OAuth

* * Standard CheckToken * https://tools.ietf.org/html/rfc7662#section-2.2 */.

* * ID TOKEN * https://openid.net/specs/openid-connect-core-1_0.html#IDToken */.

ISO 8601:2004 [ISO8601‑2004] YYYY-MM-DD format.

* * Standard UserInfo * https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims */.

* * JWT standard * https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-13#section-4.1 */.

* * NFV Additions - Legacy */.

Typically ISO 639-1 Alpha-2 [ISO639‑1] language code in lowercase and an ISO 3166-1.

RFC 3966 [RFC3966] e.g.

for backward compatibility we map it to tenant_name.

* * NFV Additions - custom */.

Europe/Paris or America/Los_Angeles.

ErrorSubTypeCodeOAuth2Authorize.

ErrorSubTypeCodeOAuth2ClientAuth.

ErrorSubTypeCodeOAuth2Grant.

ErrorSubTypeCodeOAuth2Grant.

ErrorSubTypeCodeOAuth2Res.

ErrorSubTypeCodeOAuth2Res.

ErrorSubTypeCodeOAuth2Authorize.

ErrorSubTypeCodeOAuth2ClientAuth.

ErrorSubTypeCodeOAuth2Grant.

ErrorSubTypeCodeOAuth2Authorize.

ErrorSubTypeCodeOAuth2Authorize.

ErrorSubTypeCodeOAuth2Grant.

ErrorSubTypeCodeOAuth2Grant.

ErrorSubTypeCodeOAuth2Internal.

ErrorSubTypeCodeOAuth2Authorize.

this should only be used for error deserialization.

grant type is not allowed for client.

ErrorSubTypeCodeOAuth2Grant.

All "SubType" values are used as mask sub types of security.ErrorTypeCodeOAuth2.

All "SubType" values are used as mask sub types of security.ErrorTypeCodeOAuth2.

All "SubType" values are used as mask sub types of security.ErrorTypeCodeOAuth2.

All "SubType" values are used as mask sub types of security.ErrorTypeCodeOAuth2.

All "SubType" values are used as mask sub types of security.ErrorTypeCodeOAuth2.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

commonly used (no RFC reference for now).

https://openid.net/specs/openid-connect-core-1_0.html#AuthError.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

https://tools.ietf.org/html/rfc6749#section-5.2.

goland:noinspection GoCommentStart.

https://tools.ietf.org/html/rfc6749#section-4.1.2.1.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

goland:noinspection GoCommentStart.

https://tools.ietf.org/html/rfc7009#section-4.1.1.

for backward compatibility we map it to tenant_name.

ErrorTypes, can be used in errors.Isgoland:noinspection GoUnusedGlobalVariable.

ErrorTypes, can be used in errors.Isgoland:noinspection GoUnusedGlobalVariable.

ErrorTypes, can be used in errors.Isgoland:noinspection GoUnusedGlobalVariable.

ErrorTypes, can be used in errors.Isgoland:noinspection GoUnusedGlobalVariable.

ErrorTypes, can be used in errors.Isgoland:noinspection GoUnusedGlobalVariable.

ErrorTypes, can be used in errors.Isgoland:noinspection GoUnusedGlobalVariable.

BasicClaims imlements Claims.

DefaultAccessToken implements AccessToken and ClaimsContainer.

DefaultRefreshToken implements RefreshToken and ClaimsContainer.

FieldClaimsMapper is a helper type that can be embedded into struct based claims FieldClaimsMapper implements claimsMapper See BasicClaims as an example.

OAuth2Error extends security.CodedError, and implements: - OAuth2ErrorTranslator - json.Marshaler - json.Unmarshaler - web.Headerer - web.StatusCoder - encoding.BinaryMarshaler - encoding.BinaryUnmarshalergoland:noinspection GoNameStartsWithPackageName.

Authentication extends security.Authentication.

goland:noinspection GoNameStartsWithPackageName.

goland:noinspection GoNameStartsWithPackageName.

goland:noinspection GoNameStartsWithPackageName.

goland:noinspection GoNameStartsWithPackageName.

MapClaims imlements Claims & claimsMapper.

StringSetClaim is an alias of utils.StringSet with different JSON serialization specialized for some Claims StringSetClaim serialize as JSON string if there is single element in the set, otherwise as JSON array.