jose

package module

Go to main page

Versions in this module

v2

v2.4.0

Apr 6, 2023

v2.3.0

Mar 27, 2023

v2.2.6

Mar 10, 2023

v2.2.5

Mar 10, 2023

v2.2.4

Mar 10, 2023

v2.2.3

Mar 10, 2023

Changes in this version

type SignatureConfig

+ PropagateIssAsTenantId string

v2.2.2

Mar 8, 2023

Changes in this version

type SignatureConfig

+ ReqClaimFieldsEquals map[string]string

v2.2.1

Mar 8, 2023

v2.2.0

Mar 8, 2023

Changes in this version

+ func CustomFieldsMatcher(claims map[string]interface{}, wantedFields map[string]string) bool

v2.1.2

Mar 8, 2023

v2.1.1

Mar 8, 2023

Changes in this version

+ const SignerNamespace

+ const ValidatorNamespace

+ var DefaultEnabledCipherSuites = []uint16

+ var ErrInsecureJWKSource = errors.New("JWK client is using an insecure connection to the JWK service")

+ var ErrKeyExpired = errors.New("key exists but is expired")

+ var ErrNoKeyFound = errors.New("no Keys have been found")

+ var ErrNoSignerCfg = errors.New("no signer config")

+ var ErrNoValidatorCfg = errors.New("no validator config")

+ var ErrPinnedKeyNotFound = errors.New("JWK client did not find a pinned key")

+ var MaxKeyAgeNoCheck = time.Duration(-1)

+ func CalculateHeadersToPropagate(propagationCfg [][]string, claims map[string]interface{}) (map[string]string, error)

+ func CanAccess(roleKey string, claims map[string]interface{}, required []string) bool

+ func CanAccessNested(roleKey string, claims map[string]interface{}, required []string) bool

+ func CompoundX5TKeyIDGetter(key *jose.JSONWebKey) string

+ func CompoundX5TTokenKeyIDGetter(token *jwt.JSONWebToken) string

+ func DecodeFingerprints(in []string) ([][]byte, error)

+ func DefaultKeyIDGetter(key *jose.JSONWebKey) string

+ func DefaultTokenKeyIDGetter(token *jwt.JSONWebToken) string

+ func NewSigner(cfg *config.EndpointConfig, te auth0.RequestTokenExtractor) (*SignerConfig, Signer, error)

+ func NewValidator(signatureConfig *SignatureConfig, ef ExtractorFactory) (*auth0.JWTValidator, error)

+ func ScopesAllMatcher(scopesKey string, claims map[string]interface{}, requiredScopes []string) bool

+ func ScopesAnyMatcher(scopesKey string, claims map[string]interface{}, requiredScopes []string) bool

+ func ScopesDefaultMatcher(_ string, _ map[string]interface{}, _ []string) bool

+ func SignFields(keys []string, signer Signer, response *proxy.Response) error

+ func X5TKeyIDGetter(key *jose.JSONWebKey) string

+ func X5TTokenKeyIDGetter(token *jwt.JSONWebToken) string

+ type ChainedRejecterFactory []RejecterFactory

+ func (c ChainedRejecterFactory) New(l logging.Logger, cfg *config.EndpointConfig) Rejecter

+ type Claims map[string]interface

+ func (c Claims) Get(name string) (string, bool)

+ type Dialer struct

+ func NewDialer(cfg SecretProviderConfig, tlsConfig *tls.Config) *Dialer

+ func (d *Dialer) DialContext(ctx context.Context, network, address string) (net.Conn, error)

+ func (d *Dialer) DialTLSContext(ctx context.Context, network, addr string) (net.Conn, error)

+ type ExtractorFactory func(string) func(r *http.Request) (*jwt.JSONWebToken, error)

+ type FileKeyCacher struct

+ func NewFileKeyCacher(data []byte, keyIdentifyStrategy string) (*FileKeyCacher, error)

+ func (f *FileKeyCacher) Add(keyID string, _ []jose.JSONWebKey) (*jose.JSONWebKey, error)

+ func (f *FileKeyCacher) Get(keyID string) (*jose.JSONWebKey, error)

+ type FixedRejecter bool

+ func (f FixedRejecter) Reject(_ map[string]interface{}) bool

+ type JWKClient struct

+ func NewJWKClientWithCache(options JWKClientOptions, extractor auth0.RequestTokenExtractor, ...) *JWKClient

+ func SecretProvider(cfg SecretProviderConfig, te auth0.RequestTokenExtractor) (*JWKClient, error)

+ func (j *JWKClient) GetSecret(r *http.Request) (interface{}, error)

+ type JWKClientOptions struct

+ KeyIdentifyStrategy string

+ type KeyCacher interface

+ Add func(keyID string, webKeys []jose.JSONWebKey) (*jose.JSONWebKey, error)

+ Get func(keyID string) (*jose.JSONWebKey, error)

+ func NewMemoryKeyCacher(maxKeyAge time.Duration, maxCacheSize int, keyIdentifyStrategy string) KeyCacher

+ type KeyIDGetter interface

+ Get func(*jose.JSONWebKey) string

+ func KeyIDGetterFactory(keyIdentifyStrategy string) KeyIDGetter

+ type KeyIDGetterFunc func(*jose.JSONWebKey) string

+ func (f KeyIDGetterFunc) Get(key *jose.JSONWebKey) string

+ type MemoryKeyCacher struct

+ func (mkc *MemoryKeyCacher) Add(keyID string, downloadedKeys []jose.JSONWebKey) (*jose.JSONWebKey, error)

+ func (mkc *MemoryKeyCacher) Get(keyID string) (*jose.JSONWebKey, error)

+ type NopRejecterFactory struct

+ func (NopRejecterFactory) New(_ logging.Logger, _ *config.EndpointConfig) Rejecter

+ type Rejecter interface

+ Reject func(map[string]interface{}) bool

+ type RejecterFactory interface

+ New func(logging.Logger, *config.EndpointConfig) Rejecter

+ type RejecterFactoryFunc func(logging.Logger, *config.EndpointConfig) Rejecter

+ func (f RejecterFactoryFunc) New(l logging.Logger, cfg *config.EndpointConfig) Rejecter

+ type RejecterFunc func(map[string]interface{}) bool

+ func (r RejecterFunc) Reject(v map[string]interface{}) bool

+ type SecretProviderConfig struct

+ AllowInsecure bool

+ CacheDuration uint32

+ CacheEnabled bool

+ CipherKey []byte

+ Cs []uint16

+ Fingerprints [][]byte

+ KeyIdentifyStrategy string

+ LocalCA string

+ LocalPath string

+ SecretURL string

+ URI string

+ type SignatureConfig struct

+ Alg string

+ Audience []string

+ CacheDuration uint32

+ CacheEnabled bool

+ CipherKey []byte

+ CipherSuites []uint16

+ CookieKey string

+ CustomFieldsEquals []map[string]string

+ DisableJWKSecurity bool

+ Fingerprints []string

+ Issuer string

+ KeyIdentifyStrategy string

+ LocalCA string

+ LocalPath string

+ OperationDebug bool

+ PropagateClaimsToHeader [][]string

+ Roles []string

+ RolesKey string

+ RolesKeyIsNested bool

+ Scopes []string

+ ScopesKey string

+ ScopesMatcher string

+ SecretURL string

+ URI string

+ func GetSignatureConfig(cfg *config.EndpointConfig) (*SignatureConfig, error)

+ type Signer func(interface{}) (string, error)

+ type SignerConfig struct

+ Alg string

+ CipherKey []byte

+ CipherSuites []uint16

+ DisableJWKSecurity bool

+ Fingerprints []string

+ FullSerialization bool

+ KeyID string

+ KeysToSign []string

+ LocalCA string

+ LocalPath string

+ SecretURL string

+ URI string

+ type TokenIDGetter interface

+ Get func(*jwt.JSONWebToken) string

+ func TokenIDGetterFactory(keyIdentifyStrategy string) TokenIDGetter

+ type TokenKeyIDGetterFunc func(*jwt.JSONWebToken) string

+ func (f TokenKeyIDGetterFunc) Get(token *jwt.JSONWebToken) string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL