downstreamsession

Documentation

Overview

Package downstreamsession provides some shared helpers for creating downstream OIDC sessions.

Index

• func GetDownstreamIdentityFromUpstreamIDToken(upstreamIDPConfig provider.UpstreamOIDCIdentityProviderI, ...) (string, string, []string, error)
• func GrantScopesIfRequested(authorizeRequester fosite.AuthorizeRequester)
• func MakeDownstreamSession(subject string, username string, groups []string) *openid.DefaultSession

Functions

func GetDownstreamIdentityFromUpstreamIDToken

func GetDownstreamIdentityFromUpstreamIDToken(
	upstreamIDPConfig provider.UpstreamOIDCIdentityProviderI,
	idTokenClaims map[string]interface{},
) (string, string, []string, error)

GetDownstreamIdentityFromUpstreamIDToken returns the mapped subject, username, and group names, in that order.

func GrantScopesIfRequested

func GrantScopesIfRequested(authorizeRequester fosite.AuthorizeRequester)

GrantScopesIfRequested auto-grants the scopes for which we do not require end-user approval, if they were requested.

func MakeDownstreamSession

func MakeDownstreamSession(subject string, username string, groups []string) *openid.DefaultSession

MakeDownstreamSession creates a downstream OIDC session.