New creates a new Token with the specified signing method and an empty map of claims.

Parse parses, validates, verifies the signature and returns the parsed token. keyFunc will receive the parsed token and should return the cryptographi

ParseECPrivateKeyFromPEM parses a PEM encoded Elliptic Curve Private Key Structure

ParseECPublicKeyFromPEM parses a PEM encoded PKCS1 or PKCS8 public key

ParseEdPrivateKeyFromPEM parses a PEM-encoded Edwards curve private key

ParseEdPublicKeyFromPEM parses a PEM-encoded Edwards curve public key

ParseRSAPrivateKeyFromPEM parses a PEM encoded PKCS1 or PKCS8 private key

ParseRSAPrivateKeyFromPEMWithPassword parses a PEM encoded PKCS1 or PKCS8 private key protected with password Deprecated: This function is deprecated

ParseRSAPublicKeyFromPEM parses a PEM encoded PKCS1 or PKCS8 public key

ParseWithClaims is a shortcut for NewParser().ParseWithClaims(). Note: If you provide a custom claim implementation that embeds one of the standard c

Sign implements token signing for the SigningMethod For this signing method, must be an *rsa.PrivateKey structure.

Sign implements token signing for the SigningMethod. For this signing method, key must be an ecdsa.PrivateKey struct

Sign implements token signing for the SigningMethod. For this signing method, key must be an ed25519.PrivateKey

Sign implements token signing for the SigningMethod. For this signing method, key must be an rsa.PrivateKey struct

Sign implements token signing for the SigningMethod. Key must be []byte

Only allow 'none' signing if UnsafeAllowNoneSignatureType is specified as the key

Extension of Parsing, this is to test out functionality specific to switching codecs with padding.

UnmarshalJSON is an implementation of the json.RawMessage interface and deserializses a NumericDate from a JSON representation, i.e. a json.Number. Th

Valid validates time based claims "exp, iat, nbf". There is no accounting for clock skew. As well, if any of the above claims are not in the token, it

Valid validates time based claims "exp, iat, nbf". There is no accounting for clock skew. As well, if any of the above claims are not in the token, it

Valid validates time based claims "exp, iat, nbf". There is no accounting for clock skew. As well, if any of the above claims are not in the token, it

Verify implements token verification for the SigningMethod For this signing method, must be an *rsa.PublicKey structure.

Verify implements token verification for the SigningMethod. For this verify method, key must be an ecdsa.PublicKey struct

Verify implements token verification for the SigningMethod. For this verify method, key must be an ed25519.PublicKey

Verify implements token verification for the SigningMethod. For this verify method, key must be an rsa.PublicKey struct

Verify implements token verification for the SigningMethod. Returns nil if the signature is valid.

Only allow 'none' alg type if UnsafeAllowNoneSignatureType is specified as the key

VerifyAudience compares the aud claim against cmp. If required is false, this method will return true if the value matches or is unset

VerifyAudience compares the aud claim against cmp. If required is false, this method will return true if the value matches or is unset

VerifyIssuer compares the iss claim against cmp. If required is false, this method will return true if the value matches or is unset

VerifyIssuer compares the iss claim against cmp. If required is false, this method will return true if the value matches or is unset

VerifyIssuer compares the iss claim against cmp. If required is false, this method will return true if the value matches or is unset

WithJSONNumber is an option to configure the underlying JSON parser with UseNumber

WithParser parses using a custom parser

WithValidMethods is an option to supply algorithm methods that the parser will check. Only those methods will be considered valid. It is heavily encou

WithoutClaimsValidation is an option to disable claims validation. This option should only be used if you exactly know what you are doing.

reads the form values, checks them and creates the token

read the key files before starting http handlers

only accessible with a valid token

Strips 'Bearer ' prefix from bearer token string