main.go

Documentation: github.com/MicahParks/keyfunc/examples/keycloak

     1  package main
     2  
     3  import (
     4  	"log"
     5  	"time"
     6  
     7  	"github.com/golang-jwt/jwt/v4"
     8  
     9  	"github.com/MicahParks/keyfunc"
    10  )
    11  
    12  func main() {
    13  	// Get the JWKS URL.
    14  	//
    15  	// This is a local Keycloak JWKS endpoint for the master realm.
    16  	jwksURL := "http://localhost:8080/auth/realms/master/protocol/openid-connect/certs"
    17  
    18  	// Create the keyfunc options. Use an error handler that logs. Refresh the JWKS when a JWT signed by an unknown KID
    19  	// is found or at the specified interval. Rate limit these refreshes. Timeout the initial JWKS refresh request after
    20  	// 10 seconds. This timeout is also used to create the initial context.Context for keyfunc.Get.
    21  	options := keyfunc.Options{
    22  		RefreshErrorHandler: func(err error) {
    23  			log.Printf("There was an error with the jwt.Keyfunc\nError: %s", err.Error())
    24  		},
    25  		RefreshInterval:   time.Hour,
    26  		RefreshRateLimit:  time.Minute * 5,
    27  		RefreshTimeout:    time.Second * 10,
    28  		RefreshUnknownKID: true,
    29  	}
    30  
    31  	// Create the JWKS from the resource at the given URL.
    32  	jwks, err := keyfunc.Get(jwksURL, options)
    33  	if err != nil {
    34  		log.Fatalf("Failed to create JWKS from resource at the given URL.\nError: %s", err.Error())
    35  	}
    36  
    37  	// Get a JWT to parse.
    38  	jwtB64 := "eyJhbGciOiJQUzM4NCIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJMeDFGbWF5UDJZQnR4YXFTMVNLSlJKR2lYUktudzJvdjVXbVlJTUctQkxFIn0.eyJleHAiOjE2MTU0MDY5ODIsImlhdCI6MTYxNTQwNjkyMiwianRpIjoiMGY2NGJjYTktYjU4OC00MWFhLWFkNDEtMmFmZDM2OGRmNTFkIiwiaXNzIjoiaHR0cDovL2xvY2FsaG9zdDo4MDgwL2F1dGgvcmVhbG1zL21hc3RlciIsImF1ZCI6ImFjY291bnQiLCJzdWIiOiJhZDEyOGRmMS0xMTQwLTRlNGMtYjA5Ny1hY2RjZTcwNWJkOWIiLCJ0eXAiOiJCZWFyZXIiLCJhenAiOiJ0b2tlbmRlbG1lIiwiYWNyIjoiMSIsInJlYWxtX2FjY2VzcyI6eyJyb2xlcyI6WyJvZmZsaW5lX2FjY2VzcyIsInVtYV9hdXRob3JpemF0aW9uIl19LCJyZXNvdXJjZV9hY2Nlc3MiOnsiYWNjb3VudCI6eyJyb2xlcyI6WyJtYW5hZ2UtYWNjb3VudCIsIm1hbmFnZS1hY2NvdW50LWxpbmtzIiwidmlldy1wcm9maWxlIl19fSwic2NvcGUiOiJlbWFpbCBwcm9maWxlIiwiY2xpZW50SG9zdCI6IjE3Mi4yMC4wLjEiLCJjbGllbnRJZCI6InRva2VuZGVsbWUiLCJlbWFpbF92ZXJpZmllZCI6ZmFsc2UsInByZWZlcnJlZF91c2VybmFtZSI6InNlcnZpY2UtYWNjb3VudC10b2tlbmRlbG1lIiwiY2xpZW50QWRkcmVzcyI6IjE3Mi4yMC4wLjEifQ.Rxrq41AxbWKIQHWv-Tkb7rqwel3sKT_R_AGvn9mPIHqhw1m7nsQWcL9t2a_8MI2hCwgWtYdgTF1xxBNmb2IW3CZkML5nGfcRrFvNaBHd3UQEqbFKZgnIX29h5VoxekyiwFaGD-0RXL83jF7k39hytEzTatwoVjZ-frga0KFl-nLce3OwncRXVCGmxoFzUsyu9TQFS2Mm_p0AMX1y1MAX1JmLC3WFhH3BohhRqpzBtjSfs_f46nE1-HKjqZ1ERrAc2fmiVJjmG7sT702JRuuzrgUpHlMy2juBG4DkVcMlj4neJUmCD1vZyZBRggfaIxNkwUhHtmS2Cp9tOcwNu47tSg"
    39  
    40  	// Parse the JWT.
    41  	token, err := jwt.Parse(jwtB64, jwks.Keyfunc)
    42  	if err != nil {
    43  		log.Fatalf("Failed to parse the JWT.\nError: %s", err.Error())
    44  	}
    45  
    46  	// Check if the token is valid.
    47  	if !token.Valid {
    48  		log.Fatalf("The token is not valid.")
    49  	}
    50  	log.Println("The token is valid.")
    51  
    52  	// End the background refresh goroutine when it's no longer needed.
    53  	jwks.EndBackground()
    54  }
    55
View as plain text