Go OpenID Connect (OIDC) HTTP Middleware
Introduction
This is a middleware for http to make it easy to use OpenID Connect.
Currently Supported frameworks
Echo (JWT ParseTokenFunc)
Middleware
e.Use(middleware.JWTWithConfig(middleware.JWTConfig{
ParseTokenFunc: oidc.NewEchoJWTParseTokenFunc(&oidc.Options{
Issuer: cfg.Issuer,
RequiredTokenType: "JWT",
RequiredAudience: cfg.Audience,
FallbackSignatureAlgorithm: cfg.FallbackSignatureAlgorithm,
RequiredClaims: map[string]interface{}{
"tid": cfg.TenantID,
},
}),
}))
Handler
func getClaimsHandler(c echo.Context) error {
token, ok := c.Get("user").(jwt.Token)
if !ok {
return echo.NewHTTPError(http.StatusUnauthorized, "invalid token")
}
claims, err := token.AsMap(c.Request().Context())
if err != nil {
return echo.NewHTTPError(http.StatusUnauthorized, "invalid token")
}
return c.JSON(http.StatusOK, claims)
}
net/http & mux
Middleware
oidcHandler := oidc.NewNetHttpHandler(h, &oidc.Options{
Issuer: cfg.Issuer,
RequiredTokenType: "JWT",
RequiredAudience: cfg.Audience,
FallbackSignatureAlgorithm: cfg.FallbackSignatureAlgorithm,
RequiredClaims: map[string]interface{}{
"tid": cfg.TenantID,
},
})
Handler
func getClaimsHandler() http.HandlerFunc {
fn := func(w http.ResponseWriter, r *http.Request) {
claims, ok := r.Context().Value(oidc.ClaimsContextKey).(map[string]interface{})
if !ok {
w.WriteHeader(http.StatusUnauthorized)
return
}
w.Header().Set("Content-Type", "application/json")
err := json.NewEncoder(w).Encode(claims)
if err != nil {
w.WriteHeader(http.StatusInternalServerError)
return
}
}
return http.HandlerFunc(fn)
}
Examples
See examples readme for more information.
296 Sep 27, 2022
209 Dec 10, 2022
7.3k Jan 2, 2023
99 Jan 4, 2023
1.5k Dec 31, 2022
2.3k Dec 28, 2022
4 Oct 30, 2022
1 Jan 4, 2022
2.7k Dec 26, 2022
586 Dec 10, 2022
3 Sep 15, 2022
1 Dec 24, 2021
0 Jan 9, 2022
0 Feb 6, 2022
12 Dec 4, 2022
65 Sep 27, 2022
82 Nov 17, 2022
130 Jul 27, 2022