Directories
¶
| Path | Synopsis |
|---|---|
|
Package aesmaster implements the DataEncryptor port using AES-256-GCM with HKDF-SHA256 per-value key derivation from a master key.
|
Package aesmaster implements the DataEncryptor port using AES-256-GCM with HKDF-SHA256 per-value key derivation from a master key. |
|
brokerproto
|
|
|
apikey
Package apikey implements the BrokerProtocol port for upstream services where the user supplies a long-lived API key (e.g.
|
Package apikey implements the BrokerProtocol port for upstream services where the user supplies a long-lived API key (e.g. |
|
oauth
Package oauth implements the BrokerProtocol port for upstream OAuth 2.0 providers — the upstream-facing OAuth dance (authorize URL + code exchange) plus refresh-token vending.
|
Package oauth implements the BrokerProtocol port for upstream OAuth 2.0 providers — the upstream-facing OAuth dance (authorize URL + code exchange) plus refresh-token vending. |
|
serviceaccount
Package serviceaccount implements the BrokerProtocol port for upstream providers where the AS holds a service-account private key and impersonates a specific user via an outbound RFC 7521 §4.2 / RFC 7523 §2.1 JWT bearer assertion (e.g.
|
Package serviceaccount implements the BrokerProtocol port for upstream providers where the AS holds a service-account private key and impersonates a specific user via an outbound RFC 7521 §4.2 / RFC 7523 §2.1 JWT bearer assertion (e.g. |
|
Package cimd provides an HTTP-based Client ID Metadata Document fetcher.
|
Package cimd provides an HTTP-based Client ID Metadata Document fetcher. |
|
Package encryption provides a factory for creating the configured DataEncryptor backend.
|
Package encryption provides a factory for creating the configured DataEncryptor backend. |
|
Package hcvault implements key storage and data encryption using HashiCorp Vault Transit.
|
Package hcvault implements key storage and data encryption using HashiCorp Vault Transit. |
|
Package idpjwks provides a JWKS fetcher and cache for trusted IdP issuers.
|
Package idpjwks provides a JWKS fetcher and cache for trusted IdP issuers. |
|
Package keyfile implements key storage using PEM files on disk.
|
Package keyfile implements key storage using PEM files on disk. |
|
Package oidc implements upstream OIDC federation using net/http + go-jose/v4.
|
Package oidc implements upstream OIDC federation using net/http + go-jose/v4. |
|
Package postgres provides PostgreSQL implementations of the output port interfaces.
|
Package postgres provides PostgreSQL implementations of the output port interfaces. |
|
Package signing provides a factory for creating the configured KeyStore backend.
|
Package signing provides a factory for creating the configured KeyStore backend. |
|
Package sqlite provides SQLite implementations of the output port interfaces.
|
Package sqlite provides SQLite implementations of the output port interfaces. |
|
Package storage provides a factory for creating the configured DataStore backend.
|
Package storage provides a factory for creating the configured DataStore backend. |
Click to show internal directories.
Click to hide internal directories.