claims.go

/*
 * Tencent is pleased to support the open source community by making TKEStack
 * available.
 *
 * Copyright (C) 2012-2019 Tencent. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 * this file except in compliance with the License. You may obtain a copy of the
 * License at
 *
 * https://opensource.org/licenses/Apache-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OF ANY KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations under the License.
 */

package claims

// IDTokenClaims is an OpenID Connect extension that provides a predictable
// representation of an authorization event.
type IDTokenClaims struct {
	Issuer           string   `json:"iss"`
	Subject          string   `json:"sub"`
	Audience         Audience `json:"aud"`
	Expiry           int64    `json:"exp"`
	IssuedAt         int64    `json:"iat"`
	AuthorizingParty string   `json:"azp,omitempty"`
	Nonce            string   `json:"nonce,omitempty"`
	AccessTokenHash  string   `json:"at_hash,omitempty"`

	Groups            []string           `json:"groups,omitempty"`
	Name              string             `json:"name,omitempty"`
	FederatedIDClaims *FederatedIDClaims `json:"federated_claims,omitempty"`
}

// FederatedIDClaims represents the extension struct of claims.
type FederatedIDClaims struct {
	// 租户ID
	ConnectorID string `json:"connector_id,omitempty"`
	// 用户ID
	UserID string `json:"user_id,omitempty"`
}