AccessToken delivers an access_token and a refresh_token if the client gives a valid token for OIDC.

AdminRoutes setup the routing for OpenID Connect on the admin port.

ChooseKeyForIDToken can be used to check an id_token as a JWT.

FindLoginDomain returns the context name for which the login domain matches the host.

GetDelegatedCode is mostly a proxy for the userinfo request made by the cloudery to the OIDC provider.

GetIDTokenKeys returns the keys that can be used to verify that an OIDC id_token is valid.

Login checks that the OpenID Connect has been successful and logs in the user.

LoginDomainHandler is the handler for the requests on the login domain.

Logout is the handler for the OpenID back-channel logout endpoint.

Redirect is the route after the Identity Provider has redirected the user to the stack.

Routes setup routing for OpenID Connect routes.

Start is the route to start the OpenID Connect dance.

StartFranceConnect is the route to start the FranceConnect dance.

Config is the config to log in a user with an OpenID Connect identity provider.