1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
package jwt
import "sync"
// TokenOptionSet is a bit flag containing per-token options.
type TokenOptionSet uint64
var defaultOptions TokenOptionSet
var defaultOptionsMu sync.RWMutex
// TokenOption describes a single token option that can be set on
// the per-token option set (TokenOptionSet)
type TokenOption uint64
const (
// FlattenAudience option controls whether the "aud" claim should be flattened
// to a single string upon the token being serialized to JSON.
//
// This is sometimes important when a JWT consumer does not understand that
// the "aud" claim can actually take the form of an array of strings.
// (We have been notified by users that AWS Cognito has manifested this behavior
// at some point)
//
// Unless the global option is set using `jwt.Settings()`, the default value is
// `disabled`, which means that "aud" claims are always rendered as a arrays of
// strings when serialized to JSON.
FlattenAudience TokenOption = 1 << iota
// MaxPerTokenOption is a marker to denote the last value that an option can take.
// This value has no meaning other than to be used as a marker.
MaxPerTokenOption
)
// Value returns the uint64 value of a single option
func (o TokenOption) Value() uint64 {
return uint64(o)
}
// Value returns the uint64 bit flag value of an option set
func (o TokenOptionSet) Value() uint64 {
return uint64(o)
}
// DefaultOptionSet creates a new TokenOptionSet using the default
// option set. This may differ depending on if/when functions that
// change the global state has been called, such as `jwt.Settings`
func DefaultOptionSet() TokenOptionSet {
return TokenOptionSet(defaultOptions.Value())
}
// Clear sets all bits to zero, effectively disabling all options
func (o *TokenOptionSet) Clear() {
*o = TokenOptionSet(uint64(0))
}
// Set sets the value of this option set, effectively *replacing*
// the entire option set with the new value. This is NOT the same
// as Enable/Disable.
func (o *TokenOptionSet) Set(s TokenOptionSet) {
*o = s
}
// Enable sets the appropriate value to enable the option in the
// option set
func (o *TokenOptionSet) Enable(flag TokenOption) {
*o = TokenOptionSet(o.Value() | uint64(flag))
}
// Enable sets the appropriate value to disable the option in the
// option set
func (o *TokenOptionSet) Disable(flag TokenOption) {
*o = TokenOptionSet(o.Value() & ^uint64(flag))
}
// IsEnabled returns true if the given bit on the option set is enabled.
func (o TokenOptionSet) IsEnabled(flag TokenOption) bool {
return (uint64(o)&uint64(flag) == uint64(flag))
}
|
