SignIdentityAssertion mints a long-lived identity_assertion for sub (the agent email), bound to issuer (= the AS public URL, used as both iss and aud). Returns the token and its absolute expiry.
(sub, scope string, assertionVersion int, issuer string)
| 64 | // agent email), bound to issuer (= the AS public URL, used as both iss and |
| 65 | // aud). Returns the token and its absolute expiry. |
| 66 | func (s *Signer) SignIdentityAssertion(sub, scope string, assertionVersion int, issuer string) (string, time.Time, error) { |
| 67 | return s.signTyped(TypIdentityAssertion, sub, scope, assertionVersion, issuer, IdentityAssertionTTL) |
| 68 | } |
| 69 | |
| 70 | // SignAccessToken mints a short-lived access_token for sub. Same issuer/aud |
| 71 | // binding as the assertion. Returns the token and its absolute expiry. |