provider

Documentation

Index

• type Config
• type JWTWellKnownOpenIDIssuerConfigurationClaims
• type Service
  • func NewService(config *Config) *Service
  • func (s *Service) GetOpenIDCredentialIssuerConfig(issuerProfile *profileapi.Issuer) (*issuer.WellKnownOpenIDIssuerConfiguration, string, error)

Types

type Config

type Config struct {
	ExternalHostURL string
	KMSRegistry     kmsRegistry
	CryptoJWTSigner cryptoJWTSigner
}

type JWTWellKnownOpenIDIssuerConfigurationClaims

type JWTWellKnownOpenIDIssuerConfigurationClaims struct {
	*jwt.Claims
	*issuer.WellKnownOpenIDIssuerConfiguration
}

JWTWellKnownOpenIDIssuerConfigurationClaims is JWT Claims extension by WellKnownOpenIDIssuerConfiguration.

type Service

type Service struct {
	// contains filtered or unexported fields
}

func NewService

func NewService(config *Config) *Service

func (*Service) GetOpenIDCredentialIssuerConfig

func (s *Service) GetOpenIDCredentialIssuerConfig(
	issuerProfile *profileapi.Issuer) (*issuer.WellKnownOpenIDIssuerConfiguration, string, error)

GetOpenIDCredentialIssuerConfig returns issuer.WellKnownOpenIDIssuerConfiguration object, and it's JWT signed representation, if this feature is enabled for specific profile.

# Note, that if the Credential Issuer wants to enforce use of signed metadata, it omits the respective metadata parameters from the unsigned part of the Credential Issuer metadata. In this case, HTTP response should be:

{
 "signed_metadata": "jwt_representation"
}

Used for creating GET .well-known/openid-credential-issuer VCS IDP response.