authserver

Aug 20, 2026

Changes in this version

+ func NewSetupToken() string

Jul 10, 2026

Changes in this version

+ var ErrInvalidChallenge = errors.New("invalid_code_challenge")

+ var ErrInvalidClientMetadata = errors.New("invalid_client_metadata")

+ var ErrInvalidGrantRequest = errors.New("invalid_request")

+ var ErrInvalidRedirect = errors.New("invalid_redirect_uri")

+ var ErrInvalidTarget = errors.New("invalid_target")

+ func ApproveAuthorization(tx *sql.Tx, userId int, req models.AuthorizeApproveRequest, issuer string) (string, error)

+ func DenyAuthorization(ex lit.Executor, clientId, redirectUri, state string) (string, error)

+ func IssuerBaseURLFromHTTPRequest(r *http.Request) string

+ func RedeemAuthorizationCode(clientId, code, verifier, redirectUri, resource, issuer string) (*models.TokenSetResponse, error)

+ func RegisterClient(tx *sql.Tx, name string, redirectURIs []string) (*models.OauthClient, error)

+ func ValidateResource(resource, issuer string) error

Jul 2, 2026

Changes in this version

+ var ErrAccessDenied = errors.New("access_denied")

+ var ErrAuthorizationPending = errors.New("authorization_pending")

+ var ErrDeviceExpired = errors.New("device_code_expired")

+ var ErrDeviceNotFound = errors.New("device_not_found")

+ var ErrExpiredToken = errors.New("expired_token")

+ var ErrInvalidGrant = errors.New("invalid_grant")

+ var ErrSlowDown = errors.New("slow_down")

+ var ErrUnknownClient = errors.New("invalid_client")

+ func Approve(tx *sql.Tx, userCode string, userId int) error

+ func CreateDeviceAuth(clientId, baseURL string) (*models.DeviceAuthorizeResponse, error)

+ func Deny(tx *sql.Tx, userCode string) error

+ func IssueTokenSet(tx *sql.Tx, userId int, email, clientId string) (*models.TokenSetResponse, error)

+ func IssuerBaseURL() string

+ func IssuerBaseURLFromRequest(c *gin.Context) string

+ func NewPATToken() string

+ func PollDeviceToken(deviceCode string) (*models.TokenSetResponse, error)

+ func RevokeByToken(presented string) error

+ func RotateRefresh(presented string) (*models.TokenSetResponse, error)