httpserver

Feb 12, 2026

Changes in this version

+ const RoleMatchModeAll

+ const RoleMatchModeAny

+ const ScopeMatchModeAll

+ const ScopeMatchModeAny

+ type AuthorizationPolicy = authz.AuthorizationPolicy

+ type ForbiddenHandler func(w http.ResponseWriter, r *http.Request, err error)

type MiddlewareOption

+ func WithAuthorizationPolicy(policy AuthorizationPolicy) MiddlewareOption

+ func WithForbiddenHandler(handler ForbiddenHandler) MiddlewareOption

+ type RoleMatchMode = authz.RoleMatchMode

+ type ScopeMatchMode = authz.ScopeMatchMode

Feb 12, 2026

Changes in this version

+ const IntrospectionClientAuthMethodClientSecretBasic

+ const IntrospectionClientAuthMethodPrivateKeyJWT

+ const IntrospectionPrivateKeyJWTAlgorithmES256

+ const IntrospectionPrivateKeyJWTAlgorithmRS256

+ type IntrospectionClientAuthConfig = validator.IntrospectionClientAuthConfig

+ type IntrospectionClientAuthMethod = validator.IntrospectionClientAuthMethod

type OpaqueTokenValidator

+ func NewOpaqueTokenValidatorWithAuth(introspectionURL, issuer, audience string, ...) (*OpaqueTokenValidator, error)

type ValidatorBuilder

+ func (b *ValidatorBuilder) WithOpaqueTokenIntrospectionAuth(introspectionURL string, authConfig IntrospectionClientAuthConfig) *ValidatorBuilder

Feb 11, 2026

Changes in this version

+ type OpaqueTokenValidator = validator.OpaqueTokenValidator

+ func NewOpaqueTokenValidator(introspectionURL, issuer, audience, clientID, clientSecret string, ...) (*OpaqueTokenValidator, error)

type ValidatorBuilder

+ func (b *ValidatorBuilder) WithOpaqueTokenIntrospection(introspectionURL, clientID, clientSecret string) *ValidatorBuilder

Dec 5, 2025

Changes in this version

+ func ConfigureServer(server *http.Server, cfg *TLSConfig) error

+ func NewTLSConfig(cfg *TLSConfig) (*tls.Config, error)

+ type TLSConfig struct

+ CAFile string

+ CertFile string

+ ClientAuth tls.ClientAuthType

+ KeyFile string

+ MinVersion uint16

Dec 2, 2025

Changes in this version

+ func Middleware(validator TokenValidator, opts ...MiddlewareOption) func(http.Handler) http.Handler

+ func WithTokenClaims(ctx context.Context, claims *TokenClaims) context.Context

+ type JWTTokenValidator = validator.JWTTokenValidator

+ func NewJWTTokenValidator(jwksURL, issuer, audience string, httpClient *http.Client, ...) (*JWTTokenValidator, error)

+ type Logger = validator.Logger

+ type MiddlewareConfig struct

+ type MiddlewareOption func(*MiddlewareConfig)

+ func WithExemptPathPrefixes(prefixes ...string) MiddlewareOption

+ func WithExemptPaths(paths ...string) MiddlewareOption

+ func WithMiddlewareLogger(logger Logger) MiddlewareOption

+ func WithTokenExtractor(extractor TokenExtractor) MiddlewareOption

+ func WithUnauthorizedHandler(handler UnauthorizedHandler) MiddlewareOption

+ type TokenClaims = validator.TokenClaims

+ func MustTokenClaimsFromContext(ctx context.Context) *TokenClaims

+ func TokenClaimsFromContext(ctx context.Context) (*TokenClaims, bool)

+ type TokenExtractor func(r *http.Request) (string, bool)

+ type TokenValidator = validator.TokenValidator

+ type UnauthorizedHandler func(w http.ResponseWriter, r *http.Request, err error)

+ type ValidatorBuilder struct

+ func NewValidatorBuilder(issuerURL, audience string) *ValidatorBuilder

+ func (b *ValidatorBuilder) Build() (TokenValidator, error)

+ func (b *ValidatorBuilder) WithCacheTTL(ttl time.Duration) *ValidatorBuilder

+ func (b *ValidatorBuilder) WithHTTPClient(client *http.Client) *ValidatorBuilder

+ func (b *ValidatorBuilder) WithJWKSURL(url string) *ValidatorBuilder

+ func (b *ValidatorBuilder) WithLogger(logger Logger) *ValidatorBuilder