Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

authkit

package module

Go to main page

Versions in this module

v0

v0.2.0

Sep 26, 2026

Changes in this version

+ var ErrSSOForbidden = identity.ErrSSOForbidden

+ var NewManagedSSO = identity.NewManagedSSO

+ func SSOProviderName(orgID string) string

+ func ValidateManagedSSO(ctx context.Context, manager *ManagedSSO, principal identity.Principal, ...) error

+ type ManagedSSO = identity.ManagedSSO

type OIDCProvider

+ Domain string

+ type SSOConnection = identity.SSOConnection

+ type SSOConnectionStore = identity.SSOConnectionStore

type Storage

+ Teams identity.TeamStore

v0.1.0

Sep 25, 2026

Changes in this version

+ func PrincipalFrom(ctx context.Context) (identity.Principal, bool)

+ type Auth struct

+ Authenticator *identity.Authenticator

+ Organizations identity.OrgStore

+ Passkeys *gowebauthn.Provider

+ Password *identity.LoginService

+ Sessions *identity.SessionService

+ Social *identity.SocialLoginService

+ TwoFactor *identity.MFAService

+ func New(ctx context.Context, cfg Config) (*Auth, error)

+ func (a *Auth) Handler() http.Handler

+ func (a *Auth) Middleware(next http.Handler) http.Handler

+ func (a *Auth) SignInWithIDToken(ctx context.Context, provider, rawIDToken, expectedNonce string) (identity.LoginResult, error)

+ type Config struct

+ AdminToken string

+ BasePath string

+ BaseURL string

+ EmailAndPassword EmailAndPassword

+ OrganizationSSO map[string]OIDCProvider

+ Plugins []Plugin

+ Signer identity.Signer

+ SocialProviders map[string]SocialProvider

+ Storage Storage

+ type EmailAndPassword struct

+ Enabled bool

+ type FlowStore interface

+ Put func(ctx context.Context, id, kind string, payload []byte, expiresAt time.Time) error

+ Take func(ctx context.Context, id, kind string) (payload []byte, ok bool, err error)

+ type OIDCProvider struct

+ ClientID string

+ ClientSecret string

+ IssuerURL string

+ OrgID string

+ RedirectURL string

+ Scopes []string

+ type Plugin interface

+ func Organization() Plugin

+ func Passkey(cfg gowebauthn.Config) Plugin

+ func TwoFactor() Plugin

+ type SocialProvider struct

+ AppleKeyID string

+ ApplePrivateKey *ecdsa.PrivateKey

+ AppleTeamID string

+ ClientID string

+ ClientSecret string

+ MicrosoftTenant string

+ NativeClientIDs []string

+ RedirectURL string

+ type Storage struct

+ Flows FlowStore

+ MFA identity.MFAStore

+ Memberships identity.MembershipStore

+ Migrate func(context.Context) error

+ Organizations identity.OrgStore

+ Passkeys identity.WebAuthnCredentialStore

+ Recovery identity.RecoveryStore

+ Sessions identity.SessionStore

+ SocialAccounts identity.SocialAccountStore

+ Users identity.UserStore

+ func Postgres(pool *pgxpool.Pool) Storage