Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

bff

package module

Go to main page

Versions in this module

v0

v0.3.0

Oct 28, 2026

v0.2.1

Oct 28, 2026

v0.2.0

Oct 28, 2026

Changes in this version

type ProviderOption

+ func WithEndSessionEndpoint(endpoint string) ProviderOption

+ func WithRevocationEndpoint(endpoint string) ProviderOption

v0.1.0

Oct 28, 2026

Changes in this version

+ const DefaultAbsoluteTimeout

+ const DefaultIdleTimeout

+ var ErrInvalidConfig = errors.New("invalid config")

+ var ErrNoSession = errors.New("no session")

+ func AccessToken(ctx context.Context) (*oauth2.Token, bool)

+ func AllowAnonymous() fox.RouteOption

+ func DefaultUnauthorized(c *fox.Context)

+ func ProxyErrorHandler(w http.ResponseWriter, r *http.Request, err error)

+ func ResourceAccessToken(ctx context.Context, resource string) (*oauth2.Token, error)

+ func ResourceTransport(base http.RoundTripper, resource string) http.RoundTripper

+ func Transport(base http.RoundTripper) http.RoundTripper

+ func UserClaims(ctx context.Context) (map[string]any, bool)

+ type AEAD interface

+ Decrypt func(ciphertext, associatedData []byte) ([]byte, error)

+ Encrypt func(plaintext, associatedData []byte) ([]byte, error)

+ type Client struct

+ ClientID string

+ ClientKey crypto.Signer

+ ClientKeyID string

+ ClientSecret string

+ PostLogoutRedirectURL string

+ Provider *Provider

+ RedirectURL string

+ Scopes []string

+ type Frontend struct

+ func NewFrontend(client Client, aead AEAD, opts ...Option) (*Frontend, error)

+ func (fe *Frontend) Authenticate() fox.MiddlewareFunc

+ func (fe *Frontend) BackchannelHandler() fox.HandlerFunc

+ func (fe *Frontend) CallbackHandler() fox.HandlerFunc

+ func (fe *Frontend) LoginHandler() fox.HandlerFunc

+ func (fe *Frontend) LogoutHandler() fox.HandlerFunc

+ func (fe *Frontend) Unauthorized(c *fox.Context)

+ func (fe *Frontend) UserHandler() fox.HandlerFunc

+ type Option interface

+ func WithAbsoluteTimeout(d time.Duration) Option

+ func WithCSRFHeader(name, value string) Option

+ func WithDPoP(enable bool) Option

+ func WithIdleTimeout(d time.Duration) Option

+ func WithLogHandler(h slog.Handler) Option

+ func WithPushedAuthorization(mode PushedAuthorization) Option

+ func WithRequestObject(enable bool) Option

+ func WithResources(resources ...string) Option

+ func WithSigningAlgorithms(algs ...string) Option

+ func WithStore(s store.Store) Option

+ func WithTrustedOrigins(origins ...string) Option

+ func WithUnauthorizedHandler(handler fox.HandlerFunc) Option

+ func WithUserInfo(enable bool) Option

+ type Provider struct

+ func NewProvider(ctx context.Context, issuer string, opts ...ProviderOption) (*Provider, error)

+ type ProviderOption interface

+ func WithHTTPClient(client *http.Client) ProviderOption

+ type PushedAuthorization uint8

+ const PushedAuthorizationDisabled

+ const PushedAuthorizationIfAvailable

+ const PushedAuthorizationRequired