···

       
1
       
1
       
+
       
SHELL = /bin/bash

     

       
2
       
2
       
+
       
.SHELLFLAGS = -o pipefail -c

     

       
3
       
3
       
+
       


     

       
4
       
4
       
+
       
.PHONY: help

     

       
5
       
5
       
+
       
help: ## Print info about all commands

     

       
6
       
6
       
+
       
	@echo "Commands:"

     

       
7
       
7
       
+
       
	@echo

     

       
8
       
8
       
+
       
	@grep -E '^[a-zA-Z0-9_-]+:.*?## .*$$' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*?## "}; {printf "    \033[01;32m%-20s\033[0m %s\n", $$1, $$2}'

     

       
9
       
9
       
+
       


     

       
10
       
10
       
+
       
.PHONY: build

     

       
11
       
11
       
+
       
build: ## Build all executables

     

       
12
       
12
       
+
       
	go build -o oauth .

     

       
13
       
13
       
+
       


     

       
14
       
14
       
+
       
.PHONY: all

     

       
15
       
15
       
+
       
all: build

     

       
16
       
16
       
+
       


     

       
17
       
17
       
+
       
.PHONY: test

     

       
18
       
18
       
+
       
test: ## Run tests

     

       
19
       
19
       
+
       
	go test ./...

     

       
20
       
20
       
+
       


     

       
21
       
21
       
+
       
.PHONY: coverage-html

     

       
22
       
22
       
+
       
coverage-html: ## Generate test coverage report and open in browser

     

       
23
       
23
       
+
       
	go test ./... -coverpkg=./... -coverprofile=test-coverage.out

     

       
24
       
24
       
+
       
	go tool cover -html=test-coverage.out

     

       
25
       
25
       
+
       


     

       
26
       
26
       
+
       
.PHONY: lint

     

       
27
       
27
       
+
       
lint: ## Verify code style and run static checks

     

       
28
       
28
       
+
       
	go vet ./...

     

       
29
       
29
       
+
       
	test -z $(gofmt -l ./...)

     

       
30
       
30
       
+
       


     

       
31
       
31
       
+
       
.PHONY: fmt

     

       
32
       
32
       
+
       
fmt: ## Run syntax re-formatting (modify in place)

     

       
33
       
33
       
+
       
	go fmt ./...

     

       
34
       
34
       
+
       


     

       
35
       
35
       
+
       
.PHONY: check

     

       
36
       
36
       
+
       
check: ## Compile everything, checking syntax (does not output binaries)

     

       
37
       
37
       
+
       
	go build ./...

     

       
38
       
38
       
+
       


     

       
39
       
39
       
+
       
.env:

     

       
40
       
40
       
+
       
	if [ ! -f ".env" ]; then cp example.dev.env .env; fi

     

···

       
1
       
1
       
+
       
module github.com/haileyok/atproto-oauth-golang

     

       
2
       
2
       
+
       


     

       
3
       
3
       
+
       
go 1.24.0

     

       
4
       
4
       
+
       


     

       
5
       
5
       
+
       
require (

     

       
6
       
6
       
+
       
	github.com/lestrrat-go/jwx/v2 v2.0.12

     

       
7
       
7
       
+
       
	github.com/stretchr/testify v1.10.0

     

       
8
       
8
       
+
       
)

     

       
9
       
9
       
+
       


     

       
10
       
10
       
+
       
require (

     

       
11
       
11
       
+
       
	github.com/bluesky-social/indigo v0.0.0-20250222003125-2503553ea604 // indirect

     

       
12
       
12
       
+
       
	github.com/davecgh/go-spew v1.1.1 // indirect

     

       
13
       
13
       
+
       
	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 // indirect

     

       
14
       
14
       
+
       
	github.com/goccy/go-json v0.10.2 // indirect

     

       
15
       
15
       
+
       
	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect

     

       
16
       
16
       
+
       
	github.com/gorilla/context v1.1.2 // indirect

     

       
17
       
17
       
+
       
	github.com/gorilla/securecookie v1.1.2 // indirect

     

       
18
       
18
       
+
       
	github.com/gorilla/sessions v1.4.0 // indirect

     

       
19
       
19
       
+
       
	github.com/labstack/echo-contrib v0.17.2 // indirect

     

       
20
       
20
       
+
       
	github.com/labstack/echo/v4 v4.13.3 // indirect

     

       
21
       
21
       
+
       
	github.com/labstack/gommon v0.4.2 // indirect

     

       
22
       
22
       
+
       
	github.com/lestrrat-go/blackmagic v1.0.1 // indirect

     

       
23
       
23
       
+
       
	github.com/lestrrat-go/httpcc v1.0.1 // indirect

     

       
24
       
24
       
+
       
	github.com/lestrrat-go/httprc v1.0.4 // indirect

     

       
25
       
25
       
+
       
	github.com/lestrrat-go/iter v1.0.2 // indirect

     

       
26
       
26
       
+
       
	github.com/lestrrat-go/option v1.0.1 // indirect

     

       
27
       
27
       
+
       
	github.com/mattn/go-colorable v0.1.13 // indirect

     

       
28
       
28
       
+
       
	github.com/mattn/go-isatty v0.0.20 // indirect

     

       
29
       
29
       
+
       
	github.com/pmezard/go-difflib v1.0.0 // indirect

     

       
30
       
30
       
+
       
	github.com/segmentio/asm v1.2.0 // indirect

     

       
31
       
31
       
+
       
	github.com/valyala/bytebufferpool v1.0.0 // indirect

     

       
32
       
32
       
+
       
	github.com/valyala/fasttemplate v1.2.2 // indirect

     

       
33
       
33
       
+
       
	golang.org/x/crypto v0.31.0 // indirect

     

       
34
       
34
       
+
       
	golang.org/x/net v0.33.0 // indirect

     

       
35
       
35
       
+
       
	golang.org/x/sys v0.28.0 // indirect

     

       
36
       
36
       
+
       
	golang.org/x/text v0.21.0 // indirect

     

       
37
       
37
       
+
       
	golang.org/x/time v0.8.0 // indirect

     

       
38
       
38
       
+
       
	gopkg.in/yaml.v3 v3.0.1 // indirect

     

       
39
       
39
       
+
       
)

     

···

       
1
       
1
       
+
       
github.com/bluesky-social/indigo v0.0.0-20250222003125-2503553ea604 h1:rceaPCufVEkobTmyISJhvY4kzaPKtSujN427CGWpvHw=

     

       
2
       
2
       
+
       
github.com/bluesky-social/indigo v0.0.0-20250222003125-2503553ea604/go.mod h1:NVBwZvbBSa93kfyweAmKwOLYawdVHdwZ9s+GZtBBVLA=

     

       
3
       
3
       
+
       
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=

     

       
4
       
4
       
+
       
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=

     

       
5
       
5
       
+
       
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=

     

       
6
       
6
       
+
       
github.com/decred/dcrd/crypto/blake256 v1.0.1/go.mod h1:2OfgNZ5wDpcsFmHmCK5gZTPcCXqlm2ArzUIkw9czNJo=

     

       
7
       
7
       
+
       
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 h1:8UrgZ3GkP4i/CLijOJx79Yu+etlyjdBU4sfcs2WYQMs=

     

       
8
       
8
       
+
       
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0/go.mod h1:v57UDF4pDQJcEfFUCRop3lJL149eHGSe9Jvczhzjo/0=

     

       
9
       
9
       
+
       
github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=

     

       
10
       
10
       
+
       
github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=

     

       
11
       
11
       
+
       
github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=

     

       
12
       
12
       
+
       
github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=

     

       
13
       
13
       
+
       
github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=

     

       
14
       
14
       
+
       
github.com/gorilla/context v1.1.2 h1:WRkNAv2uoa03QNIc1A6u4O7DAGMUVoopZhkiXWA2V1o=

     

       
15
       
15
       
+
       
github.com/gorilla/context v1.1.2/go.mod h1:KDPwT9i/MeWHiLl90fuTgrt4/wPcv75vFAZLaOOcbxM=

     

       
16
       
16
       
+
       
github.com/gorilla/securecookie v1.1.2 h1:YCIWL56dvtr73r6715mJs5ZvhtnY73hBvEF8kXD8ePA=

     

       
17
       
17
       
+
       
github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pwzwo4h3eOamfo=

     

       
18
       
18
       
+
       
github.com/gorilla/sessions v1.4.0 h1:kpIYOp/oi6MG/p5PgxApU8srsSw9tuFbt46Lt7auzqQ=

     

       
19
       
19
       
+
       
github.com/gorilla/sessions v1.4.0/go.mod h1:FLWm50oby91+hl7p/wRxDth9bWSuk0qVL2emc7lT5ik=

     

       
20
       
20
       
+
       
github.com/labstack/echo-contrib v0.17.2 h1:K1zivqmtcC70X9VdBFdLomjPDEVHlrcAObqmuFj1c6w=

     

       
21
       
21
       
+
       
github.com/labstack/echo-contrib v0.17.2/go.mod h1:NeDh3PX7j/u+jR4iuDt1zHmWZSCz9c/p9mxXcDpyS8E=

     

       
22
       
22
       
+
       
github.com/labstack/echo/v4 v4.13.3 h1:pwhpCPrTl5qry5HRdM5FwdXnhXSLSY+WE+YQSeCaafY=

     

       
23
       
23
       
+
       
github.com/labstack/echo/v4 v4.13.3/go.mod h1:o90YNEeQWjDozo584l7AwhJMHN0bOC4tAfg+Xox9q5g=

     

       
24
       
24
       
+
       
github.com/labstack/gommon v0.4.2 h1:F8qTUNXgG1+6WQmqoUWnz8WiEU60mXVVw0P4ht1WRA0=

     

       
25
       
25
       
+
       
github.com/labstack/gommon v0.4.2/go.mod h1:QlUFxVM+SNXhDL/Z7YhocGIBYOiwB0mXm1+1bAPHPyU=

     

       
26
       
26
       
+
       
github.com/lestrrat-go/blackmagic v1.0.1 h1:lS5Zts+5HIC/8og6cGHb0uCcNCa3OUt1ygh3Qz2Fe80=

     

       
27
       
27
       
+
       
github.com/lestrrat-go/blackmagic v1.0.1/go.mod h1:UrEqBzIR2U6CnzVyUtfM6oZNMt/7O7Vohk2J0OGSAtU=

     

       
28
       
28
       
+
       
github.com/lestrrat-go/httpcc v1.0.1 h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE=

     

       
29
       
29
       
+
       
github.com/lestrrat-go/httpcc v1.0.1/go.mod h1:qiltp3Mt56+55GPVCbTdM9MlqhvzyuL6W/NMDA8vA5E=

     

       
30
       
30
       
+
       
github.com/lestrrat-go/httprc v1.0.4 h1:bAZymwoZQb+Oq8MEbyipag7iSq6YIga8Wj6GOiJGdI8=

     

       
31
       
31
       
+
       
github.com/lestrrat-go/httprc v1.0.4/go.mod h1:mwwz3JMTPBjHUkkDv/IGJ39aALInZLrhBp0X7KGUZlo=

     

       
32
       
32
       
+
       
github.com/lestrrat-go/iter v1.0.2 h1:gMXo1q4c2pHmC3dn8LzRhJfP1ceCbgSiT9lUydIzltI=

     

       
33
       
33
       
+
       
github.com/lestrrat-go/iter v1.0.2/go.mod h1:Momfcq3AnRlRjI5b5O8/G5/BvpzrhoFTZcn06fEOPt4=

     

       
34
       
34
       
+
       
github.com/lestrrat-go/jwx/v2 v2.0.12 h1:3d589+5w/b9b7S3DneICPW16AqTyYXB7VRjgluSDWeA=

     

       
35
       
35
       
+
       
github.com/lestrrat-go/jwx/v2 v2.0.12/go.mod h1:Mq4KN1mM7bp+5z/W5HS8aCNs5RKZ911G/0y2qUjAQuQ=

     

       
36
       
36
       
+
       
github.com/lestrrat-go/option v1.0.0/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I=

     

       
37
       
37
       
+
       
github.com/lestrrat-go/option v1.0.1 h1:oAzP2fvZGQKWkvHa1/SAcFolBEca1oN+mQ7eooNBEYU=

     

       
38
       
38
       
+
       
github.com/lestrrat-go/option v1.0.1/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I=

     

       
39
       
39
       
+
       
github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=

     

       
40
       
40
       
+
       
github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=

     

       
41
       
41
       
+
       
github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=

     

       
42
       
42
       
+
       
github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=

     

       
43
       
43
       
+
       
github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=

     

       
44
       
44
       
+
       
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=

     

       
45
       
45
       
+
       
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=

     

       
46
       
46
       
+
       
github.com/segmentio/asm v1.2.0 h1:9BQrFxC+YOHJlTlHGkTrFWf59nbL3XnCoFLTwDCI7ys=

     

       
47
       
47
       
+
       
github.com/segmentio/asm v1.2.0/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr5aAcs=

     

       
48
       
48
       
+
       
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=

     

       
49
       
49
       
+
       
github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=

     

       
50
       
50
       
+
       
github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=

     

       
51
       
51
       
+
       
github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=

     

       
52
       
52
       
+
       
github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=

     

       
53
       
53
       
+
       
github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=

     

       
54
       
54
       
+
       
github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=

     

       
55
       
55
       
+
       
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=

     

       
56
       
56
       
+
       
github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=

     

       
57
       
57
       
+
       
github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=

     

       
58
       
58
       
+
       
github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=

     

       
59
       
59
       
+
       
github.com/valyala/fasttemplate v1.2.2 h1:lxLXG0uE3Qnshl9QyaK6XJxMXlQZELvChBOCmQD0Loo=

     

       
60
       
60
       
+
       
github.com/valyala/fasttemplate v1.2.2/go.mod h1:KHLXt3tVN2HBp8eijSv/kGJopbvo7S+qRAEEKiv+SiQ=

     

       
61
       
61
       
+
       
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=

     

       
62
       
62
       
+
       
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=

     

       
63
       
63
       
+
       
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=

     

       
64
       
64
       
+
       
golang.org/x/crypto v0.12.0/go.mod h1:NF0Gs7EO5K4qLn+Ylc+fih8BSTeIjAP05siRnAh98yw=

     

       
65
       
65
       
+
       
golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=

     

       
66
       
66
       
+
       
golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=

     

       
67
       
67
       
+
       
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=

     

       
68
       
68
       
+
       
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=

     

       
69
       
69
       
+
       
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=

     

       
70
       
70
       
+
       
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=

     

       
71
       
71
       
+
       
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=

     

       
72
       
72
       
+
       
golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=

     

       
73
       
73
       
+
       
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=

     

       
74
       
74
       
+
       
golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=

     

       
75
       
75
       
+
       
golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=

     

       
76
       
76
       
+
       
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

     

       
77
       
77
       
+
       
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

     

       
78
       
78
       
+
       
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

     

       
79
       
79
       
+
       
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=

     

       
80
       
80
       
+
       
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=

     

       
81
       
81
       
+
       
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
82
       
82
       
+
       
golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
83
       
83
       
+
       
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
84
       
84
       
+
       
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
85
       
85
       
+
       
golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
86
       
86
       
+
       
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
87
       
87
       
+
       
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
88
       
88
       
+
       
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
89
       
89
       
+
       
golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

     

       
90
       
90
       
+
       
golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=

     

       
91
       
91
       
+
       
golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=

     

       
92
       
92
       
+
       
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=

     

       
93
       
93
       
+
       
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

     

       
94
       
94
       
+
       
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=

     

       
95
       
95
       
+
       
golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=

     

       
96
       
96
       
+
       
golang.org/x/term v0.11.0/go.mod h1:zC9APTIj3jG3FdV/Ons+XE1riIZXG4aZ4GTHiPZJPIU=

     

       
97
       
97
       
+
       
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=

     

       
98
       
98
       
+
       
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=

     

       
99
       
99
       
+
       
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=

     

       
100
       
100
       
+
       
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=

     

       
101
       
101
       
+
       
golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=

     

       
102
       
102
       
+
       
golang.org/x/text v0.12.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=

     

       
103
       
103
       
+
       
golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=

     

       
104
       
104
       
+
       
golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=

     

       
105
       
105
       
+
       
golang.org/x/time v0.8.0 h1:9i3RxcPv3PZnitoVGMPDKZSq1xW1gK1Xy3ArNOGZfEg=

     

       
106
       
106
       
+
       
golang.org/x/time v0.8.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=

     

       
107
       
107
       
+
       
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=

     

       
108
       
108
       
+
       
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=

     

       
109
       
109
       
+
       
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=

     

       
110
       
110
       
+
       
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=

     

       
111
       
111
       
+
       
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

     

       
112
       
112
       
+
       
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

     

       
113
       
113
       
+
       
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

     

       
114
       
114
       
+
       
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

     

       
115
       
115
       
+
       
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

     

···

       
1
       
1
       
+
       
package oauth

     

       
2
       
2
       
+
       


     

       
3
       
3
       
+
       
func tokenInSet(tok string, set []string) bool {

     

       
4
       
4
       
+
       
	for _, setTok := range set {

     

       
5
       
5
       
+
       
		if tok == setTok {

     

       
6
       
6
       
+
       
			return true

     

       
7
       
7
       
+
       
		}

     

       
8
       
8
       
+
       
	}

     

       
9
       
9
       
+
       


     

       
10
       
10
       
+
       
	return false

     

       
11
       
11
       
+
       
}

     

···

       
1
       
1
       
+
       
package oauth

     

       
2
       
2
       
+
       


     

       
3
       
3
       
+
       
import (

     

       
4
       
4
       
+
       
	"context"

     

       
5
       
5
       
+
       
	"fmt"

     

       
6
       
6
       
+
       
	"io"

     

       
7
       
7
       
+
       
	"net/http"

     

       
8
       
8
       
+
       
	"net/url"

     

       
9
       
9
       
+
       
	"time"

     

       
10
       
10
       
+
       
)

     

       
11
       
11
       
+
       


     

       
12
       
12
       
+
       
type OauthClient struct {

     

       
13
       
13
       
+
       
	h *http.Client

     

       
14
       
14
       
+
       
}

     

       
15
       
15
       
+
       


     

       
16
       
16
       
+
       
type OauthClientArgs struct {

     

       
17
       
17
       
+
       
	h *http.Client

     

       
18
       
18
       
+
       
}

     

       
19
       
19
       
+
       


     

       
20
       
20
       
+
       
func NewOauthClient(args OauthClientArgs) *OauthClient {

     

       
21
       
21
       
+
       
	if args.h == nil {

     

       
22
       
22
       
+
       
		args.h = &http.Client{

     

       
23
       
23
       
+
       
			Timeout: 5 * time.Second,

     

       
24
       
24
       
+
       
		}

     

       
25
       
25
       
+
       
	}

     

       
26
       
26
       
+
       
	return &OauthClient{

     

       
27
       
27
       
+
       
		h: args.h,

     

       
28
       
28
       
+
       
	}

     

       
29
       
29
       
+
       
}

     

       
30
       
30
       
+
       


     

       
31
       
31
       
+
       
func (o *OauthClient) ResolvePDSAuthServer(ctx context.Context, ustr string) (string, error) {

     

       
32
       
32
       
+
       
	u, err := isSafeAndParsed(ustr)

     

       
33
       
33
       
+
       
	if err != nil {

     

       
34
       
34
       
+
       
		return "", err

     

       
35
       
35
       
+
       
	}

     

       
36
       
36
       
+
       


     

       
37
       
37
       
+
       
	u.Path = "/.well-known/oauth-protected-resource"

     

       
38
       
38
       
+
       


     

       
39
       
39
       
+
       
	req, err := http.NewRequestWithContext(ctx, "GET", u.String(), nil)

     

       
40
       
40
       
+
       
	if err != nil {

     

       
41
       
41
       
+
       
		return "", fmt.Errorf("error creating request for oauth protected resource: %w", err)

     

       
42
       
42
       
+
       
	}

     

       
43
       
43
       
+
       


     

       
44
       
44
       
+
       
	resp, err := o.h.Do(req)

     

       
45
       
45
       
+
       
	if err != nil {

     

       
46
       
46
       
+
       
		return "", fmt.Errorf("could not get response from server: %w", err)

     

       
47
       
47
       
+
       
	}

     

       
48
       
48
       
+
       
	defer resp.Body.Close()

     

       
49
       
49
       
+
       


     

       
50
       
50
       
+
       
	if resp.StatusCode != http.StatusOK {

     

       
51
       
51
       
+
       
		io.Copy(io.Discard, resp.Body)

     

       
52
       
52
       
+
       
		return "", fmt.Errorf("received non-200 response from pds. code was %d", resp.StatusCode)

     

       
53
       
53
       
+
       
	}

     

       
54
       
54
       
+
       


     

       
55
       
55
       
+
       
	b, err := io.ReadAll(resp.Body)

     

       
56
       
56
       
+
       
	if err != nil {

     

       
57
       
57
       
+
       
		return "", fmt.Errorf("could not read body: %w", err)

     

       
58
       
58
       
+
       
	}

     

       
59
       
59
       
+
       


     

       
60
       
60
       
+
       
	var resource OauthProtectedResource

     

       
61
       
61
       
+
       
	if err := resource.UnmarshalJSON(b); err != nil {

     

       
62
       
62
       
+
       
		return "", fmt.Errorf("could not unmarshal json: %w", err)

     

       
63
       
63
       
+
       
	}

     

       
64
       
64
       
+
       


     

       
65
       
65
       
+
       
	if len(resource.AuthorizationServers) == 0 {

     

       
66
       
66
       
+
       
		return "", fmt.Errorf("oauth protected resource contained no authorization servers")

     

       
67
       
67
       
+
       
	}

     

       
68
       
68
       
+
       


     

       
69
       
69
       
+
       
	return resource.AuthorizationServers[0], nil

     

       
70
       
70
       
+
       
}

     

       
71
       
71
       
+
       


     

       
72
       
72
       
+
       
func (o *OauthClient) FetchAuthServerMetadata(ctx context.Context, ustr string) (any, error) {

     

       
73
       
73
       
+
       
	u, err := isSafeAndParsed(ustr)

     

       
74
       
74
       
+
       
	if err != nil {

     

       
75
       
75
       
+
       
		return nil, err

     

       
76
       
76
       
+
       
	}

     

       
77
       
77
       
+
       


     

       
78
       
78
       
+
       
	u.Path = "/.well-known/oauth-authorization-server"

     

       
79
       
79
       
+
       


     

       
80
       
80
       
+
       
	req, err := http.NewRequestWithContext(ctx, "GET", u.String(), nil)

     

       
81
       
81
       
+
       
	if err != nil {

     

       
82
       
82
       
+
       
		return nil, fmt.Errorf("error creating request to fetch auth metadata: %w", err)

     

       
83
       
83
       
+
       
	}

     

       
84
       
84
       
+
       


     

       
85
       
85
       
+
       
	resp, err := o.h.Do(req)

     

       
86
       
86
       
+
       
	if err != nil {

     

       
87
       
87
       
+
       
		return nil, fmt.Errorf("error getting response for auth metadata: %w", err)

     

       
88
       
88
       
+
       
	}

     

       
89
       
89
       
+
       
	defer resp.Body.Close()

     

       
90
       
90
       
+
       


     

       
91
       
91
       
+
       
	if resp.StatusCode != http.StatusOK {

     

       
92
       
92
       
+
       
		io.Copy(io.Discard, resp.Body)

     

       
93
       
93
       
+
       
		return nil, fmt.Errorf("received non-200 response from pds. status code was %d", resp.StatusCode)

     

       
94
       
94
       
+
       
	}

     

       
95
       
95
       
+
       


     

       
96
       
96
       
+
       
	b, err := io.ReadAll(resp.Body)

     

       
97
       
97
       
+
       
	if err != nil {

     

       
98
       
98
       
+
       
		return nil, fmt.Errorf("could not read body for metadata response: %w", err)

     

       
99
       
99
       
+
       
	}

     

       
100
       
100
       
+
       


     

       
101
       
101
       
+
       
	var metadata OauthAuthorizationMetadata

     

       
102
       
102
       
+
       
	if err := metadata.UnmarshalJSON(b); err != nil {

     

       
103
       
103
       
+
       
		return nil, fmt.Errorf("could not unmarshal metadata: %w", err)

     

       
104
       
104
       
+
       
	}

     

       
105
       
105
       
+
       


     

       
106
       
106
       
+
       
	if err := metadata.Validate(u); err != nil {

     

       
107
       
107
       
+
       
		return nil, fmt.Errorf("could not validate metadata: %w", err)

     

       
108
       
108
       
+
       
	}

     

       
109
       
109
       
+
       


     

       
110
       
110
       
+
       
	return metadata, nil

     

       
111
       
111
       
+
       
}

     

       
112
       
112
       
+
       


     

       
113
       
113
       
+
       
// func ClientAssertionJwt(clientId, authServerUrl string, clientSecretJwk jwk.Key) {

     

       
114
       
114
       
+
       
// 	clientAssertion := jwt.NewBuilder().Issuer(clientId).Subject(clientId).Audience(authServerUrl).IssuedAt(time.Now().Add()

     

       
115
       
115
       
+
       
// }

     

       
116
       
116
       
+
       


     

       
117
       
117
       
+
       
func isSafeAndParsed(ustr string) (*url.URL, error) {

     

       
118
       
118
       
+
       
	u, err := url.Parse(ustr)

     

       
119
       
119
       
+
       
	if err != nil {

     

       
120
       
120
       
+
       
		return nil, err

     

       
121
       
121
       
+
       
	}

     

       
122
       
122
       
+
       


     

       
123
       
123
       
+
       
	if u.Scheme != "https" {

     

       
124
       
124
       
+
       
		return nil, fmt.Errorf("input url is not https")

     

       
125
       
125
       
+
       
	}

     

       
126
       
126
       
+
       


     

       
127
       
127
       
+
       
	return u, nil

     

       
128
       
128
       
+
       
}

     

···

       
1
       
1
       
+
       
package oauth

     

       
2
       
2
       
+
       


     

       
3
       
3
       
+
       
import (

     

       
4
       
4
       
+
       
	"context"

     

       
5
       
5
       
+
       
	"testing"

     

       
6
       
6
       
+
       


     

       
7
       
7
       
+
       
	"github.com/stretchr/testify/assert"

     

       
8
       
8
       
+
       
)

     

       
9
       
9
       
+
       


     

       
10
       
10
       
+
       
var (

     

       
11
       
11
       
+
       
	ctx         = context.Background()

     

       
12
       
12
       
+
       
	oauthClient = NewOauthClient(OauthClientArgs{})

     

       
13
       
13
       
+
       
)

     

       
14
       
14
       
+
       


     

       
15
       
15
       
+
       
func TestResolvePDSAuthServer(t *testing.T) {

     

       
16
       
16
       
+
       
	assert := assert.New(t)

     

       
17
       
17
       
+
       


     

       
18
       
18
       
+
       
	authServer, err := oauthClient.ResolvePDSAuthServer(ctx, "https://pds.haileyok.com")

     

       
19
       
19
       
+
       


     

       
20
       
20
       
+
       
	assert.NoError(err)

     

       
21
       
21
       
+
       
	assert.NotEmpty(authServer)

     

       
22
       
22
       
+
       
	assert.Equal("https://pds.haileyok.com", authServer)

     

       
23
       
23
       
+
       
}

     

       
24
       
24
       
+
       


     

       
25
       
25
       
+
       
func TestFetchAuthServerMetadata(t *testing.T) {

     

       
26
       
26
       
+
       
	assert := assert.New(t)

     

       
27
       
27
       
+
       


     

       
28
       
28
       
+
       
	meta, err := oauthClient.FetchAuthServerMetadata(ctx, "https://pds.haileyok.com")

     

       
29
       
29
       
+
       


     

       
30
       
30
       
+
       
	assert.NoError(err)

     

       
31
       
31
       
+
       
	assert.IsType(OauthAuthorizationMetadata{}, meta)

     

       
32
       
32
       
+
       
}

     

···

       
1
       
1
       
+
       
package oauth

     

       
2
       
2
       
+
       


     

       
3
       
3
       
+
       
import (

     

       
4
       
4
       
+
       
	"encoding/json"

     

       
5
       
5
       
+
       
	"fmt"

     

       
6
       
6
       
+
       
	"net/url"

     

       
7
       
7
       
+
       
)

     

       
8
       
8
       
+
       


     

       
9
       
9
       
+
       
type OauthProtectedResource struct {

     

       
10
       
10
       
+
       
	Resource               string   `json:"resource"`

     

       
11
       
11
       
+
       
	AuthorizationServers   []string `json:"authorization_servers"`

     

       
12
       
12
       
+
       
	ScopesSupported        []string `json:"scopes_supported"`

     

       
13
       
13
       
+
       
	BearerMethodsSupported []string `json:"bearer_methods_supported"`

     

       
14
       
14
       
+
       
	ResourceDocumentation  string   `json:"resource_documentation"`

     

       
15
       
15
       
+
       
}

     

       
16
       
16
       
+
       


     

       
17
       
17
       
+
       
func (opr *OauthProtectedResource) UnmarshalJSON(b []byte) error {

     

       
18
       
18
       
+
       
	type Tmp OauthProtectedResource

     

       
19
       
19
       
+
       
	var tmp Tmp

     

       
20
       
20
       
+
       


     

       
21
       
21
       
+
       
	if err := json.Unmarshal(b, &tmp); err != nil {

     

       
22
       
22
       
+
       
		return err

     

       
23
       
23
       
+
       
	}

     

       
24
       
24
       
+
       


     

       
25
       
25
       
+
       
	*opr = OauthProtectedResource(tmp)

     

       
26
       
26
       
+
       


     

       
27
       
27
       
+
       
	return nil

     

       
28
       
28
       
+
       
}

     

       
29
       
29
       
+
       


     

       
30
       
30
       
+
       
type OauthAuthorizationMetadata struct {

     

       
31
       
31
       
+
       
	Issuer                                     string   `json:"issuer"`

     

       
32
       
32
       
+
       
	RequestParameterSupported                  bool     `json:"request_parameter_supported"`

     

       
33
       
33
       
+
       
	RequestUriParameterSupported               bool     `json:"request_uri_parameter_supported"`

     

       
34
       
34
       
+
       
	RequireRequestUriRegistration              *bool    `json:"require_request_uri_registration,omitempty"`

     

       
35
       
35
       
+
       
	ScopesSupported                            []string `json:"scopes_supported"`

     

       
36
       
36
       
+
       
	SubjectTypesSupported                      []string `json:"subject_types_supported"`

     

       
37
       
37
       
+
       
	ResponseTypesSupported                     []string `json:"response_types_supported"`

     

       
38
       
38
       
+
       
	ResponseModesSupported                     []string `json:"response_modes_supported"`

     

       
39
       
39
       
+
       
	GrantTypesSupported                        []string `json:"grant_types_supported"`

     

       
40
       
40
       
+
       
	CodeChallengeMethodsSupported              []string `json:"code_challenge_methods_supported"`

     

       
41
       
41
       
+
       
	UILocalesSupported                         []string `json:"ui_locales_supported"`

     

       
42
       
42
       
+
       
	DisplayValuesSupported                     []string `json:"display_values_supported"`

     

       
43
       
43
       
+
       
	RequestObjectSigningAlgValuesSupported     []string `json:"request_object_signing_alg_values_supported"`

     

       
44
       
44
       
+
       
	AuthorizationResponseISSParameterSupported bool     `json:"authorization_response_iss_parameter_supported"`

     

       
45
       
45
       
+
       
	RequestObjectEncryptionAlgValuesSupported  []string `json:"request_object_encryption_alg_values_supported"`

     

       
46
       
46
       
+
       
	RequestObjectEncryptionEncValuesSupported  []string `json:"request_object_encryption_enc_values_supported"`

     

       
47
       
47
       
+
       
	JwksUri                                    string   `json:"jwks_uri"`

     

       
48
       
48
       
+
       
	AuthorizationEndpoint                      string   `json:"authorization_endpoint"`

     

       
49
       
49
       
+
       
	TokenEndpoint                              string   `json:"token_endpoint"`

     

       
50
       
50
       
+
       
	TokenEndpointAuthMethodsSupported          []string `json:"token_endpoint_auth_methods_supported"`

     

       
51
       
51
       
+
       
	TokenEndpointAuthSigningAlgValuesSupported []string `json:"token_endpoint_auth_signing_alg_values_supported"`

     

       
52
       
52
       
+
       
	RevocationEndpoint                         string   `json:"revocation_endpoint"`

     

       
53
       
53
       
+
       
	IntrospectionEndpoint                      string   `json:"introspection_endpoint"`

     

       
54
       
54
       
+
       
	PushedAuthorizationRequestEndpoint         string   `json:"pushed_authorization_request_endpoint"`

     

       
55
       
55
       
+
       
	RequirePushedAuthorizationRequests         bool     `json:"require_pushed_authorization_requests"`

     

       
56
       
56
       
+
       
	DpopSigningAlgValuesSupported              []string `json:"dpop_signing_alg_values_supported"`

     

       
57
       
57
       
+
       
	ProtectedResources                         []string `json:"protected_resources"`

     

       
58
       
58
       
+
       
	ClientIDMetadataDocumentSupported          bool     `json:"client_id_metadata_document_supported"`

     

       
59
       
59
       
+
       
}

     

       
60
       
60
       
+
       


     

       
61
       
61
       
+
       
func (oam *OauthAuthorizationMetadata) Validate(fetch_url *url.URL) error {

     

       
62
       
62
       
+
       
	if fetch_url == nil {

     

       
63
       
63
       
+
       
		return fmt.Errorf("fetch_url was nil")

     

       
64
       
64
       
+
       
	}

     

       
65
       
65
       
+
       


     

       
66
       
66
       
+
       
	iu, err := url.Parse(oam.Issuer)

     

       
67
       
67
       
+
       
	if err != nil {

     

       
68
       
68
       
+
       
		oam = nil

     

       
69
       
69
       
+
       
		return err

     

       
70
       
70
       
+
       
	}

     

       
71
       
71
       
+
       


     

       
72
       
72
       
+
       
	if iu.Hostname() != fetch_url.Hostname() {

     

       
73
       
73
       
+
       
		oam = nil

     

       
74
       
74
       
+
       
		return fmt.Errorf("issuer hostname does not match fetch url hostname")

     

       
75
       
75
       
+
       
	}

     

       
76
       
76
       
+
       


     

       
77
       
77
       
+
       
	if iu.Scheme != "https" {

     

       
78
       
78
       
+
       
		oam = nil

     

       
79
       
79
       
+
       
		return fmt.Errorf("issuer url is not https")

     

       
80
       
80
       
+
       
	}

     

       
81
       
81
       
+
       


     

       
82
       
82
       
+
       
	if iu.Port() != "" {

     

       
83
       
83
       
+
       
		oam = nil

     

       
84
       
84
       
+
       
		return fmt.Errorf("issuer port is not empty")

     

       
85
       
85
       
+
       
	}

     

       
86
       
86
       
+
       


     

       
87
       
87
       
+
       
	if iu.Path != "" && iu.Path != "/" {

     

       
88
       
88
       
+
       
		oam = nil

     

       
89
       
89
       
+
       
		return fmt.Errorf("issuer path is not /")

     

       
90
       
90
       
+
       
	}

     

       
91
       
91
       
+
       


     

       
92
       
92
       
+
       
	if iu.RawQuery != "" {

     

       
93
       
93
       
+
       
		oam = nil

     

       
94
       
94
       
+
       
		return fmt.Errorf("issuer url params are not empty")

     

       
95
       
95
       
+
       
	}

     

       
96
       
96
       
+
       


     

       
97
       
97
       
+
       
	if !tokenInSet("code", oam.ResponseTypesSupported) {

     

       
98
       
98
       
+
       
		oam = nil

     

       
99
       
99
       
+
       
		return fmt.Errorf("`code` is not in response_types_supported")

     

       
100
       
100
       
+
       
	}

     

       
101
       
101
       
+
       


     

       
102
       
102
       
+
       
	if !tokenInSet("authorization_code", oam.GrantTypesSupported) {

     

       
103
       
103
       
+
       
		oam = nil

     

       
104
       
104
       
+
       
		return fmt.Errorf("`authorization_code` is not in grant_types_supported")

     

       
105
       
105
       
+
       
	}

     

       
106
       
106
       
+
       


     

       
107
       
107
       
+
       
	if !tokenInSet("refresh_token", oam.GrantTypesSupported) {

     

       
108
       
108
       
+
       
		oam = nil

     

       
109
       
109
       
+
       
		return fmt.Errorf("`refresh_token` is not in grant_types_supported")

     

       
110
       
110
       
+
       
	}

     

       
111
       
111
       
+
       


     

       
112
       
112
       
+
       
	if !tokenInSet("S256", oam.CodeChallengeMethodsSupported) {

     

       
113
       
113
       
+
       
		oam = nil

     

       
114
       
114
       
+
       
		return fmt.Errorf("`S256` is not in code_challenge_methods_supported")

     

       
115
       
115
       
+
       
	}

     

       
116
       
116
       
+
       


     

       
117
       
117
       
+
       
	if !tokenInSet("none", oam.TokenEndpointAuthMethodsSupported) {

     

       
118
       
118
       
+
       
		oam = nil

     

       
119
       
119
       
+
       
		return fmt.Errorf("`none` is not in token_endpoint_auth_methods_supported")

     

       
120
       
120
       
+
       
	}

     

       
121
       
121
       
+
       


     

       
122
       
122
       
+
       
	if !tokenInSet("private_key_jwt", oam.TokenEndpointAuthMethodsSupported) {

     

       
123
       
123
       
+
       
		oam = nil

     

       
124
       
124
       
+
       
		return fmt.Errorf("`private_key_jwt` is not in token_endpoint_auth_methods_supported")

     

       
125
       
125
       
+
       
	}

     

       
126
       
126
       
+
       


     

       
127
       
127
       
+
       
	if !tokenInSet("ES256", oam.TokenEndpointAuthSigningAlgValuesSupported) {

     

       
128
       
128
       
+
       
		oam = nil

     

       
129
       
129
       
+
       
		return fmt.Errorf("`ES256` is not in token_endpoint_auth_signing_alg_values_supported")

     

       
130
       
130
       
+
       
	}

     

       
131
       
131
       
+
       


     

       
132
       
132
       
+
       
	if !tokenInSet("atproto", oam.ScopesSupported) {

     

       
133
       
133
       
+
       
		oam = nil

     

       
134
       
134
       
+
       
		return fmt.Errorf("`atproto` is not in scopes_supported")

     

       
135
       
135
       
+
       
	}

     

       
136
       
136
       
+
       


     

       
137
       
137
       
+
       
	if oam.AuthorizationResponseISSParameterSupported != true {

     

       
138
       
138
       
+
       
		oam = nil

     

       
139
       
139
       
+
       
		return fmt.Errorf("authorization_response_iss_parameter_supported is not true")

     

       
140
       
140
       
+
       
	}

     

       
141
       
141
       
+
       


     

       
142
       
142
       
+
       
	if oam.PushedAuthorizationRequestEndpoint == "" {

     

       
143
       
143
       
+
       
		oam = nil

     

       
144
       
144
       
+
       
		return fmt.Errorf("pushed_authorization_request_endpoint is empty")

     

       
145
       
145
       
+
       
	}

     

       
146
       
146
       
+
       


     

       
147
       
147
       
+
       
	if oam.RequirePushedAuthorizationRequests == false {

     

       
148
       
148
       
+
       
		oam = nil

     

       
149
       
149
       
+
       
		return fmt.Errorf("require_pushed_authorization_requests is false")

     

       
150
       
150
       
+
       
	}

     

       
151
       
151
       
+
       


     

       
152
       
152
       
+
       
	if !tokenInSet("ES256", oam.DpopSigningAlgValuesSupported) {

     

       
153
       
153
       
+
       
		oam = nil

     

       
154
       
154
       
+
       
		return fmt.Errorf("`ES256` is not in dpop_signing_alg_values_supported")

     

       
155
       
155
       
+
       
	}

     

       
156
       
156
       
+
       


     

       
157
       
157
       
+
       
	if oam.RequireRequestUriRegistration != nil && *oam.RequireRequestUriRegistration == false {

     

       
158
       
158
       
+
       
		oam = nil

     

       
159
       
159
       
+
       
		return fmt.Errorf("require_request_uri_registration present in metadata and was false")

     

       
160
       
160
       
+
       
	}

     

       
161
       
161
       
+
       


     

       
162
       
162
       
+
       
	if oam.ClientIDMetadataDocumentSupported == false {

     

       
163
       
163
       
+
       
		oam = nil

     

       
164
       
164
       
+
       
		return fmt.Errorf("client_id_metadata_document_supported was false")

     

       
165
       
165
       
+
       
	}

     

       
166
       
166
       
+
       


     

       
167
       
167
       
+
       
	return nil

     

       
168
       
168
       
+
       
}

     

       
169
       
169
       
+
       


     

       
170
       
170
       
+
       
func (oam *OauthAuthorizationMetadata) UnmarshalJSON(b []byte) error {

     

       
171
       
171
       
+
       
	type Tmp OauthAuthorizationMetadata

     

       
172
       
172
       
+
       
	var tmp Tmp

     

       
173
       
173
       
+
       


     

       
174
       
174
       
+
       
	if err := json.Unmarshal(b, &tmp); err != nil {

     

       
175
       
175
       
+
       
		return err

     

       
176
       
176
       
+
       
	}

     

       
177
       
177
       
+
       


     

       
178
       
178
       
+
       
	*oam = OauthAuthorizationMetadata(tmp)

     

       
179
       
179
       
+
       


     

       
180
       
180
       
+
       
	return nil

     

       
181
       
181
       
+
       
}