webdav/sync/go/pkg/mod/github.com/coreos/go-oidc/v3@v3.9.0 - 志元云盘

File OriginalPic	EditTime	Size
example	2024-09-26 17:24:00	6.97 KB
oidc	2024-09-26 17:24:00	74.25 KB
code-of-conduct.md	2024-09-26 17:24:00	2.97 KB
CONTRIBUTING.md	2024-09-26 17:24:00	2.39 KB
DCO	2024-09-26 17:24:00	1.39 KB
go.mod	2024-09-26 17:24:00	396 B
go.sum	2024-09-26 17:24:00	5.54 KB
LICENSE	2024-09-26 17:24:00	11.06 KB
MAINTAINERS	2024-09-26 17:24:00	152 B
NOTICE	2024-09-26 17:24:00	126 B
README.md	2024-09-26 17:24:00	2.29 KB
test	2024-09-26 17:24:00	99 B

# go-oidc

[![Go Reference](https://pkg.go.dev/badge/github.com/coreos/go-oidc/v3/oidc.svg)](https://pkg.go.dev/github.com/coreos/go-oidc/v3/oidc)
![github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc/workflows/test/badge.svg?branch=v3)

## Updates from v2 to v3

There were two breaking changes made to the v3 branch. The import path has changed from:

```
github.com/coreos/go-oidc
```

to:

```
github.com/coreos/go-oidc/v3/oidc
```

And the return type of `NewRemoteKeySet()` is now `*RemoteKeySet` instead of an interface ([#262](https://github.com/coreos/go-oidc/pull/262)).

## OpenID Connect support for Go

This package enables OpenID Connect support for the [golang.org/x/oauth2](https://godoc.org/golang.org/x/oauth2) package.

```go
provider, err := oidc.NewProvider(ctx, "https://accounts.google.com")
if err != nil {
    // handle error
}

// Configure an OpenID Connect aware OAuth2 client.
oauth2Config := oauth2.Config{
    ClientID:     clientID,
    ClientSecret: clientSecret,
    RedirectURL:  redirectURL,

// Discovery returns the OAuth2 endpoints.
    Endpoint: provider.Endpoint(),

// "openid" is a required scope for OpenID Connect flows.
    Scopes: []string{oidc.ScopeOpenID, "profile", "email"},
}
```

OAuth2 redirects are unchanged.

```go
func handleRedirect(w http.ResponseWriter, r *http.Request) {
    http.Redirect(w, r, oauth2Config.AuthCodeURL(state), http.StatusFound)
}
```

The on responses, the provider can be used to verify ID Tokens.

```go
var verifier = provider.Verifier(&oidc.Config{ClientID: clientID})

func handleOAuth2Callback(w http.ResponseWriter, r *http.Request) {
    // Verify state and errors.

oauth2Token, err := oauth2Config.Exchange(ctx, r.URL.Query().Get("code"))
    if err != nil {
        // handle error
    }

// Extract the ID Token from OAuth2 token.
    rawIDToken, ok := oauth2Token.Extra("id_token").(string)
    if !ok {
        // handle missing token
    }

// Parse and verify ID Token payload.
    idToken, err := verifier.Verify(ctx, rawIDToken)
    if err != nil {
        // handle error
    }

// Extract custom claims
    var claims struct {
        Email    string `json:"email"`
        Verified bool   `json:"email_verified"`
    }
    if err := idToken.Claims(&claims); err != nil {
        // handle error
    }
}
```

云盘

Home / 志元云盘 / webdav / sync / go / pkg / mod / github.com / coreos / go-oidc / [email protected]