GetClientByClientID loads a Client. The returned Client is never cached and is only used to handle the current request.

IssuerFromContext reads the issuer from the context (set by an IssuerInterceptor) it will return an empty string if not found

WriteError asserts for a [StatusError] containing an [oidc.Error]. If no `StatusError` is found, the status code will default to [http.StatusBadReques

MarshalJSON implements the json.Marshaler interface for ApplicationType

NewResponse creates a new response for data, without custom headers.

EXPECT returns an object that allows the caller to indicate expected use.

NewStatusError sets the parent and statusCode to a new StatusError. It is recommended for parent to be an [oidc.Error]. Typically, implementations sh

OAuthConfig returns the oauth2 Config

DefaultToServerError checks if the error is an Error if not the provided error will be wrapped into a ServerError

EXPECT returns an object that allows the caller to indicate expected use.

NewMockConfiguration creates a new mock instance.

NewMockStorage creates a new mock instance.

NewRelyingPartyOIDC creates an (OIDC) RelyingParty with the given issuer, clientID, clientSecret, redirectURI, scopes and possible configOptions it wi

mergeAndMarshalClaims merges registered and the custom claims map into a single JSON object. Registered fields overwrite custom claims.

unmarshalJSONMulti unmarshals the same JSON data into multiple destinations. Each destination must be a pointer, as per json.Unmarshal rules. Returns

CreateAccessToken creates an access token and may return a refresh token from storage. This function always creates the access token using the ID retu

EXPECT returns an object that allows the caller to indicate expected use.

NewMockAuthorizer creates a new mock instance.

ContextWithIssuer returns a new context with issuer set to it.

CookieHandler returns a http cookie handler used for various state transfer cookies

DefaultAZPVerifier implements `AZPVerifier` returning an error if the azp claim is set and doesn't match the clientID.

HttpClient returns an http client used for calls to the openid provider, e.g. calling token endpoint

RegisterClients enables you to register clients for the example implementation there are some clients (web and native) to try out different cases add

SetupServer creates an OIDC server with Issuer=http://localhost:<port> Use one of the pre-made clients in storage/clients.go or register a new one.

ValidateGrantType ensures that the requested grant_type is allowed by the client

VerifyJWTAssertion verifies the assertion string from JWT Profile (authorization grant and client authentication) checks audience, exp, iat, signatur

WebClient will create a client of type web, which will always use Basic Auth and allow the use of refresh tokens user-defined redirectURIs may include

AccessTokenTypeString retrieves an enum value from the enum constants string name. Throws an error if the param is not part of the enum.

ApplicationTypeString retrieves an enum value from the enum constants string name. Throws an error if the param is not part of the enum.

AsStatusError unwraps a StatusError from err and returns it unmodified if found. If no StatusError was found, a new one is returned with statusCode se

AuthResponseURL encodes the authorization response (successful and error) and sets it as query or fragment values depending on the response_mode and r

AuthURLHandler extends the `AuthURL` method with an http redirect handler including handling setting cookie for secure `state` transfer. Custom parame

AuthorizeClientIDSecret authorizes a client by validating the client_id and client_secret (Basic Auth and POST)