keystone

type Authenticator struct {
	// contains filtered or unexported fields
}

type OIDCTokenExchangeResult struct {
	Token *struct {
		// Methods will list the authentication methods e.g. openid.
		Methods []string `json:"methods"`
		// User contains metadata about the mapped user.
		User *struct {
			// Domain contains metadata about the user's domain.
			Domain *struct {
				// ID is the globally unique domain ID.
				ID string `json:"id"`
				// Name is a human readable domain name within the scope
				// of its parent domain.
				Name string `json:"name"`
			} `json:"domain"`
			// ID is the globally unique user ID.
			ID string `json:"id"`
			// Name is the human readable user name that the mapping extracts
			// from the OIDC ID token.  This is not guaranteed to be an email
			// address.
			Name string `json:"name"`
			// Federation contains metadata from the federation engine.
			Federation *struct {
				// Groups lists the groups mapped from the claims in the
				// OIDC ID token.
				Groups []struct {
					// ID is the globally unique group ID.
					ID string `json:"id"`
				} `json:"groups"`
				// IdentityProvider contains metadata about the IdP.
				IdentityProvider *struct {
					// ID is the globally unique ID of the IdP.
					ID string `json:"id"`
				} `json:"identity_provider"`
				// Protocol contains metadata about the protocol.
				Protocol *struct {
					// ID is the globally unique ID of the protocol.
					ID string `json:"id"`
				} `json:"protocol"`
			} `json:"OS-FEDERATION"`
		} `json:"user"`
		// AuditIDs provide tracing for the user.
		AuditIDs []string `json:"audit_ids"`
		// ExpiresAt indicates the time the token will cease to work.
		ExpiresAt time.Time `json:"expires_at"`
		// IssuedAt indicates the time the token was issued.
		IssuedAt time.Time `json:"issued_at"`
	} `json:"token"`
}

type Options struct {
	// Endpoint is the Keystone Endpoint.
	Endpoint string

	// Domain is the default domain users live under.
	Domain string
	// contains filtered or unexported fields
}