IDTokenVerifier returns the verifier used for oidc id_token verification

IsPKCE returns if authorization is done using `Authorization Code Flow with Proof Key for Code Exchange (PKCE)`

Issuer returns the issuer of the oidc config

NativeClient will create a client of type native, which will always use PKCE and allow the use of refresh tokens user-defined redirectURIs may include

NewAccessTokenVerifier returns a AccessTokenVerifier suitable for access token verification.

NewEncoder returns a schema Encoder with a registered encoder for SpaceDelimitedArray.

NewIDTokenVerifier returns a oidc.Verifier suitable for ID token verification.

NewJWTProfileVerifier creates an oidc.Verifier for JWT Profile assertions (authorization grant and client authentication)

NewMockClient creates a new mock instance.

NewOpenIDProvider creates a provider. The provider provides (with HttpHandler()) a http.Router that handles a suite of endpoints (some paths can be ov

NewProvider creates a provider with a router on it's embedded http.Handler. Issuer is a function that must return the issuer on every request. Typical

ParseAuthenticatedTokenRequest parses the client_id and client_secret from the HTTP request from either HTTP Basic Auth header or form body and sets t

ParseLocales parses a slice of strings into Locales. If an entry causes a parse error or is undefined, it is ignored and not set to Locales.

RegisterLegacyServer registers a [LegacyServer] or an extension thereof. It takes care of registering the IssuerFromRequest middleware. The authorizeC

RevokeToken should revoke a token. In the situation that the original request was to revoke an access token, then tokenOrTokenID will be a tokenID and

Signer is used if the relaying party uses the JWT Profile

StoreDeviceAuthorization stores a new device authorization request in the database. User code will be used by the user to complete the login flow and

UserinfoCallback wraps the callback function of the CodeExchangeHandler and calls the userinfo endpoint with the access token on success it will pass

ValidDPoPJKT reports whether value is an unpadded base64url-encoded SHA-256 JWK thumbprint. Experimental: OpenID Connect Key Binding 1.0 is a draft s

ValidateAuthReqIDTokenHint validates the id_token_hint (if passed as parameter in the request) and returns the `sub` claim

ValidateAuthReqPrompt validates the passed prompt values and sets max_age to 0 if prompt login is present

ValidateAuthReqRedirectURI validates the passed redirect_uri and response_type to the registered uris and client type

ValidateAuthReqResponseType validates the passed response_type to the registered response types

ValidateAuthReqScopes validates the passed scopes and deletes any unsupported scopes. An error is returned if scopes is empty.

VerifyIDToken validates the id token according to https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation

WithAllowInsecure allows the use of http (instead of https) for issuers this is not recommended for production use and violates the OIDC specification

WithJWTProfile creates a signer used for the JWT Profile Client Authentication on the token endpoint When creating the signer, be sure to include the

WithKeyBinding enables OpenID Connect Key Binding for the authorization code, refresh and device authorization flows. The RP appends the `bound_key` s

accessToken will store an access_token in-memory based on the provided information

htuClaim returns the DPoP htu value defined in RFC 9449, section 4.2, i.e., removing the query and fragment from a URI.

verifyKeyBindingIDToken checks that token is actually bound to the RP's binding key, by requiring the protected `typ` header to be [oidc.IDTokenTypeDP

withURLParam sets custom url parameters. This is the generalized, unexported, function used by both URLParamOpt and AuthURLOpt.

AuthRequestByCode returns the AuthRequest previously created from Storage corresponding to the auth code or an error

AuthResponseCode handles the creation of a successful authentication response using an authorization code

AuthResponseFormPost responds a html page that automatically submits the form which contains the auth response parameters

AuthURL returns the auth request url (wrapping the oauth2 `AuthCodeURL`)

BuildAuthResponseCallbackURL generates the callback URL for a successful authorization code response

CallDeviceAccessTokenEndpointWithAuthFn calls the device access token endpoint, accepting an authFn for custom authentication.

CallDeviceAuthorizationEndpoint calls the device authorization endpoint.

The TokenRequest parameter of CreateAccessAndRefreshTokens can be any of: * TokenRequest as returned by ClientCredentialsStorage.ClientCredentialsTok

The TokenRequest parameter of CreateAccessToken can be any of: * TokenRequest as returned by ClientCredentialsStorage.ClientCredentialsTokenRequest,