New returns a new authenticator with required fields populated.

NewScope creates a new scopes object.

ErrKeyFormat is raised when something is wrong with the encryption keys.

ErrTokenVerification is raised when token verification fails.

AccessTokenClaims is an application specific set of claims.

Authenticator provides Keystone authentication functionality.

Code is an authorization code to return to the client that can be exchanged for an access token.

CustomAccessTokenClaims contains all application specific claims in a single top-level claim that won't clash with the ones defined by IETF.

CustomRefreshTokenClaims contains all application specific claims in a single top-level claim that won't clash with the ones defined by IETF.

IDToken defines an OIDC id_token.

OIDCClaims are claims defined by OIDC to be in an id_token.

OIDCClaimsEmail are claims that make be returned by requesting the email scope.

OIDCClaimsProfile are claims that may be returned by requesting the profile scope.

RefreshTokenClaims is a basic set of JWT claims, plus a wrapper for the IdP's refresh token.

State records state across the call to the authorization server.

Scope defines a list of scopes.