jwt

Dec 1, 2023

Changes in this version

+ const NoPadding

+ func MustGenerateRandomBase64(length int, padding rune) string

type Audience

+ func (aud Audience) ApplyClaims(dest *Claims)

Nov 10, 2023

Changes in this version

+ func GenerateBase64EdDSA() (string, string, error)

+ func MustGenerateRandomString(length int) string

Sep 8, 2023

Changes in this version

type TokenValidatorFunc

+ func Future(dur time.Duration) TokenValidatorFunc

Mar 27, 2022

Changes in this version

type Key

+ Decrypt InjectFunc

+ Encrypt InjectFunc

Mar 27, 2022

Changes in this version

+ func GenerateEdDSA() (ed25519.PublicKey, ed25519.PrivateKey, error)

type Claims

+ OriginID string

Mar 21, 2022

Changes in this version

type Key

+ MaxAge time.Duration

Mar 13, 2022

Changes in this version

+ type AlgParser interface

+ Parse func(private, public []byte) (PrivateKey, PublicKey, error)

+ type KeysConfiguration []struct

+ func (c KeysConfiguration) Load() (Keys, error)

+ func (c KeysConfiguration) MustLoad() Keys

Feb 28, 2021

Changes in this version

+ var ErrEmptyKid = errors.New("jwt: kid is empty")

+ var ErrUnknownKid = errors.New("jwt: unknown kid")

+ type HeaderWithKid struct

+ Alg string

+ Kid string

+ type Key struct

+ Alg Alg

+ ID string

+ Private PrivateKey

+ Public PublicKey

+ type Keys map[string]*Key

+ func (keys Keys) Get(kid string) (*Key, bool)

+ func (keys Keys) Register(alg Alg, kid string, pubKey PublicKey, privKey PrivateKey)

+ func (keys Keys) SignToken(kid string, claims interface{}, opts ...SignOption) ([]byte, error)

+ func (keys Keys) ValidateHeader(alg string, headerDecoded []byte) (PublicKey, error)

+ func (keys Keys) VerifyToken(kid string, token []byte, claimsPtr interface{}, validators ...TokenValidator) error

Feb 11, 2021

Changes in this version

+ func SignEncryptedWithHeader(alg Alg, key PrivateKey, encrypt InjectFunc, claims interface{}, ...) ([]byte, error)

+ func SignWithHeader(alg Alg, key PrivateKey, claims interface{}, customHeader interface{}, ...) ([]byte, error)

+ type HeaderValidator func(alg string, headerDecoded []byte) (PublicKey, error)

type VerifiedToken

+ func VerifyEncryptedWithHeaderValidator(alg Alg, key PublicKey, decrypt InjectFunc, token []byte, ...) (*VerifiedToken, error)

+ func VerifyWithHeaderValidator(alg Alg, key PublicKey, token []byte, headerValidator HeaderValidator, ...) (*VerifiedToken, error)

Dec 25, 2020

Changes in this version

+ var CompareHeader = compareHeader

Dec 15, 2020

Changes in this version

+ type Audience []string

+ func (aud *Audience) UnmarshalJSON(data []byte) (err error)

+ type UnverifiedToken struct

+ Header []byte

+ Payload []byte

+ Signature []byte

+ func Decode(token []byte) (*UnverifiedToken, error)

+ func (t *UnverifiedToken) Claims(dest interface{}) error

Nov 7, 2020

Changes in this version

+ var Plain = TokenValidatorFunc(func(token []byte, standardClaims Claims, err error) error { ... })

Nov 2, 2020

Changes in this version

type Blocklist

+ GetKey func(token []byte, claims Claims) string

Oct 30, 2020

Changes in this version

+ func BytesQuote(b []byte) []byte

+ func HasRequiredJSONTag(field reflect.StructField) bool

type Blocklist

+ Clock func() time.Time

type Claims

+ func (c Claims) Age() time.Duration

+ func (c Claims) ExpiresAt() time.Time

+ func (c Claims) Timeleft() time.Duration

+ type TokenPair struct

+ AccessToken json.RawMessage

+ RefreshToken json.RawMessage

+ func NewTokenPair(accessToken, refreshToken []byte) TokenPair

Oct 28, 2020

Changes in this version

+ var ErrExpected = errors.New("field not match")

+ func SignEncrypted(alg Alg, key PrivateKey, encrypt InjectFunc, claims interface{}, ...) ([]byte, error)

+ type Expected Claims

+ func (e Expected) ValidateToken(token []byte, c Claims, err error) error

+ type InjectFunc func(plainPayload []byte) ([]byte, error)

+ type TokenValidatorFunc func(token []byte, standardClaims Claims, err error) error

+ func Leeway(leeway time.Duration) TokenValidatorFunc

+ func (fn TokenValidatorFunc) ValidateToken(token []byte, standardClaims Claims, err error) error

type VerifiedToken

+ func VerifyEncrypted(alg Alg, key PublicKey, decrypt InjectFunc, token []byte, ...) (*VerifiedToken, error)

Oct 27, 2020

Changes in this version

+ var Decrypt func(encryptedPayload []byte) ([]byte, error) = nil

+ var Encrypt func(plainPayload []byte) ([]byte, error) = nil

+ var ErrDecrypt = errors.New("decrypt: payload authentication failed")

+ func GCM(key, additionalData []byte) error

Oct 26, 2020

Changes in this version

+ var Clock = time.Now

+ var ErrBlocked = errors.New("token is blocked")

+ var ErrExpired = errors.New("token expired")

+ var ErrInvalidKey = errors.New("invalid key")

+ var ErrIssuedInTheFuture = errors.New("token issued in the future")

+ var ErrMissing = errors.New("token is empty")

+ var ErrMissingKey = errors.New("token is missing a required field")

+ var ErrNotValidYet = errors.New("token not valid yet")

+ var ErrTokenAlg = errors.New("unexpected token algorithm")

+ var ErrTokenForm = errors.New("invalid token form")

+ var ErrTokenSignature = errors.New("invalid token signature")

+ var Marshal = func(v interface{}) ([]byte, error)

+ var ReadFile = ioutil.ReadFile

+ var Unmarshal = defaultUnmarshal

+ func Base64Decode(src []byte) ([]byte, error)

+ func Base64Encode(src []byte) []byte

+ func BytesToString(b []byte) string

+ func LoadHMAC(filenameOrRaw string) ([]byte, error)

+ func LoadPrivateKeyECDSA(filename string) (*ecdsa.PrivateKey, error)

+ func LoadPrivateKeyEdDSA(filename string) (ed25519.PrivateKey, error)

+ func LoadPrivateKeyRSA(filename string) (*rsa.PrivateKey, error)

+ func LoadPublicKeyECDSA(filename string) (*ecdsa.PublicKey, error)

+ func LoadPublicKeyEdDSA(filename string) (ed25519.PublicKey, error)

+ func LoadPublicKeyRSA(filename string) (*rsa.PublicKey, error)

+ func MaxAgeMap(maxAge time.Duration, claims Map)

+ func Merge(claims interface{}, other interface{}) []byte

+ func MustGenerateRandom(n int) []byte

+ func MustLoadECDSA(privateKeyFilename, publicKeyFilename string) (*ecdsa.PrivateKey, *ecdsa.PublicKey)

+ func MustLoadEdDSA(privateKeyFilename, publicKeyFilename string) (ed25519.PrivateKey, ed25519.PublicKey)

+ func MustLoadHMAC(filenameOrRaw string) []byte

+ func MustLoadRSA(privateKeyFilename, publicKeyFilename string) (*rsa.PrivateKey, *rsa.PublicKey)

+ func ParsePrivateKeyECDSA(key []byte) (*ecdsa.PrivateKey, error)

+ func ParsePrivateKeyEdDSA(key []byte) (ed25519.PrivateKey, error)

+ func ParsePrivateKeyRSA(key []byte) (*rsa.PrivateKey, error)

+ func ParsePublicKeyECDSA(key []byte) (*ecdsa.PublicKey, error)

+ func ParsePublicKeyEdDSA(key []byte) (ed25519.PublicKey, error)

+ func ParsePublicKeyRSA(key []byte) (*rsa.PublicKey, error)

+ func Sign(alg Alg, key PrivateKey, claims interface{}, opts ...SignOption) ([]byte, error)

+ func UnmarshalWithRequired(payload []byte, dest interface{}) error

+ type Alg interface

+ Name func() string

+ Sign func(key PrivateKey, headerAndPayload []byte) ([]byte, error)

+ Verify func(key PublicKey, headerAndPayload []byte, signature []byte) error

+ var ES256 Alg = &algECDSA{ ... }

+ var ES384 Alg = &algECDSA{ ... }

+ var ES512 Alg = &algECDSA{ ... }

+ var EdDSA Alg = &algEdDSA{ ... }

+ var HS256 Alg = &algHMAC{ ... }

+ var HS384 Alg = &algHMAC{ ... }

+ var HS512 Alg = &algHMAC{ ... }

+ var NONE Alg = &algNONE{}

+ var PS256 Alg = &algRSAPSS{ ... }

+ var PS384 Alg = &algRSAPSS{ ... }

+ var PS512 Alg = &algRSAPSS{ ... }

+ var RS256 Alg = &algRSA{ ... }

+ var RS384 Alg = &algRSA{ ... }

+ var RS512 Alg = &algRSA{ ... }

+ type Blocklist struct

+ func NewBlocklist(gcEvery time.Duration) *Blocklist

+ func NewBlocklistContext(ctx context.Context, gcEvery time.Duration) *Blocklist

+ func (b *Blocklist) Count() int

+ func (b *Blocklist) Del(token []byte)

+ func (b *Blocklist) GC() int

+ func (b *Blocklist) Has(token []byte) bool

+ func (b *Blocklist) InvalidateToken(token []byte, expiry int64)

+ func (b *Blocklist) ValidateToken(token []byte, _ Claims, err error) error

+ type Claims struct

+ Audience []string

+ Expiry int64

+ ID string

+ IssuedAt int64

+ Issuer string

+ NotBefore int64

+ Subject string

+ func (c Claims) ApplyClaims(dest *Claims)

+ type Map = map[string]interface

+ type PrivateKey interface

+ type PublicKey interface

+ type SignOption interface

+ ApplyClaims func(*Claims)

+ type SignOptionFunc func(*Claims)

+ func MaxAge(maxAge time.Duration) SignOptionFunc

+ func (f SignOptionFunc) ApplyClaims(c *Claims)

+ type TokenValidator interface

+ ValidateToken func(token []byte, claims Claims, err error) error

+ type VerifiedToken struct

+ Header []byte

+ Payload []byte

+ Signature []byte

+ StandardClaims Claims

+ Token []byte

+ func Verify(alg Alg, key PublicKey, token []byte, validators ...TokenValidator) (*VerifiedToken, error)

+ func (t *VerifiedToken) Claims(dest interface{}) error