Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

gosso

package module

Go to main page

Versions in this module

v1

v1.1.0

Oct 17, 2026

Changes in this version

+ var ErrStateMismatch = errors.New("callback state does not match the login state")

+ var ErrSubjectUnauthorized = errors.New("subject is not authorized to sign in")

+ func DefaultCookiePrefix(config Config) string

type Auth

+ AuthorizeSubject func(subject string) bool

+ func (a *Auth) HandleCallback(echoContext *echo.Context) (*LoginResult, *LoginFailure)

type Config

+ func (c Config) EffectiveSessionTTL() time.Duration

+ type LoginFailure struct

+ Cause error

+ Code LoginError

+ type LoginResult struct

+ Redirect string

+ Subject string

v1.0.1

Oct 16, 2026

v1.0.0

Oct 16, 2026

v0

v0.1.0

Oct 16, 2026

Changes in this version

+ const DefaultSessionTTL

+ const DiscoveryTimeout

+ const MinSessionKeyLength

+ var ErrInvalidIssuer = errors.New(...)

+ var ErrInvalidSession = errors.New("invalid session cookie")

+ var ErrInvalidSessionKey = errors.New("session signing key must be at least 32 characters")

+ var ErrMissingOIDCFields = errors.New(...)

+ var ErrProviderUnavailable = errors.New("identity provider is not reachable")

+ var ErrUnauthenticated = errors.New("not authenticated")

+ func DefaultScopes() []string

+ func RandomToken(size int) (string, error)

+ func SanitizeRedirect(raw string) string

+ func SetLogger(l *slog.Logger)

+ func SignHMAC(key, subject string, expiresAt time.Time) string

+ func ValidLoginErrorCode(raw string) bool

+ func ValidateSessionKey(key string) error

+ func VerifyHMAC(key, value string, now time.Time) (string, time.Time, error)

+ type Auth struct

+ CallbackPath string

+ LoginPath string

+ Sessions SessionManager

+ Settings func() Config

+ func New(settings func() Config, sessions SessionManager, ...) *Auth

+ func (a *Auth) Authenticate(echoContext *echo.Context) (*User, error)

+ func (a *Auth) CallbackURL(c *echo.Context) string

+ func (a *Auth) ClearSession(echoContext *echo.Context)

+ func (a *Auth) ConsumeLoginState(echoContext *echo.Context) (state, verifier, redirect string, err error)

+ func (a *Auth) Enabled() bool

+ func (a *Auth) Exchange(echoContext *echo.Context, code, verifier string) (string, error)

+ func (a *Auth) Middleware() echo.MiddlewareFunc

+ func (a *Auth) ProviderResolve() (*providerState, error)

+ func (a *Auth) Resolved() bool

+ func (a *Auth) SessionTTL() time.Duration

+ func (a *Auth) StartLogin(echoContext *echo.Context, redirect string) error

+ func (a *Auth) StartSession(echoContext *echo.Context, subject string) error

+ type Config struct

+ AppURL string

+ ClientID string

+ ClientSecret string

+ CookiePrefix string

+ CookieSecure bool

+ Enabled bool

+ IssuerURL string

+ Scopes []string

+ SessionKey string

+ SessionTTL time.Duration

+ func (c Config) Validate() error

+ func (c Config) WithDefaults() Config

+ type CookieOptions struct

+ Secure func() bool

+ func (o CookieOptions) Cookie(name, value string, maxAge int, expires time.Time) *http.Cookie

+ type HMACOptions struct

+ CookieName string

+ Prefix string

+ Settings func() Config

+ type HMACSessions struct

+ func NewHMACSessions(opts HMACOptions) *HMACSessions

+ func (h *HMACSessions) Authenticate(echoContext *echo.Context) (*User, error)

+ func (h *HMACSessions) Clear(echoContext *echo.Context) error

+ func (h *HMACSessions) CookieName() string

+ func (h *HMACSessions) Start(echoContext *echo.Context, subject string, expiresAt time.Time) error

+ type LoginError string

+ const LoginErrorExpired

+ const LoginErrorFailed

+ const LoginErrorRejected

+ const LoginErrorUnavailable

+ const LoginQueryParam

+ func ClassifyLoginError(err error) LoginError

+ type Provider struct

+ func NewProvider(settings func() Config) *Provider

+ func (p *Provider) Exchange(ctx context.Context, settings Config, code, verifier, redirectURL string) (string, error)

+ func (p *Provider) Login(settings Config, redirectURL string) (oauth2.Config, error)

+ func (p *Provider) Resolve() (*providerState, error)

+ func (p *Provider) Warm()

+ type SessionManager interface

+ Authenticate func(echoContext *echo.Context) (*User, error)

+ Clear func(echoContext *echo.Context) error

+ CookieName func() string

+ Start func(echoContext *echo.Context, subject string, expiresAt time.Time) error

+ type User struct

+ Subject string

Other modules containing this package

github.com/flohoss/gosso/v2