Versions in this module Expand all Collapse all v0 v0.1.2 Jul 18, 2026 v0.1.1 Jul 18, 2026 v0.1.0 Jul 6, 2026 Changes in this version type Policy + AllowFailOpen bool v0.0.3 Jul 6, 2026 v0.0.2 Jul 5, 2026 Changes in this version + const DefaultMaxDecompressed + const ShortLivedThreshold + var ErrDecompress = errors.New("statuslist: status list decompression failed") + var ErrDecompressTooBig = errors.New("statuslist: decompressed status list exceeds size cap") + var ErrExpired = errors.New("statuslist: status list token expired beyond MaxStale") + var ErrFetch = errors.New("statuslist: status list could not be fetched") + var ErrIndexOutOfRange = errors.New("statuslist: status index out of range for the list") + var ErrIssuedInFuture = errors.New("statuslist: token issued in the future") + var ErrKeyUnresolved = errors.New("statuslist: issuer key could not be resolved") + var ErrMalformed = errors.New("statuslist: malformed status list token") + var ErrSubMismatch = errors.New("statuslist: token sub does not equal the referenced list URI") + var ErrUnknownBitWidth = errors.New("statuslist: status list bits must be 1, 2, 4 or 8") + var ErrUnsupported = errors.New("statuslist: unsupported reference kind or token format") + var ErrVerify = errors.New("statuslist: status list token signature verification failed") + var ErrWrongType = errors.New("statuslist: wrong or missing typ") + type Cache interface + Get func(key string) ([]byte, bool) + Set func(key string, val []byte, ttl time.Duration) + type CheckInput struct + CredentialValidity time.Duration + IssuerKeyResolver KeyResolver + Policy Policy + Ref StatusRef + type Checker struct + func NewChecker(fetcher Fetcher, cache Cache, opts ...Option) *Checker + func (c *Checker) Check(ctx context.Context, in CheckInput) (Status, Provenance, error) + type Fetcher interface + Get func(ctx context.Context, url string) ([]byte, error) + type KeyResolver func(ctx context.Context, listURI string, token []byte) (stdcrypto.PublicKey, error) + type Option func(*Checker) + func WithClock(clk func() time.Time) Option + func WithClockSkew(d time.Duration) Option + func WithMaxDecompressed(n int) Option + type Outcome string + const OutcomeCached + const OutcomeChecked + const OutcomeSkippedFailOpen + const OutcomeSkippedShortLived + const OutcomeUnavailable + type Policy struct + FailClosed bool + MaxStale time.Duration + type Provenance struct + Bits int + CheckedAt time.Time + FailOpen bool + Format string + FromCache bool + ID string + Index int + Mechanism string + Outcome Outcome + Stale bool + URI string + type RefKind int + const RefIdentifierList + const RefTokenStatusList + type Status int + const StatusRevoked + const StatusSkippedShortLived + const StatusSuspended + const StatusUnknown + const StatusValid + func (s Status) String() string + type StatusRef struct + Format TokenFormat + ID string + Index int + Kind RefKind + URI string + type TokenFormat int + const FormatAuto + const FormatCWT + const FormatJWT