auth

package

v0.1.34 Latest Latest Go to latest Published: May 30, 2025 License: Apache-2.0 Imports: 12 Imported by: 1

Details

This section is empty.

This section is empty.

func ExtractEmail(token string) (email string, verified bool, err error)

func ExtractExpiry(token string) (time.Time, error)

func ExtractIssuer(token string) (string, error)

func ExtractIssuerAndSubject(token string) (string, string, error)

func ExtractRefreshExpiry(token string) (time.Time, error)

func GetToken(ctx context.Context) string

GetToken fetches the token from the context.

func NewChainctlTokenSource(ctx context.Context, opts ...Option) oauth2.TokenSource

func NewFromContext(_ context.Context, requireTransportSecurity bool) credentials.PerRPCCredentials

NewFromContext creates a new credentials.PerRPCCredentials based on a token stored in context. This allows callers to provide a token for each RPC.

func NewFromFile(ctx context.Context, path string, requireTransportSecurity bool) credentials.PerRPCCredentials

NewFromFile attempts to create a new credentials.PerRPCCredentials based on the provided file. Returns nil if not found.

func NewFromToken(_ context.Context, token string, requireTransportSecurity bool) credentials.PerRPCCredentials

NewFromToken attempts to create a new credentials.PerRPCCredentials based on provided OIDC token.

func NormalizeIssuer(issuer string) string

NormalizeIssuer massages an issuer string into a canonical form, such as attaching a scheme when certain "special" vendors omit them.

func WithToken(ctx context.Context, authz string) context.Context

WithToken associates the token with the returned context.

type Actor struct {
	Audience string `json:"aud"`
	Issuer   string `json:"iss"`
	Subject  string `json:"sub"`
}

func ExtractActor(token string) (*Actor, error)

type Option func(*options)

func WithAudience(aud string) Option

func WithIssuer(iss string) Option

Path	Synopsis
aws
deviceflow
ggcr Package ggcr provides a go-containerregistry authn.Keychain for the cgr.dev registry.	Package ggcr provides a go-containerregistry authn.Keychain for the cgr.dev registry.
headless
login Package login implements client login functionality shared between various clients	Package login implements client login functionality shared between various clients
token