token

Documentation

Index

• func ExtractUserID(subject string) (string, error)
• type IDToken
  • func (t *IDToken) IsAdmin() bool
• type Signer
  • func NewSigner(keyPath string) (Signer, error)
  • func NewSignerWithPrivateKey(privateKey *rsa.PrivateKey) (Signer, error)
• type Verifier
  • func NewVerifier(keyPath, issuer, clientID string) (Verifier, error)

Functions

func ExtractUserID

func ExtractUserID(subject string) (string, error)

Types

type IDToken

type IDToken struct {
	Issuer   string    `json:"iss"`
	Subject  string    `json:"sub"`
	Audience string    `json:"aud"`
	Expiry   time.Time `json:"exp"`
	IssuedAt time.Time `json:"iat"`
	Email    string    `json:"email"`
	// Use "role" as json tag to keep compatibility.
	// AdminRole is accountproto.Account_OWNER in the case of AdminAccount.
	// AdminRole is accountproto.Account_UNASSIGNED in the case of Account.
	AdminRole accountproto.Account_Role `json:"role"`
}

func (*IDToken) IsAdmin

func (t *IDToken) IsAdmin() bool

type Signer

type Signer interface {
	Sign(*IDToken) (string, error)
}

func NewSigner

func NewSigner(keyPath string) (Signer, error)

func NewSignerWithPrivateKey

func NewSignerWithPrivateKey(privateKey *rsa.PrivateKey) (Signer, error)

type Verifier

type Verifier interface {
	Verify(string) (*IDToken, error)
}

func NewVerifier

func NewVerifier(keyPath, issuer, clientID string) (Verifier, error)