Function NewIdentityProvider

backend/plugin/idp/oidc/oidc.go:33–62

NewIdentityProvider initializes a new OIDC Identity Provider with the given configuration.

(ctx context.Context, config *storepb.OIDCIdentityProviderConfig)

// NewIdentityProvider initializes a new OIDC Identity Provider with the given
// configuration.
func NewIdentityProvider(ctx context.Context, config *storepb.OIDCIdentityProviderConfig) (*IdentityProvider, error) {
	for v, field := range map[string]string{
		config.Issuer:                  "issuer",
		config.ClientId:                "clientId",
		config.ClientSecret:            "clientSecret",
		config.FieldMapping.Identifier: "fieldMapping.identifier",
	} {
		if v == "" {
			return nil, errors.Errorf("the field %q is empty but required", field)
		}
	}

	client := &http.Client{
		Transport: &http.Transport{
			TLSClientConfig: &tls.Config{
				InsecureSkipVerify: config.SkipTlsVerify,
			},
		},
	}
	ctx = context.WithValue(ctx, oauth2.HTTPClient, client)
	p, err := oidc.NewProvider(ctx, config.Issuer)
	if err != nil {
		return nil, errors.Wrap(err, "create new provider")
	}
	return &IdentityProvider{
		client:   client,
		provider: p,
		config:   config,
	}, nil
}

// ExchangeToken returns the exchanged OAuth2 token using the given redirect
// URL and authorization code.