oidc

Documentation

Index

• func GetClusterAudiences(clientID string, scopes []string) []string
• type Verifier
  • func NewAudienceVerifier(verifier *oidc.IDTokenVerifier, audiences []string) Verifier

Functions

func GetClusterAudiences

func GetClusterAudiences(clientID string, scopes []string) []string

getClusterAudiences returns list of expected audiences in the OIDC token. The DKA OIDC client is requesting tokens for TFA client. The verifier should make sure that all requested audiences are in the token.

Types

type Verifier

type Verifier interface {
	Verify(ctx context.Context, rawIDToken string) (*oidc.IDToken, error)
}

func NewAudienceVerifier

func NewAudienceVerifier(verifier *oidc.IDTokenVerifier, audiences []string) Verifier