jose

package module

Go to main page

Versions in this module

v1

v1.4.0

May 21, 2021

Changes in this version

+ type Claims map[string]interface

+ func (c Claims) Get(name string) (string, bool)

v1.3.0

Feb 19, 2021

Changes in this version

+ var ErrKeyExpired = errors.New("key exists but is expired")

+ var ErrNoKeyFound = errors.New("no Keys has been found")

+ var MaxKeyAgeNoCheck = time.Duration(-1)

+ func CalculateHeadersToPropagate(propagationCfg [][]string, claims map[string]interface{}) (map[string]string, error)

+ func CompoundX5TKeyIDGetter(key *jose.JSONWebKey) string

+ func CompoundX5TTokenKeyIDGetter(token *jwt.JSONWebToken) string

+ func DefaultKeyIDGetter(key *jose.JSONWebKey) string

+ func DefaultTokenKeyIDGetter(token *jwt.JSONWebToken) string

+ func ScopesAllMatcher(scopesKey string, claims map[string]interface{}, requiredScopes []string) bool

+ func ScopesAnyMatcher(scopesKey string, claims map[string]interface{}, requiredScopes []string) bool

+ func ScopesDefaultMatcher(scopesKey string, claims map[string]interface{}, requiredScopes []string) bool

+ func X5TKeyIDGetter(key *jose.JSONWebKey) string

+ func X5TTokenKeyIDGetter(token *jwt.JSONWebToken) string

+ type FileKeyCacher struct

+ func NewFileKeyCacher(data []byte, keyIdentifyStrategy string) (*FileKeyCacher, error)

+ func (f *FileKeyCacher) Add(keyID string, _ []jose.JSONWebKey) (*jose.JSONWebKey, error)

+ func (f *FileKeyCacher) Get(keyID string) (*jose.JSONWebKey, error)

+ type JWKClient struct

+ func NewJWKClientWithCache(options JWKClientOptions, extractor auth0.RequestTokenExtractor, ...) *JWKClient

+ func (j *JWKClient) GetSecret(r *http.Request) (interface{}, error)

+ type JWKClientOptions struct

+ KeyIdentifyStrategy string

+ type KeyCacher interface

+ Add func(keyID string, webKeys []jose.JSONWebKey) (*jose.JSONWebKey, error)

+ Get func(keyID string) (*jose.JSONWebKey, error)

+ func NewMemoryKeyCacher(maxKeyAge time.Duration, maxCacheSize int, keyIdentifyStrategy string) KeyCacher

+ type KeyIDGetter interface

+ Get func(*jose.JSONWebKey) string

+ func KeyIDGetterFactory(keyIdentifyStrategy string) KeyIDGetter

+ type KeyIDGetterFunc func(*jose.JSONWebKey) string

+ func (f KeyIDGetterFunc) Get(key *jose.JSONWebKey) string

+ type MemoryKeyCacher struct

+ func (mkc *MemoryKeyCacher) Add(keyID string, downloadedKeys []jose.JSONWebKey) (*jose.JSONWebKey, error)

+ func (mkc *MemoryKeyCacher) Get(keyID string) (*jose.JSONWebKey, error)

type SecretProviderConfig

+ CacheDuration uint32

+ CipherKey []byte

+ KeyIdentifyStrategy string

+ LocalPath string

+ SecretURL string

type SignatureConfig

+ CacheDuration uint32

+ CipherKey []byte

+ KeyIdentifyStrategy string

+ LocalPath string

+ PropagateClaimsToHeader [][]string

+ RolesKeyIsNested bool

+ Scopes []string

+ ScopesKey string

+ ScopesMatcher string

+ SecretURL string

type SignerConfig

+ CipherKey []byte

+ LocalPath string

+ SecretURL string

+ type TokenIDGetter interface

+ Get func(*jwt.JSONWebToken) string

+ func TokenIDGetterFactory(keyIdentifyStrategy string) TokenIDGetter

+ type TokenKeyIDGetterFunc func(*jwt.JSONWebToken) string

+ func (f TokenKeyIDGetterFunc) Get(token *jwt.JSONWebToken) string

v1.1.0

Jan 28, 2020

Changes in this version

+ const SignerNamespace

+ const ValidatorNamespace

+ var DefaultEnabledCipherSuites = []uint16

+ var ErrInsecureJWKSource = errors.New("JWK client is using an insecure connection to the JWK service")

+ var ErrNoSignerCfg = errors.New("JOSE: no signer config")

+ var ErrNoValidatorCfg = errors.New("JOSE: no validator config")

+ var ErrPinnedKeyNotFound = errors.New("JWK client did not find a pinned key")

+ func CanAccess(roleKey string, claims map[string]interface{}, required []string) bool

+ func CanAccessNested(roleKey string, claims map[string]interface{}, required []string) bool

+ func DecodeFingerprints(in []string) ([][]byte, error)

+ func NewSigner(cfg *config.EndpointConfig, te auth0.RequestTokenExtractor) (*SignerConfig, Signer, error)

+ func NewValidator(signatureConfig *SignatureConfig, ef ExtractorFactory) (*auth0.JWTValidator, error)

+ func SecretProvider(cfg SecretProviderConfig, te auth0.RequestTokenExtractor) (*auth0.JWKClient, error)

+ func SignFields(keys []string, signer Signer, response *proxy.Response) error

+ type ChainedRejecterFactory []RejecterFactory

+ func (c ChainedRejecterFactory) New(l logging.Logger, cfg *config.EndpointConfig) Rejecter

+ type Dialer struct

+ func NewDialer(cfg SecretProviderConfig) *Dialer

+ func (d *Dialer) DialContext(ctx context.Context, network, address string) (net.Conn, error)

+ func (d *Dialer) DialTLS(network, addr string) (net.Conn, error)

+ type ExtractorFactory func(string) func(r *http.Request) (*jwt.JSONWebToken, error)

+ type FixedRejecter bool

+ func (f FixedRejecter) Reject(_ map[string]interface{}) bool

+ type NopRejecterFactory struct

+ func (NopRejecterFactory) New(_ logging.Logger, _ *config.EndpointConfig) Rejecter

+ type Rejecter interface

+ Reject func(map[string]interface{}) bool

+ type RejecterFactory interface

+ New func(logging.Logger, *config.EndpointConfig) Rejecter

+ type RejecterFactoryFunc func(logging.Logger, *config.EndpointConfig) Rejecter

+ func (f RejecterFactoryFunc) New(l logging.Logger, cfg *config.EndpointConfig) Rejecter

+ type RejecterFunc func(map[string]interface{}) bool

+ func (r RejecterFunc) Reject(v map[string]interface{}) bool

+ type SecretProviderConfig struct

+ AllowInsecure bool

+ CacheEnabled bool

+ Cs []uint16

+ Fingerprints [][]byte

+ LocalCA string

+ URI string

+ type SignatureConfig struct

+ Alg string

+ Audience []string

+ CacheEnabled bool

+ CipherSuites []uint16

+ CookieKey string

+ DisableJWKSecurity bool

+ Fingerprints []string

+ Issuer string

+ LocalCA string

+ Roles []string

+ RolesKey string

+ URI string

+ func GetSignatureConfig(cfg *config.EndpointConfig) (*SignatureConfig, error)

+ type Signer func(interface{}) (string, error)

+ type SignerConfig struct

+ Alg string

+ CipherSuites []uint16

+ DisableJWKSecurity bool

+ Fingerprints []string

+ FullSerialization bool

+ KeyID string

+ KeysToSign []string

+ LocalCA string

+ URI string

Other modules containing this package

github.com/devopsfaith/krakend-jose/v2

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL