Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

jwx

package

Go to main page

Versions in this module

v0

v0.6.0

Jan 4, 2021

v0.5.0

Jan 4, 2021

v0.4.0

Jan 2, 2021

v0.3.0

Dec 31, 2020

v0.2.0

Dec 29, 2020

v0.1.0

Dec 22, 2020

Changes in this version

+ const A128CBC_HS256

+ const A128GCM

+ const A128GCMKW

+ const A128KW

+ const A192CBC_HS384

+ const A192GCM

+ const A192GCMKW

+ const A192KW

+ const A256CBC_HS512

+ const A256GCM

+ const A256GCMKW

+ const A256KW

+ const ClaimAud

+ const ClaimExp

+ const ClaimIat

+ const ClaimIss

+ const ClaimJti

+ const ClaimNbf

+ const ClaimSub

+ const DIRECT

+ const ECDH_ES

+ const ECDH_ES_A128KW

+ const ECDH_ES_A192KW

+ const ECDH_ES_A256KW

+ const ED25519

+ const ES256

+ const ES384

+ const ES512

+ const HS256

+ const HS384

+ const HS512

+ const PBES2_HS256_A128KW

+ const PBES2_HS384_A192KW

+ const PBES2_HS512_A256KW

+ const PS256

+ const PS384

+ const PS512

+ const RS256

+ const RS384

+ const RS512

+ const RSA1_5

+ const RSA_OAEP

+ const RSA_OAEP_256

+ const UseEnc

+ const UseSig

+ var EncryptionKeyByAlg = func(encryptAlg, encodeAlg string, jwks *KeySet) KeySource

+ var ErrAbsentJti = errors.New("jti claim is absent")

+ var ErrExpExpired = errors.New("exp claim is invalid because token has expired")

+ var ErrIatInFuture = errors.New("iat claim is invalid because token is issued in future")

+ var ErrInvalidAud = errors.New("aud claim is invalid")

+ var ErrInvalidEncryptionAlg = errors.New("encryption algorithm is invalid")

+ var ErrInvalidEncryptionEnc = errors.New("encryption encoding is invalid")

+ var ErrInvalidIss = errors.New("iss claim is invalid")

+ var ErrInvalidJwxToken = errors.New("invalid jwt/jwe token")

+ var ErrInvalidSignatureAlg = errors.New("signature algorithm is invalid")

+ var ErrInvalidSub = errors.New("sub claim is invalid")

+ var ErrNbfTooSoon = errors.New("nbf claim is invalid because token is used too soon")

+ var ErrNoDecryptionKey = errors.New("failed to resolve decryption key")

+ var ErrNoEncryptionKey = errors.New("failed to resolve encryption key")

+ var ErrNoSigningKey = errors.New("failed to resolve signing key")

+ var ErrNoVerificationKey = errors.New("failed to resolve key to verify signature")

+ var ExpectAud = func(audiences ...string) Expect

+ var ExpectIss = func(issuer string) Expect

+ var ExpectJti Expect = func(c Claims) error

+ var ExpectSub = func(subjects ...string) Expect

+ var ExpectTime = func(leeway time.Duration) Expect

+ var SignatureKeyByAlg = func(alg string, jwks *KeySet) KeySource

+ var SignatureKeyById = func(kid string, jwks *KeySet) KeySource

+ var SkipKeySource KeySource = func() (*Key, Algs, bool)

+ var ValidEncryptionAlg = func(s string) error

+ var ValidEncryptionEnc = func(s string) error

+ var ValidOptionalEncryptionAlg = func(s string) error

+ var ValidOptionalEncryptionEnc = func(s string) error

+ var ValidOptionalSignatureAlg = func(s string) error

+ var ValidSignatureAlg = func(s string) error

+ func Decode(jwx string, verifyJwks *KeySet, decryptJwks *KeySet, hint Algs, ...) error

+ func Encode(sig KeySource, enc KeySource, payload interface{}) ([]byte, error)

+ func EncodeToString(sig KeySource, enc KeySource, payload interface{}) (string, error)

+ func IsNone(alg string) bool

+ func ValidateClaims(c Claims, expectations ...Expect) error

+ type Algs struct

+ Encode string

+ Encrypt string

+ Sig string

+ type Claims interface

+ Get func(name string) (interface{}, bool)

+ func NewJWTClaims(claims jwt.Claims) Claims

+ func NewMapClaims(claims map[string]interface{}) Claims

+ type Expect func(c Claims) error

+ type Key struct

+ func GenerateEncryptionKey(kid string, alg string, bits int) *Key

+ func GenerateSignatureKey(kid string, alg string, bits int) *Key

+ func (k *Key) Alg() string

+ func (k *Key) Id() string

+ func (k *Key) IsPublic() bool

+ func (k *Key) IsSymmetric() bool

+ func (k *Key) Raw() interface{}

+ func (k *Key) ToPublic() *Key

+ func (k *Key) Use() string

+ type KeySet struct

+ func NewKeySet(keys ...*Key) *KeySet

+ func ReadKeySet(reader io.Reader) (*KeySet, error)

+ func (s *KeySet) Count() int

+ func (s *KeySet) KeyById(kid string) (*Key, bool)

+ func (s *KeySet) KeyForEncryption(alg string) (*Key, bool)

+ func (s *KeySet) KeyForSigning(alg string) (*Key, bool)

+ func (s *KeySet) MarshalJSON() ([]byte, error)

+ func (s *KeySet) ToPublic() *KeySet

+ func (s *KeySet) UnmarshalJSON(bytes []byte) error

+ type KeySource func() (*Key, Algs, bool)