CreateTokenExchangeRequest will be called after parsing and validating token exchange request. Stored request is not accessed later by op - so it is u

DefaultACRVerifier implements `ACRVerifier` returning an error if none of the provided values matches the acr claim

DefaultISSVerifier implements `ISSVerifier` returning an error if the iss claim doesn't match the expected issuer.

DeviceAccessToken attempts to obtain tokens from a Device Authorization, by means of polling as defined in RFC, section 3.3 and 3.4: https://www.rfc-e

DeviceAuthorization starts a new Device Authorization flow as defined in RFC 8628, section 3.1 and 3.2: https://www.rfc-editor.org/rfc/rfc8628#section

DeviceClient creates a device client with Basic authentication.

DeviceToken handles the OAuth 2.0 Device Authorization Grant It is called by the Token endpoint handler when grant_type has the value urn:ietf:params:

EXPECT returns an object that allows the caller to indicate expected use.

EXPECT returns an object that allows the caller to indicate expected use.

EndSession handles the OpenID Connect RP-Initiated Logout. https://openid.net/specs/openid-connect-rpinitiated-1_0.html There are no response requirem

ErrorHandler returns the handler used for callback errors

Exchange performs a token exchange appropriate for the grant type

ExchangeToken sends a token exchange request (rfc 8693) to te's token endpoint. SubjectToken and SubjectTokenType are required parameters.

func ExpectSigner(a op.Authorizer, t *testing.T) { mockA := a.(*MockAuthorizer) mockA.EXPECT().Signer().DoAndReturn( func() op.Signer { return

GenerateAndStoreCodeChallenge generates a PKCE code challenge and stores its verifier into a secure cookie

GenerateAndStoreCodeChallenge generates a PKCE code challenge and stores its verifier into a secure cookie

GetDeviceAuthorizationByUserCode returns the current state of the device authorization flow, identified by the user code.

GetDeviceAuthorizatonState returns the current state of the device authorization flow in the database. The method is polled until the authorization is

GetPrivateClaimsFromTokenExchangeRequest will be called during access token creation. Claims evaluation can be based on all validated request data ava

GetRevokeEndpoint returns the endpoint to revoke a specific token

Health returns a status of "ok" once the Server is listening. The recommended Response Data type is [Status].

Introspect handles the OAuth 2.0 Token Introspection endpoint. https://datatracker.ietf.org/doc/html/rfc7662 The recommended Response Data type is [oi

IsOAuth2Only specifies whether relaying party handles only oauth2 or oidc calls

JWTProfile handles the OAuth 2.0 JWT Profile Authorization Grant https://tools.ietf.org/html/rfc7523#section-2.1

JWTProfile handles the OAuth 2.0 JWT Profile Authorization Grant It is called by the Token endpoint handler when grant_type has the value urn:ietf:par

JWTProfileExchange handles the oauth2 jwt profile exchange

Logger returns the logger configured with [WithLogger], or [slog.Default] if none was set. Deprecated: configure logging with [slog.SetDefault].

Logger returns the logger configured with [WithLogger], or [slog.Default] if none was set. Deprecated: configure logging with [slog.SetDefault].