idtokenvalidator

Documentation

Index

• type IDTokenValidator
  • func New(ctx context.Context, domain string, clientID string, clientSecret string, ...) (*IDTokenValidator, error)
  • func (i *IDTokenValidator) Validate(idToken string, optional ValidationOptions) error
• type Option
  • func WithClockTolerance(clockTolerance time.Duration) Option
  • func WithHTTPClient(client *http.Client) Option
• type ValidationOptions

Types

type IDTokenValidator

type IDTokenValidator struct {
	// contains filtered or unexported fields
}

IDTokenValidator is used to validate ID tokens retrieved from Auth0.

func New

func New(
	ctx context.Context,
	domain string,
	clientID string,
	clientSecret string,
	idTokenSigningAlg string,
	opts ...Option,
) (*IDTokenValidator, error)

New creates and returns a new IDTokenValidator.

func (*IDTokenValidator) Validate

func (i *IDTokenValidator) Validate(idToken string, optional ValidationOptions) error

Validate validates the provided ID token against the values provided during the IDTokenValidator creation.

type Option

type Option func(*IDTokenValidator)

Option is used for passing options to an `IDTokenValidator`.

func WithClockTolerance

func WithClockTolerance(clockTolerance time.Duration) Option

WithClockTolerance configures the allowed clock tolerance when validating time based claims.

func WithHTTPClient

func WithHTTPClient(client *http.Client) Option

WithHTTPClient configures the HTTP Client used by the JWKS fetcher.

type ValidationOptions

type ValidationOptions struct {
	MaxAge       time.Duration
	Nonce        string
	Organization string
}

ValidationOptions allows validating optional claims that might not always be in the ID token.