Sign in through Keycloak: code flow with PKCE, verified ID token, 12-hour session (issue 1263)

Library choice: golang.org/x/oauth2 for the code exchange, github.com/coreos/go-oidc/v3 for the ID token's
verification (issuer, audience, expiry, signature from the issuer's JWKS).
This commit is contained in:
jochen
2026-10-19 22:16:15 +02:00
parent 68c141849f
commit 8e0ef84060
8 changed files with 779 additions and 12 deletions
+7 -1
View File
@@ -2,4 +2,10 @@ module mesh-mail-web
go 1.26.0
require git.novox.be/novox/mesh-sdk/go v0.1.14-0.20261019062050-34392e74916c
require (
git.novox.be/novox/mesh-sdk/go v0.1.14-0.20261019062050-34392e74916c
github.com/coreos/go-oidc/v3 v3.21.0
golang.org/x/oauth2 v0.37.0
)
require github.com/go-jose/go-jose/v4 v4.1.4 // indirect