fulcio

Documentation

Index

• Constants
• Variables
• func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, idToken, flow string) (string, string, error)
• type Signer
  • func NewSigner(ctx context.Context, idToken string) (*Signer, error)
  • func (f *Signer) PublicKey(ctx context.Context) (crypto.PublicKey, error)

Constants

const (
	FlowNormal = "normal"
	FlowDevice = "device"
	FlowToken  = "token"
)

Variables

var Roots *x509.CertPool

Functions

func GetCert

func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, idToken, flow string) (string, string, error)

GetCert returns the PEM-encoded signature of the OIDC identity returned as part of an interactive oauth2 flow plus the PEM-encoded cert chain.

Types

type Signer

type Signer struct {
	Cert  string
	Chain string

	signature.ECDSASignerVerifier
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(ctx context.Context, idToken string) (*Signer, error)

func (*Signer) PublicKey

func (f *Signer) PublicKey(ctx context.Context) (crypto.PublicKey, error)