oauthpki

type Config ¶

type Config struct {
	// contains filtered or unexported fields
}

Config uses jwt assertions over client_secret for oauth2 authentication of the application. This implementation was made specifically for Azure AD.

https://learn.microsoft.com/en-us/azure/active-directory/develop/certificate-credentials

However this does mostly follow the standard. We can generalize this as we include support for more IDPs.

https://datatracker.ietf.org/doc/html/rfc7523

func NewOauth2PKIConfig(params ConfigParams) (*Config, error)

func (ja *Config) AuthCodeURL(state string, opts ...oauth2.AuthCodeOption) string

func (ja *Config) Exchange(ctx context.Context, code string, opts ...oauth2.AuthCodeOption) (*oauth2.Token, error)

func (ja *Config) TokenSource(ctx context.Context, token *oauth2.Token) oauth2.TokenSource

type ConfigParams ¶

type ConfigParams struct {
	ClientID       string
	TokenURL       string
	Scopes         []string
	PemEncodedKey  []byte
	PemEncodedCert []byte

	Config promoauth.OAuth2Config
}