client

Aug 26, 2026

Changes in this version

type DiscoveredMetadata

+ UserInfoAlgorithms []fapi.SignatureAlgorithm

+ UserInfoEncryptionAlgorithms []fapi.KeyManagementAlgorithm

+ UserInfoEncryptionEncValues []fapi.ContentEncryptionAlgorithm

type IDTokenClaims

+ func (c IDTokenClaims) AsMap() map[string]any

type UserInfo

+ func (u UserInfo) AsMap() map[string]any

Aug 26, 2026

Changes in this version

type ErrorCode

+ const ErrorResponseTooLarge

type Limits

+ MaxJOSECompactBytes int

Aug 26, 2026

Changes in this version

type Algorithms

+ func RecommendedAlgorithms() Algorithms

type DiscoveredMetadata

+ func (d DiscoveredMetadata) IssuerKeySource(fetcher *fapihttp.Client, cacheTTL time.Duration, opts ...keys.JWKSOption) (*keys.JWKSIssuerKeySource, error)

+ func (d DiscoveredMetadata) SupportsAlgorithms(algs Algorithms) error

type IDTokenClaims

+ IssuedAt time.Time

type Limits

+ func RecommendedLimits() Limits

Aug 26, 2026

Changes in this version

type Client

+ func (c *Client) PublicJWKS(ctx context.Context) (PublicKeySet, error)

+ type PublicJWK struct

+ func (k PublicJWK) KeyID() string

+ func (k PublicJWK) MarshalJSON() ([]byte, error)

+ type PublicKeySet struct

+ Keys []PublicJWK

Aug 25, 2026

Changes in this version

type Config

+ TolerateUserInfoSubjectEqualsClientID bool

+ TrustedIDTokenAudiences []string

Aug 24, 2026

Changes in this version

type Algorithms

+ UserInfo fapi.SignatureAlgorithm

+ UserInfoContentEncryption fapi.ContentEncryptionAlgorithm

+ UserInfoKeyManagement fapi.KeyManagementAlgorithm

type Client

+ func (c *Client) FetchUserInfo(ctx context.Context, tokens TokenSet) (UserInfo, error)

+ func (c *Client) ProtectedResource(tokens TokenSet) *ResourceClient

+ func (c *Client) VerifyIssuerJWS(ctx context.Context, compactJWS string) ([]byte, error)

type Endpoints

+ UserInfo fapi.URL

+ type ResourceClient struct

+ func (rc *ResourceClient) Do(ctx context.Context, req *http.Request) (*http.Response, error)

+ type UserInfo struct

+ Parameters map[string]json.RawMessage

+ Subject string

Aug 23, 2026

Changes in this version

+ type IDTokenClaims struct

+ ACR string

+ AMR []string

+ AuthTime time.Time

+ ExpiresAt time.Time

+ Parameters map[string]json.RawMessage

+ Subject string

type TokenSet

+ IDTokenClaims IDTokenClaims

Aug 23, 2026

Changes in this version

type DiscoveredMetadata

+ UserinfoEndpoint fapi.URL

Aug 23, 2026

Changes in this version

type Algorithms

+ IDTokenContentEncryption fapi.ContentEncryptionAlgorithm

+ IDTokenKeyManagement fapi.KeyManagementAlgorithm

type Dependencies

+ Decryption keys.Decrypter

type DiscoveredMetadata

+ IDTokenEncryptionAlgorithms []fapi.KeyManagementAlgorithm

+ IDTokenEncryptionEncValues []fapi.ContentEncryptionAlgorithm

Aug 23, 2026

Changes in this version

type BeginAuthorizationRequest

+ ACRValues []string

Aug 20, 2026

Changes in this version

+ type Algorithms struct

+ ClientAuthentication fapi.SignatureAlgorithm

+ DPoP fapi.SignatureAlgorithm

+ IDToken fapi.SignatureAlgorithm

+ JARM fapi.SignatureAlgorithm

+ RequestObject fapi.SignatureAlgorithm

+ type AuthorizationCallback struct

+ RawQuery string

+ type AuthorizationSession struct

+ func (s AuthorizationSession) Handle() SessionHandle

+ func (s AuthorizationSession) URL() fapi.URL

+ type BeginAuthorizationRequest struct

+ Extensions extension.Values

+ Scope []string

+ type CallbackDenied struct

+ Code string

+ Description string

+ type CallbackResult interface

+ type CallbackSuccess struct

+ Response ValidatedAuthorizationResponse

+ type Client struct

+ func New(cfg Config, deps Dependencies) (*Client, error)

+ func (c *Client) BeginAuthorization(ctx context.Context, req BeginAuthorizationRequest) (AuthorizationSession, error)

+ func (c *Client) CompleteAuthorization(ctx context.Context, cb AuthorizationCallback) (CompletionResult, error)

+ func (c *Client) ExchangeCode(ctx context.Context, resp ValidatedAuthorizationResponse) (TokenSet, error)

+ func (c *Client) HandleAuthorizationResponse(ctx context.Context, cb AuthorizationCallback) (CallbackResult, error)

+ type Clock interface

+ Now func() time.Time

+ type CompletionDenied struct

+ Code string

+ Description string

+ type CompletionResult interface

+ type CompletionSuccess struct

+ Tokens TokenSet

+ type Config struct

+ Algorithms Algorithms

+ ClientID fapi.ClientID

+ Endpoints Endpoints

+ Issuer fapi.URL

+ Limits Limits

+ Profile Profile

+ RedirectURI string

+ RequireAuthorizationResponseIss bool

+ type Dependencies struct

+ Clock Clock

+ HTTP fapihttp.HTTPClient

+ IssuerKeys keys.IssuerKeySource

+ Keys keys.KeyManager

+ Random io.Reader

+ Sessions storage.SessionStore

+ type DiscoveredMetadata struct

+ AuthorizationResponseIssSupported bool

+ Endpoints Endpoints

+ IDTokenAlgorithms []fapi.SignatureAlgorithm

+ JARMAlgorithms []fapi.SignatureAlgorithm

+ JWKSURI fapi.URL

+ RequestObjectAlgorithms []fapi.SignatureAlgorithm

+ RequireSignedRequestObject bool

+ func Discover(ctx context.Context, fetcher *fapihttp.Client, issuer fapi.URL, ...) (DiscoveredMetadata, error)

+ type Endpoints struct

+ Authorization fapi.URL

+ PushedAuthorizationRequest fapi.URL

+ Token fapi.URL

+ type Error struct

+ func (e *Error) Code() ErrorCode

+ func (e *Error) Error() string

+ func (e *Error) PublicDescription() string

+ func (e *Error) Unwrap() error

+ type ErrorCode string

+ const ErrorAuthorizationDenied

+ const ErrorInternal

+ const ErrorInvalidRequest

+ const ErrorInvalidResponse

+ type Limits struct

+ ClientAssertionLifetime time.Duration

+ HTTPTimeout time.Duration

+ MaxClockSkew time.Duration

+ MaxHTTPResponseBytes int64

+ MaxIDTokenLifetime time.Duration

+ MaxJARMResponseLifetime time.Duration

+ RequestObjectLifetime time.Duration

+ SessionLifetime time.Duration

+ type Profile uint8

+ const ProfileFAPISecurity

+ const ProfileFAPISecurityWithMessageSigning

+ type SessionHandle struct

+ func (h SessionHandle) String() string

+ type SystemClock struct

+ func (SystemClock) Now() time.Time

+ type TokenSet struct

+ AccessToken fapi.Secret

+ ExpiresIn time.Duration

+ HasExpiresIn bool

+ HasIDToken bool

+ HasRefreshToken bool

+ IDToken fapi.Secret

+ RefreshToken fapi.Secret

+ Scope string

+ Subject string

+ TokenType string

+ type ValidatedAuthorizationResponse struct