package jose

import "k8s.io/kubernetes/Godeps/_workspace/src/github.com/coreos/go-oidc/jose"

Index ¶

• Constants
• type Claims
• func (c Claims) Add(name string, value interface{})
• func (c Claims) Int64Claim(name string) (int64, bool, error)
• func (c Claims) StringClaim(name string) (string, bool, error)
• func (c Claims) TimeClaim(name string) (time.Time, bool, error)
• type JOSEHeader
• func (j JOSEHeader) Validate() error
• type JWK
• func (j *JWK) MarshalJSON() ([]byte, error)
• func (j *JWK) UnmarshalJSON(data []byte) error
• type JWS
• func ParseJWS(raw string) (JWS, error)
• type JWT
• func NewJWT(header JOSEHeader, claims Claims) (jwt JWT, err error)
• func NewSignedJWT(claims map[string]interface{}, s Signer) (*JWT, error)
• func ParseJWT(token string) (jwt JWT, err error)
• func (j *JWT) Claims() (Claims, error)
• func (j *JWT) Data() string
• func (j *JWT) Encode() string
• func (j *JWT) KeyID() (string, bool)
• type Signer
• type SignerHMAC
• func NewSignerHMAC(kid string, secret []byte) *SignerHMAC
• func (s *SignerHMAC) Sign(data []byte) ([]byte, error)
• type SignerRSA
• func NewSignerRSA(kid string, key rsa.PrivateKey) *SignerRSA
• func (s *SignerRSA) Sign(data []byte) ([]byte, error)
• type Verifier
• func NewVerifier(jwk JWK) (Verifier, error)
• type VerifierHMAC
• func NewVerifierHMAC(jwk JWK) (*VerifierHMAC, error)
• func (v *VerifierHMAC) Alg() string
• func (v *VerifierHMAC) ID() string
• func (v *VerifierHMAC) Verify(sig []byte, data []byte) error
• type VerifierRSA
• func NewVerifierRSA(jwk JWK) (*VerifierRSA, error)
• func (v *VerifierRSA) Alg() string
• func (v *VerifierRSA) ID() string
• func (v *VerifierRSA) Verify(sig []byte, data []byte) error

Constants ¶

const (
	HeaderMediaType    = "typ"
	HeaderKeyAlgorithm = "alg"
	HeaderKeyID        = "kid"
)

Types ¶

type Claims ¶

type Claims map[string]interface{}

func (Claims) Add ¶

func (c Claims) Add(name string, value interface{})

func (Claims) Int64Claim ¶

func (c Claims) Int64Claim(name string) (int64, bool, error)

func (Claims) StringClaim ¶

func (c Claims) StringClaim(name string) (string, bool, error)

func (Claims) TimeClaim ¶

func (c Claims) TimeClaim(name string) (time.Time, bool, error)

type JOSEHeader ¶

type JOSEHeader map[string]string

func (JOSEHeader) Validate ¶

func (j JOSEHeader) Validate() error

type JWK ¶

type JWK struct {
	ID       string
	Type     string
	Alg      string
	Use      string
	Exponent int
	Modulus  *big.Int
	Secret   []byte
}

JSON Web Key https://tools.ietf.org/html/draft-ietf-jose-json-web-key-36#page-5

func (*JWK) MarshalJSON ¶

func (j *JWK) MarshalJSON() ([]byte, error)

func (*JWK) UnmarshalJSON ¶

func (j *JWK) UnmarshalJSON(data []byte) error

type JWS ¶

type JWS struct {
	RawHeader  string
	Header     JOSEHeader
	RawPayload string
	Payload    []byte
	Signature  []byte
}

func ParseJWS ¶

func ParseJWS(raw string) (JWS, error)

Given a raw encoded JWS token parses it and verifies the structure.

type JWT ¶

type JWT JWS

func NewJWT ¶

func NewJWT(header JOSEHeader, claims Claims) (jwt JWT, err error)

func NewSignedJWT ¶

func NewSignedJWT(claims map[string]interface{}, s Signer) (*JWT, error)

func ParseJWT ¶

func ParseJWT(token string) (jwt JWT, err error)

func (*JWT) Claims ¶

func (j *JWT) Claims() (Claims, error)

func (*JWT) Data ¶

func (j *JWT) Data() string

Encoded data part of the token which may be signed.

func (*JWT) Encode ¶

func (j *JWT) Encode() string

Full encoded JWT token string in format: header.claims.signature

func (*JWT) KeyID ¶

func (j *JWT) KeyID() (string, bool)

type Signer ¶

type Signer interface {
	Verifier
	Sign(data []byte) (sig []byte, err error)
}

type SignerHMAC ¶

type SignerHMAC struct {
	VerifierHMAC
}

func NewSignerHMAC ¶

func NewSignerHMAC(kid string, secret []byte) *SignerHMAC

func (*SignerHMAC) Sign ¶

func (s *SignerHMAC) Sign(data []byte) ([]byte, error)

type SignerRSA ¶

type SignerRSA struct {
	PrivateKey rsa.PrivateKey
	VerifierRSA
}

func NewSignerRSA ¶

func NewSignerRSA(kid string, key rsa.PrivateKey) *SignerRSA

func (*SignerRSA) Sign ¶

func (s *SignerRSA) Sign(data []byte) ([]byte, error)

type Verifier ¶

type Verifier interface {
	ID() string
	Alg() string
	Verify(sig []byte, data []byte) error
}

func NewVerifier ¶

func NewVerifier(jwk JWK) (Verifier, error)

type VerifierHMAC ¶

type VerifierHMAC struct {
	KeyID  string
	Hash   crypto.Hash
	Secret []byte
}

func NewVerifierHMAC ¶

func NewVerifierHMAC(jwk JWK) (*VerifierHMAC, error)

func (*VerifierHMAC) Alg ¶

func (v *VerifierHMAC) Alg() string

func (*VerifierHMAC) ID ¶

func (v *VerifierHMAC) ID() string

func (*VerifierHMAC) Verify ¶

func (v *VerifierHMAC) Verify(sig []byte, data []byte) error

type VerifierRSA ¶

type VerifierRSA struct {
	KeyID     string
	Hash      crypto.Hash
	PublicKey rsa.PublicKey
}

func NewVerifierRSA ¶

func NewVerifierRSA(jwk JWK) (*VerifierRSA, error)

func (*VerifierRSA) Alg ¶

func (v *VerifierRSA) Alg() string

func (*VerifierRSA) ID ¶

func (v *VerifierRSA) ID() string

func (*VerifierRSA) Verify ¶

func (v *VerifierRSA) Verify(sig []byte, data []byte) error

Source Files ¶

claims.go jose.go jwk.go jws.go jwt.go sig.go sig_hmac.go sig_rsa.go