID string

+ Reason string

+ UserID string

+ type SuperAdminRevokeResponse struct

+ GrantID string

+ Message string

+ Revoked bool

+ type SwitchOrganizationRequest struct

+ OrgID string

+ type Team struct

+ CreatedAt string

+ Description string

+ ID string

+ MemberCount int

+ Metadata map[string]any

+ Name string

+ OrgID string

+ ParentID string

+ Slug string

+ type TeamCreate struct

+ Description string

+ Metadata map[string]any

+ Name string

+ ParentID string

+ Slug string

+ type TeamMember struct

+ AddedAt string

+ Email string

+ Name string

+ Role string

+ UserID string

+ type TeamMemberAdd struct

+ Role string

+ UserID string

+ type TeamMemberRoleUpdate struct

+ Role string

+ type TeamMembershipRequest struct

+ Role string

+ TeamID string

+ UserID string

+ type TeamPermissionsResponse struct

+ Permissions []string

+ TeamID string

+ type TeamUpdate struct

+ Description *string

+ Metadata *map[string]any

+ Name *string

+ type TempAllowlistCreateResponse struct

+ EntryID string

+ ExpiresAt string

+ Message string

+ type TempAllowlistEntry struct

+ CreatedAt string

+ ExpiresAt string

+ ID string

+ IP string

+ Reason string

+ type TempAllowlistListResponse struct

+ Entries []TempAllowlistEntry

+ type TempAllowlistRequest struct

+ IP string

+ Reason string

+ TTLSeconds int

+ type TemplatePreviewResponse struct

+ HTMLBody string

+ Subject string

+ TextBody string

+ type TemplateTypeInfo struct

+ Description string

+ Type string

+ Variables []string

+ type TemplateTypesResponse struct

+ TemplateTypes []TemplateTypeInfo

+ type TestEmailRequest struct

+ Template string

+ To string

+ type TestEmailSentResponse struct

+ EmailID string

+ Message string

+ Success bool

+ type TokenResponse struct

+ AccessToken string

+ ExpiresIn int

+ IDToken string

+ RefreshToken string

+ Scope string

+ TokenType string

+ type TokenSet struct

+ AccessToken string

+ Audience []string

+ ExpiresIn int

+ RefreshToken string

+ TokenType string

+ User TokenUserInfo

+ type TokenSource interface

+ Token func(ctx context.Context) (string, error)

+ type TokenUserInfo struct

+ Email string

+ ID string

+ IsDelegated bool

+ Name string

+ OrgID string

+ type TokenValidationRequest struct

+ ExpectedAudience string

+ IncludePermissions bool

+ RequiredPermissions []string

+ ResourceID string

+ ResourceType string

+ Token string

+ type TransactRelationshipsRequest struct

+ Deletes []RelationshipRequest

+ Writes []RelationshipRequest

+ type UpdateNetworkPolicyRequest struct

+ CIDRs *[]string

+ Description *string

+ Enabled *bool

+ Mode *string

+ Name *string

+ Priority *int

+ type User struct

+ ActiveOrgID string

+ AvatarURL string

+ Email string

+ EmailVerified bool

+ ID string

+ Language string

+ Metadata map[string]any

+ Name string

+ OrgID string

+ Organizations []UserOrganizationInfo

+ Phone string

+ ProviderType string

+ Status string

+ Timezone string

+ type UserOrganizationInfo struct

+ ID string

+ IsDefault bool

+ IsPersonal bool

+ JoinedAt string

+ Name string

+ ParentID string

+ Permissions []string

+ Role string

+ Type string

+ WorkspaceType string

+ type UserPermissions struct

+ OrgID string

+ Permissions []string

+ UserID string

+ type UserUpdate struct

+ AvatarURL *string

+ Language *string

+ Metadata *map[string]any

+ Name *string

+ Phone *string

+ Timezone *string

+ type ValidPermissionsResponse struct

+ Permissions []string

+ Total int

+ type ValidateAPIKeyRequest struct

+ APIKey string

+ ExpectedAudience string

+ RequiredPermissions []string

+ type Validator interface

+ ValidateToken func(ctx context.Context, token string) (*Actor, error)

+ type VerifyEmailConfirmRequest struct

+ Token string

+ type VerifyEmailSendRequest struct

+ Email string

+ OrgID string

+ type ViolationListResponse struct

+ Total int

+ Violations []NetworkViolation

+ type VisualizationRequest struct

+ IncludePermissions bool

+ IncludeTeams bool

+ IncludeUsers bool

+ MaxDepth int

+ OrgID string

+ type WatchStatusResponse struct

+ Available bool

+ Channel string

+ Message string

+ type WebAuthnConfigResponse struct

+ AttestationFormat string

+ Enabled bool

+ Origin string

+ Origins []string

+ RPID string

+ RPName string

+ UserVerification string

+ type WebAuthnCredential struct

+ BackedUp bool

+ CreatedAt string

+ DeviceType string

+ ID string

+ LastUsedAt string

+ Name string

+ type WebAuthnCredentialListResponse struct

+ Credentials []WebAuthnCredential

+ type WebAuthnCredentialUpdate struct

+ Name string

+ type WebAuthnRegistrationResult struct

+ CredentialID string

+ Message string

+ Success bool

+ type WildcardCheckResponse struct

+ Allowed bool

+ type WriteAuthorizationModelRequest struct

+ Model AuthorizationModel

+ type WriteAuthorizationModelResponse struct

+ AuthorizationModelID string

+ Message string

+ type WriteOperationResponse struct

+ ConsistencyToken string

+ Message string

+ Success bool

+ type ZanzibarMessageResponse struct

+ Message string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL