The `aud` claim of a JWT token can be one of the following types: * string * []string Similarly to the https://github.com/coreos/go-oidc/blob/v3/oidc/

The AuthenticatorSpecificError type is used to inform the calling code that the appropriate authentication method failed to authenticate the request.

AuthorizationRequestBody is the object with the current request metadata that the ExternalAuthorizer will send to external authorizer.

AuthorizationRequestInfo is the sub-object with the request metadata that the ExternalAuthorizer will send to the external authorizer.

AuthorizationUserInfo is the sub-object with the user metadata that the ExternalAuthorizer will send to the external authorizer.

Authorizer decides if a request, made by the given identity, is allowed. The interface draws some inspiration from Kubernetes' interface: https://gith

ExternalAuthorizer is responsible for handling authorization in an external authorization server.

HTTPHeaderOpts specifies the location of the user's identity and authentication method inside HTTP headers.

JWTClaimOpts specifies the location of the user's identity inside a JWT's claims.

loginExpiredError is used by authenticators to inform the calling code that the provided credentials were recognized but the login has expired

UserIDTransformer holds the UserID transformation rules.

UserInfo represents the OpenID Connect userinfo claims.

Rules Implementations // regexReplaceTransformationRule represents a single transformation rule that matches the userID with a regular

userIDTransformationRule represents a single transformation rule and encapsulates it's functionality. This is a generic interface that multiple rules