DecodeToken decodes the token using the JSON web keys from the server.

FilterWorkspacesUserHasAccessTo filters the provided workspace Ids and returns only the ones the user has access to.

GetCompositeClientRolesByUserID is our custom version of GetCompositeClientRolesByUserID This is a workaround for this issue https://github.com/Nerzal/gocloak/issues/306.

GetLoginURL returns the URL of the authz server frontend to which the user should be redirected for login.

GetOIDCInfo gets the OIDC information from the authorization server.

GetResourceServerAccessToken returns the access token for the resource server.

GetTokensUsingAuthCode gets access and refresh tokens according to https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3.

GetUMAInfo gets the UMA information from the authorization server.

GetUserInfo retrieves the user's information from the authz server, given the user's access token.

GetUserInfoFromOIDC returns the user's identifying information from the OIDC user info endpoint.

Setup sets up the authorization server.

%s should be filled with workspace id.

VERB_ALL_PERMS is the verb that allows all actions on the resource.

VERB_READ_WORKSPACE is the verb that allows read permission on a workspace.