Mint and verify short-lived RS256 user tokens.

ExApps sign after AppAPI auth; Microservices check a static public key or an OIDC issuer and forward the same bearer. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 14:03:52 +02:00
parent 92feaa6915
commit f082561cc6
13 changed files with 1091 additions and 0 deletions
@@ -0,0 +1,14 @@
+module gitea.neitzel.de/konrad/go-usertoken
+
+go 1.27.0
+
+require (
+	github.com/coreos/go-oidc/v3 v3.14.1
+	github.com/golang-jwt/jwt/v5 v5.2.2
+)
+
+require (
+	github.com/go-jose/go-jose/v4 v4.0.5 // indirect
+	golang.org/x/crypto v0.36.0 // indirect
+	golang.org/x/oauth2 v0.28.0 // indirect
+)