Directories
¶
| Path | Synopsis |
|---|---|
|
adapters
|
|
|
aesmaster
Package aesmaster implements the DataEncryptor port using AES-256-GCM with HKDF-SHA256 per-value key derivation from a master key.
|
Package aesmaster implements the DataEncryptor port using AES-256-GCM with HKDF-SHA256 per-value key derivation from a master key. |
|
brokerproto/apikey
Package apikey implements the BrokerProtocol port for upstream services where the user supplies a long-lived API key (e.g.
|
Package apikey implements the BrokerProtocol port for upstream services where the user supplies a long-lived API key (e.g. |
|
brokerproto/oauth
Package oauth implements the BrokerProtocol port for upstream OAuth 2.0 providers — the upstream-facing OAuth dance (authorize URL + code exchange) plus refresh-token vending.
|
Package oauth implements the BrokerProtocol port for upstream OAuth 2.0 providers — the upstream-facing OAuth dance (authorize URL + code exchange) plus refresh-token vending. |
|
brokerproto/serviceaccount
Package serviceaccount implements the BrokerProtocol port for upstream providers where the AS holds a service-account private key and impersonates a specific user via an outbound RFC 7521 §4.2 / RFC 7523 §2.1 JWT bearer assertion (e.g.
|
Package serviceaccount implements the BrokerProtocol port for upstream providers where the AS holds a service-account private key and impersonates a specific user via an outbound RFC 7521 §4.2 / RFC 7523 §2.1 JWT bearer assertion (e.g. |
|
cimd
Package cimd provides an HTTP-based Client ID Metadata Document fetcher.
|
Package cimd provides an HTTP-based Client ID Metadata Document fetcher. |
|
encryption
Package encryption provides a factory for creating the configured DataEncryptor backend.
|
Package encryption provides a factory for creating the configured DataEncryptor backend. |
|
hcvault
Package hcvault implements key storage and data encryption using HashiCorp Vault Transit.
|
Package hcvault implements key storage and data encryption using HashiCorp Vault Transit. |
|
idpjwks
Package idpjwks provides a JWKS fetcher and cache for trusted IdP issuers.
|
Package idpjwks provides a JWKS fetcher and cache for trusted IdP issuers. |
|
keyfile
Package keyfile implements key storage using PEM files on disk.
|
Package keyfile implements key storage using PEM files on disk. |
|
oidc
Package oidc implements upstream OIDC federation using net/http + go-jose/v4.
|
Package oidc implements upstream OIDC federation using net/http + go-jose/v4. |
|
postgres
Package postgres provides PostgreSQL implementations of the output port interfaces.
|
Package postgres provides PostgreSQL implementations of the output port interfaces. |
|
signing
Package signing provides a factory for creating the configured KeyStore backend.
|
Package signing provides a factory for creating the configured KeyStore backend. |
|
sqlite
Package sqlite provides SQLite implementations of the output port interfaces.
|
Package sqlite provides SQLite implementations of the output port interfaces. |
|
storage
Package storage provides a factory for creating the configured DataStore backend.
|
Package storage provides a factory for creating the configured DataStore backend. |
|
admin
|
|
|
dto
Package dto holds the JSON wire-shape views for the unified-resource admin surface.
|
Package dto holds the JSON wire-shape views for the unified-resource admin surface. |
|
Package brokerproto holds the BrokerProtocol adapter registry that internal/services/broker_issuer.go consults at request time to dispatch upstream-token vending by protocol name.
|
Package brokerproto holds the BrokerProtocol adapter registry that internal/services/broker_issuer.go consults at request time to dispatch upstream-token vending by protocol name. |
|
Package config provides configuration loading and validation for authserver.
|
Package config provides configuration loading and validation for authserver. |
|
Package crypto provides cryptographic primitives for authserver.
|
Package crypto provides cryptographic primitives for authserver. |
|
Package domain contains shared domain types and errors.
|
Package domain contains shared domain types and errors. |
|
audit
Package audit contains the Event domain entity.
|
Package audit contains the Event domain entity. |
|
client
Package client contains the Client domain entity for OAuth 2.1 clients.
|
Package client contains the Client domain entity for OAuth 2.1 clients. |
|
idp
Package idp contains the TrustedIDP domain entity for XAA enterprise-managed authorization.
|
Package idp contains the TrustedIDP domain entity for XAA enterprise-managed authorization. |
|
resource
Package resource contains domain types for the unified Resource registry and its companion shapes.
|
Package resource contains domain types for the unified Resource registry and its companion shapes. |
|
session
Package session contains the AuthSession domain entity.
|
Package session contains the AuthSession domain entity. |
|
token
Package token contains the Family and RefreshToken domain entities.
|
Package token contains the Family and RefreshToken domain entities. |
|
user
Package user contains the User domain entity.
|
Package user contains the User domain entity. |
|
xaa
Package xaa provides domain types for Enterprise-Managed Authorization (Cross App Access) policies and subject mappings.
|
Package xaa provides domain types for Enterprise-Managed Authorization (Cross App Access) policies and subject mappings. |
|
Package issuer holds the Issuer registry consulted by internal/services/token_exchange.go at request time to dispatch token issuance by Resource.BackendKind.
|
Package issuer holds the Issuer registry consulted by internal/services/token_exchange.go at request time to dispatch token issuance by Resource.BackendKind. |
|
Package observability provides unified logging, tracing, and metrics.
|
Package observability provides unified logging, tracing, and metrics. |
|
ports
|
|
|
input
Package input defines the driving ports — what the outside world asks the system to do.
|
Package input defines the driving ports — what the outside world asks the system to do. |
|
output
Package output defines the driven ports — what the system needs from the outside world.
|
Package output defines the driven ports — what the system needs from the outside world. |
|
Package services contains application services.
|
Package services contains application services. |
|
Package ssrf provides SSRF-safe HTTP transport that blocks connections to private/reserved IP addresses.
|
Package ssrf provides SSRF-safe HTTP transport that blocks connections to private/reserved IP addresses. |
Click to show internal directories.
Click to hide internal directories.