CookieTokenExtractor returns a RequestTokenExtractor which extracts a token from the named cookie in a request.

ExtractBearerToken is a RequestTokenExtractor which extracts a bearer token from a request's Authorization header.

NewRemotePublicKeyRepo is responsible for fetching the JWK Set document.

Verify claims in accordance with OIDC spec http://openid.net/specs/openid-connect-basic-1_0.html#IDTokenValidation.

VerifyClientClaims verifies all the required claims are valid for a "client credentials" JWT.

DefaultPublicKeySetTTL is the default TTL set on the PublicKeySet if no Cache-Control header is provided by the JWK Set document endpoint.

Subject Identifier types defined by the OIDC spec.

Default values for omitted provider config fields.

ClientMetadata holds metadata that the authorization server associates with a client identifier.

ProviderConfig represents the OpenID Provider Metadata specifying what configurations a provider supports.

RequestTokenExtractor funcs extract a raw encoded token from a request.