Directories
¶
| Path | Synopsis |
|---|---|
|
Package agegate defines the pluggable age-determination provider used to support COPPA-style age-gating at signup.
|
Package agegate defines the pluggable age-determination provider used to support COPPA-style age-gating at signup. |
|
Package audit provides best-effort audit event logging to the datastore.
|
Package audit provides best-effort audit event logging to the datastore. |
|
Package captcha defines the pluggable CAPTCHA-verification provider interface and its in-tree implementations (Cloudflare Turnstile and Google reCAPTCHA v3) plus a no-op verifier for deployments that leave CAPTCHA disabled.
|
Package captcha defines the pluggable CAPTCHA-verification provider interface and its in-tree implementations (Cloudflare Turnstile and Google reCAPTCHA v3) plus a no-op verifier for deployments that leave CAPTCHA disabled. |
|
Package email provides a provider-agnostic email transport layer.
|
Package email provides a provider-agnostic email transport layer. |
|
Package events is the pluggable user-lifecycle eventing primitive.
|
Package events is the pluggable user-lifecycle eventing primitive. |
|
Package idv defines the pluggable identity-verification provider interface.
|
Package idv defines the pluggable identity-verification provider interface. |
|
Package jwt provides RS256 JWT signing, verification, and JWKS publishing.
|
Package jwt provides RS256 JWT signing, verification, and JWKS publishing. |
|
file
Package file implements the default file-backed jwt.Signer for the identity service.
|
Package file implements the default file-backed jwt.Signer for the identity service. |
|
jwttest
Package jwttest provides an in-process jwt.Signer for tests.
|
Package jwttest provides an in-process jwt.Signer for tests. |
|
kmsaws
Package kmsaws implements a jwt.Signer that delegates the signature operation to AWS KMS.
|
Package kmsaws implements a jwt.Signer that delegates the signature operation to AWS KMS. |
|
Package oauth implements provider-side OAuth code-exchange flows for authenticating end users into the identity service.
|
Package oauth implements provider-side OAuth code-exchange flows for authenticating end users into the identity service. |
|
Package passkeys provides WebAuthn/FIDO2 passkey registration and authentication using the go-webauthn library.
|
Package passkeys provides WebAuthn/FIDO2 passkey registration and authentication using the go-webauthn library. |
|
Package passwords provides bcrypt password hashing and strength validation.
|
Package passwords provides bcrypt password hashing and strength validation. |
|
Package samlidp implements the SAML 2.0 Identity Provider (IdP) core: IdP-metadata generation, AuthnRequest parsing, and the issuance of XML-DSig-signed SAML assertions/responses for a registered Service Provider (SP).
|
Package samlidp implements the SAML 2.0 Identity Provider (IdP) core: IdP-metadata generation, AuthnRequest parsing, and the issuance of XML-DSig-signed SAML assertions/responses for a registered Service Provider (SP). |
|
Package scim implements the inbound (server) side of SCIM 2.0 (RFC 7643 schema, RFC 7644 protocol) for the /scim/v2 surface: an external IdP (Okta, Entra ID, Google Workspace) lifecycle-manages users in a project by POST/GET/PUT/PATCH/DELETE-ing the /Users resource and the discovery endpoints (/ServiceProviderConfig, /Schemas, /ResourceTypes).
|
Package scim implements the inbound (server) side of SCIM 2.0 (RFC 7643 schema, RFC 7644 protocol) for the /scim/v2 surface: an external IdP (Okta, Entra ID, Google Workspace) lifecycle-manages users in a project by POST/GET/PUT/PATCH/DELETE-ing the /Users resource and the discovery endpoints (/ServiceProviderConfig, /Schemas, /ResourceTypes). |
|
Package sms is the abstraction over an SMS backend, mirroring pkg/email.
|
Package sms is the abstraction over an SMS backend, mirroring pkg/email. |
|
Package totp provides TOTP (RFC 6238) utilities for two-factor authentication.
|
Package totp provides TOTP (RFC 6238) utilities for two-factor authentication. |
Click to show internal directories.
Click to hide internal directories.