Iddawc Handle the flow of OAuth2 and OpenID Connect authentication process from the client side.

Loading...
Searching...
No Matches
Data Structures | Macros | Enumerations | Functions
iddawc.h File Reference
`#include <jansson.h>`
`#include <orcania.h>`
`#include <ulfius.h>`
`#include <rhonabwy.h>`
`#include "iddawc-cfg.h"`

Go to the source code of this file.

## Data Structures
struct | _i_session

## Macros
#define | I_OK 0
| Success.
#define | I_ERROR 1
| Error.
#define | I_ERROR_PARAM 2
| Error in parameters.
#define | I_ERROR_MEMORY 3
| Memory error.
#define | I_ERROR_UNAUTHORIZED 4
| Request unauthorized.
#define | I_ERROR_SERVER 5
| Server error.
#define | I_RESPONSE_TYPE_NONE 0x00000000
| No response type.
#define | I_RESPONSE_TYPE_CODE 0x00000001
| Response type code.
#define | I_RESPONSE_TYPE_TOKEN 0x00000010
| Response type token.
#define | I_RESPONSE_TYPE_ID_TOKEN 0x00000100
| Response type id_token.
#define | I_RESPONSE_TYPE_PASSWORD 0x00001000
| Grant type password.
#define | I_RESPONSE_TYPE_CLIENT_CREDENTIALS 0x00010000
| Grant type client_credentials.
#define | I_RESPONSE_TYPE_REFRESH_TOKEN 0x00100000
| Grant type refresh_token.
#define | I_RESPONSE_TYPE_DEVICE_CODE 0x01000000
| Grant type urn:ietf:params:oauth:grant-type:device_code.
#define | I_RESPONSE_TYPE_CIBA 0x10000000
| Grant type urn:openid:params:grant-type:ciba.
#define | I_AUTH_METHOD_GET 0x00000001
| auth endpoint using GET method
#define | I_AUTH_METHOD_POST 0x00000010
| auth endpoint using POST method
#define | I_AUTH_METHOD_JWT_SIGN_SECRET 0x00000100
| auth endpoint using a JWT signed with the client secret
#define | I_AUTH_METHOD_JWT_SIGN_PRIVKEY 0x00001000
| auth endpoint using a JWT signed with the client private key
#define | I_AUTH_METHOD_JWT_ENCRYPT_SECRET 0x00010000
| auth endpoint using a JWT encrypted with the client secret
#define | I_AUTH_METHOD_JWT_ENCRYPT_PUBKEY 0x00100000
| auth endpoint using a JWT encrypted with the server public key
#define | I_TOKEN_AUTH_METHOD_NONE 0x00000000
| token endpoint using no authentication
#define | I_TOKEN_AUTH_METHOD_SECRET_BASIC 0x00000001
| token endpoint using HTTP basic auth with client_id and client password
#define | I_TOKEN_AUTH_METHOD_SECRET_POST 0x00000010
| token endpoint using secret send in POST parameters
#define | I_TOKEN_AUTH_METHOD_TLS_CERTIFICATE 0x00000100
| token endpoint using TLS Certificate authentication
#define | I_TOKEN_AUTH_METHOD_JWT_SIGN_SECRET 0x00001000
| token endpoint using a JWT signed with the client secret
#define | I_TOKEN_AUTH_METHOD_JWT_SIGN_PRIVKEY 0x00010000
| token endpoint using a JWT signed with the client private key
#define | I_TOKEN_AUTH_METHOD_JWT_ENCRYPT_SECRET 0x00100000
| token endpoint using a JWT encrypted with the client secret
#define | I_TOKEN_AUTH_METHOD_JWT_ENCRYPT_PUBKEY 0x01000000
| token endpoint using a JWT signed with the client private key and encrypted with the server public key or the client secret
#define | I_STRICT_NO 0x00000000
| Do not stricly conform to openid config result.
#define | I_STRICT_YES 0x00000001
| Stricly conform to openid config result.
#define | I_STRICT_JWT_AT_SIGNATURE 0x00000010
| Verify JWT access tokens signatures.
#define | I_STRICT_JWT_AT_HEADER_TYP 0x00000100
| Verify JWT access tokens header typ value.
#define | I_STRICT_JWT_AT_CLAIM 0x00001000
| Verify JWT access tokens claims values.
#define | I_AUTH_SIGN_ALG_MAX_LENGTH 8
| Max length of a sign algorithm name.
#define | I_BEARER_TYPE_HEADER 0
| Bearer type header, the token will be available in the header.
#define | I_BEARER_TYPE_BODY 1
| Bearer type body, the token will be available as a body url-encoded parameter.
#define | I_BEARER_TYPE_URL 2
| Bearer type url, the token will be available as a url query parameter.
#define | I_INTROSPECT_REVOKE_AUTH_NONE 0
| Introspection/Revocation - no authentication.
#define | I_INTROSPECT_REVOKE_AUTH_ACCESS_TOKEN 1
| Introspection/Revocation - authentication using access token.
#define | I_INTROSPECT_REVOKE_AUTH_CLIENT_TARGET 2
| Introspection/Revocation - authentication with client credentials.
#define | I_TOKEN_TYPE_ACCESS_TOKEN 0
#define | I_TOKEN_TYPE_ID_TOKEN 1
#define | I_TOKEN_TYPE_USERINFO 2
#define | I_TOKEN_TYPE_INTROSPECTION 3
#define | I_TOKEN_TYPE_RESPONSE_AUTH 4
#define | I_HEADER_PREFIX_BEARER "Bearer "
#define | I_HEADER_PREFIX_DPOP "DPoP "
#define | I_HEADER_AUTHORIZATION "Authorization"
#define | I_CONTENT_TYPE_JWKS "application/jwk-set+json"
#define | I_BODY_URL_PARAMETER "access_token"
#define | I_HEADER_DPOP "DPoP"
#define | I_REMOTE_VERIFY_NONE 0x0000
| No TLS Verification.
#define | I_REMOTE_HOST_VERIFY_PEER 0x0001
| Verify TLS session with peers.
#define | I_REMOTE_HOST_VERIFY_HOSTNAME 0x0010
| Verify TLS session with hostname.
#define | I_REMOTE_PROXY_VERIFY_PEER 0x0100
| Verify TLS session with peers.
#define | I_REMOTE_PROXY_VERIFY_HOSTNAME 0x1000
| Verify TLS session with hostname.
#define | I_PKCE_NONE 0
| No PKCE.
#define | I_PKCE_METHOD_PLAIN 1
| PKCE using method plain.
#define | I_PKCE_METHOD_S256 2
| PKCE using method SHA256.
#define | I_CLAIM_TARGET_ALL 0
| Add claim to userinfo and id_token.
#define | I_CLAIM_TARGET_USERINFO 1
| Add claim to userinfo.
#define | I_CLAIM_TARGET_ID_TOKEN 2
| Add claim to id_token.
#define | I_CLAIM_ESSENTIAL_NULL 0
| Set claim value to null.
#define | I_CLAIM_ESSENTIAL_TRUE 1
| Set claim essential value to true.
#define | I_CLAIM_ESSENTIAL_FALSE 2
| Set claim essential value to false.
#define | I_CLAIM_ESSENTIAL_IGNORE 3
#define | I_CIBA_MODE_NONE 0
#define | I_CIBA_MODE_POLL 1
#define | I_CIBA_MODE_PING 2
#define | I_CIBA_MODE_PUSH 3
#define | I_CIBA_LOGIN_HINT_FORMAT_JSON 0
#define | I_CIBA_LOGIN_HINT_FORMAT_JWT 1
#define | I_CIBA_LOGIN_HINT_FORMAT_ID_TOKEN 2
#define | I_DEFAULT_RESPONSE_MAX_BODY_SIZE 4194304
#define | I_DEFAULT_RESPONSE_MAX_HEADER_COUNT 64

## Enumerations
enum | i_option { I_OPT_NONE = 0 , I_OPT_RESPONSE_TYPE = 1 , I_OPT_SCOPE = 2 , I_OPT_SCOPE_APPEND = 3 , I_OPT_STATE = 4 , I_OPT_NONCE = 5 , I_OPT_REDIRECT_URI = 6 , I_OPT_REDIRECT_TO = 7 , I_OPT_CLIENT_ID = 8 , I_OPT_CLIENT_SECRET = 9 , I_OPT_ADDITIONAL_PARAMETER = 10 , I_OPT_ADDITIONAL_RESPONSE = 11 , I_OPT_AUTH_ENDPOINT = 12 , I_OPT_TOKEN_ENDPOINT = 13 , I_OPT_OPENID_CONFIG_ENDPOINT = 14 , I_OPT_OPENID_CONFIG = 15 , I_OPT_OPENID_CONFIG_STRICT = 16 , I_OPT_USERINFO_ENDPOINT = 17 , I_OPT_RESULT = 18 , I_OPT_ERROR = 19 , I_OPT_ERROR_DESCRIPTION = 20 , I_OPT_ERROR_URI = 21 , I_OPT_CODE = 22 , I_OPT_REFRESH_TOKEN = 23 , I_OPT_ACCESS_TOKEN = 24 , I_OPT_ID_TOKEN = 25 , I_OPT_AUTH_METHOD = 28 , I_OPT_TOKEN_METHOD = 29 , I_OPT_TOKEN_TYPE = 30 , I_OPT_EXPIRES_IN = 31 , I_OPT_EXPIRES_AT = 32 , I_OPT_USERNAME = 33 , I_OPT_USER_PASSWORD = 34 , I_OPT_ISSUER = 35 , I_OPT_USERINFO = 36 , I_OPT_NONCE_GENERATE = 37 , I_OPT_STATE_GENERATE = 38 , I_OPT_X5U_FLAGS = 39 , I_OPT_SERVER_KID = 40 , I_OPT_SERVER_ENC_ALG = 41 , I_OPT_SERVER_ENC = 42 , I_OPT_SERVER_JWKS_CACHE_EXPIRATION = 43 , I_OPT_CLIENT_KID = 44 , I_OPT_CLIENT_SIGN_ALG = 45 , I_OPT_CLIENT_ENC_ALG = 46 , I_OPT_CLIENT_ENC = 47 , I_OPT_TOKEN_JTI = 48 , I_OPT_TOKEN_JTI_GENERATE = 49 , I_OPT_TOKEN_EXP = 50 , I_OPT_TOKEN_TARGET = 51 , I_OPT_TOKEN_TARGET_TYPE_HINT = 52 , I_OPT_REVOCATION_ENDPOINT = 53 , I_OPT_INTROSPECTION_ENDPOINT = 54 , I_OPT_REGISTRATION_ENDPOINT = 55 , I_OPT_REGISTRATION_CLIENT_URI = 56 , I_OPT_DEVICE_AUTHORIZATION_ENDPOINT = 57 , I_OPT_DEVICE_AUTH_CODE = 58 , I_OPT_DEVICE_AUTH_USER_CODE = 59 , I_OPT_DEVICE_AUTH_VERIFICATION_URI = 60 , I_OPT_DEVICE_AUTH_VERIFICATION_URI_COMPLETE = 61 , I_OPT_DEVICE_AUTH_EXPIRES_IN = 62 , I_OPT_DEVICE_AUTH_INTERVAL = 63 , I_OPT_END_SESSION_ENDPOINT = 64 , I_OPT_CHECK_SESSION_IRAME = 65 , I_OPT_PUSHED_AUTH_REQ_ENDPOINT = 66 , I_OPT_PUSHED_AUTH_REQ_REQUIRED = 67 , I_OPT_PUSHED_AUTH_REQ_EXPIRES_IN = 68 , I_OPT_PUSHED_AUTH_REQ_URI = 69 , I_OPT_USE_DPOP = 70 , I_OPT_DPOP_KID = 71 , I_OPT_DECRYPT_CODE = 72 , I_OPT_DECRYPT_REFRESH_TOKEN = 73 , I_OPT_DECRYPT_ACCESS_TOKEN = 74 , I_OPT_DPOP_SIGN_ALG = 75 , I_OPT_HTTP_PROXY = 76 , I_OPT_TLS_KEY_FILE = 77 , I_OPT_TLS_CERT_FILE = 78 , I_OPT_REMOTE_CERT_FLAG = 79 , I_OPT_PKCE_CODE_VERIFIER = 80 , I_OPT_PKCE_CODE_VERIFIER_GENERATE = 81 , I_OPT_PKCE_METHOD = 82 , I_OPT_RESOURCE_INDICATOR = 83 , I_OPT_ACCESS_TOKEN_SIGNING_ALG = 84 , I_OPT_ACCESS_TOKEN_ENCRYPTION_ALG = 85 , I_OPT_ACCESS_TOKEN_ENCRYPTION_ENC = 86 , I_OPT_ID_TOKEN_SIGNING_ALG = 87 , I_OPT_ID_TOKEN_ENCRYPTION_ALG = 88 , I_OPT_ID_TOKEN_ENCRYPTION_ENC = 89 , I_OPT_USERINFO_SIGNING_ALG = 90 , I_OPT_USERINFO_ENCRYPTION_ALG = 91 , I_OPT_USERINFO_ENCRYPTION_ENC = 92 , I_OPT_REQUEST_OBJECT_SIGNING_ALG = 93 , I_OPT_REQUEST_OBJECT_ENCRYPTION_ALG = 94 , I_OPT_REQUEST_OBJECT_ENCRYPTION_ENC = 95 , I_OPT_TOKEN_ENDPOINT_SIGNING_ALG = 96 , I_OPT_TOKEN_ENDPOINT_ENCRYPTION_ALG = 97 , I_OPT_TOKEN_ENDPOINT_ENCRYPTION_ENC = 98 , I_OPT_CIBA_REQUEST_SIGNING_ALG = 99 , I_OPT_CIBA_REQUEST_ENCRYPTION_ALG = 100 , I_OPT_CIBA_REQUEST_ENCRYPTION_ENC = 101 , I_OPT_AUTH_RESPONSE_SIGNING_ALG = 102 , I_OPT_AUTH_RESPONSE_ENCRYPTION_ALG = 103 , I_OPT_AUTH_RESPONSE_ENCRYPTION_ENC = 104 , I_OPT_CIBA_ENDPOINT = 105 , I_OPT_CIBA_MODE = 106 , I_OPT_CIBA_USER_CODE = 107 , I_OPT_CIBA_LOGIN_HINT = 108 , I_OPT_CIBA_LOGIN_HINT_FORMAT = 109 , I_OPT_CIBA_LOGIN_HINT_KID = 110 , I_OPT_CIBA_BINDING_MESSAGE = 111 , I_OPT_CIBA_REQUESTED_EXPIRY = 112 , I_OPT_CIBA_CLIENT_NOTIFICATION_TOKEN = 113 , I_OPT_CIBA_CLIENT_NOTIFICATION_TOKEN_GENERATE = 114 , I_OPT_CIBA_ACR_VALUES = 115 , I_OPT_CIBA_ACR_VALUES_APPEND = 116 , I_OPT_CIBA_AUTH_REQ_ID = 117 , I_OPT_CIBA_CLIENT_NOTIFICATION_ENDPOINT = 118 , I_OPT_CIBA_AUTH_REQ_EXPIRES_IN = 119 , I_OPT_CIBA_AUTH_REQ_INTERVAL = 120 , I_OPT_FRONTCHANNEL_LOGOUT_URI = 121 , I_OPT_FRONTCHANNEL_LOGOUT_SESSION_REQUIRED = 122 , I_OPT_BACKCHANNEL_LOGOUT_URI = 123 , I_OPT_BACKCHANNEL_LOGOUT_SESSION_REQUIRED = 124 , I_OPT_POST_LOGOUT_REDIRECT_URI = 125 , I_OPT_ID_TOKEN_SID = 126 , I_OPT_SAVE_HTTP_REQUEST_RESPONSE = 127 , I_OPT_DPOP_NONCE_AS = 128 , I_OPT_DPOP_NONCE_RS = 129 , I_OPT_RESPONSE_MAX_BODY_SIZE = 130 , I_OPT_RESPONSE_MAX_HEADER_COUNT = 131 }

## Functions
int | i_global_init ()
void | i_global_close ()
void | i_free (void *data)
int | i_init_session (struct _i_session *i_session)
void | i_clean_session (struct _i_session *i_session)
int | i_set_response_type (struct _i_session *i_session, unsigned int i_value)
int | i_set_result (struct _i_session *i_session, unsigned int i_value)
int | i_set_int_parameter (struct _i_session *i_session, i_option option, unsigned int i_value)
int | i_set_str_parameter (struct _i_session *i_session, i_option option, const char *s_value)
int | i_set_additional_parameter (struct _i_session *i_session, const char *s_key, const char *s_value)
int | i_set_additional_response (struct _i_session *i_session, const char *s_key, const char *s_value)
int | i_add_claim_request (struct _i_session *i_session, int target, const char *claim, int essential, const char *value)
int | i_remove_claim_request (struct _i_session *i_session, int target, const char *claim)
int | i_set_rich_authorization_request_json_t (struct _i_session *i_session, const char *type, json_t *j_value)
int | i_set_rich_authorization_request_str (struct _i_session *i_session, const char *type, const char *value)
int | i_remove_rich_authorization_request (struct _i_session *i_session, const char *type)
json_t * | i_get_rich_authorization_request_json_t (struct _i_session *i_session, const char *type)
char * | i_get_rich_authorization_request_str (struct _i_session *i_session, const char *type)
unsigned int | i_get_response_type (struct _i_session *i_session)
unsigned int | i_get_result (struct _i_session *i_session)
unsigned int | i_get_int_parameter (struct _i_session *i_session, i_option option)
const char * | i_get_str_parameter (struct _i_session *i_session, i_option option)
const char * | i_get_additional_parameter (struct _i_session *i_session, const char *s_key)
const char * | i_get_additional_response (struct _i_session *i_session, const char *s_key)
json_t * | i_get_server_configuration (struct _i_session *i_session)
int | i_set_server_configuration (struct _i_session *i_session, json_t *j_openid_config)
json_t * | i_get_server_jwks (struct _i_session *i_session)
int | i_set_server_jwks (struct _i_session *i_session, json_t *j_jwks)
json_t * | i_get_client_jwks (struct _i_session *i_session)
int | i_set_client_jwks (struct _i_session *i_session, json_t *j_jwks)
int | i_set_parameter_list (struct _i_session *i_session,...)
json_t * | i_export_session_json_t (struct _i_session *i_session)
int | i_import_session_json_t (struct _i_session *i_session, json_t *j_import)
char * | i_export_session_str (struct _i_session *i_session)
int | i_import_session_str (struct _i_session *i_session, const char *str_import)
int | i_import_session_from_registration (struct _i_session *i_session, json_t *j_registration)
int | i_get_openid_config (struct _i_session *i_session)
int | i_build_auth_url_get (struct _i_session *i_session)
int | i_run_auth_request (struct _i_session *i_session)
int | i_parse_redirect_to (struct _i_session *i_session)
int | i_run_token_request (struct _i_session *i_session)
int | i_parse_token_response (struct _i_session *i_session, int http_status, json_t *j_response)
int | i_verify_id_token (struct _i_session *i_session)
int | i_verify_jwt_access_token (struct _i_session *i_session, const char *aud)
int | i_get_userinfo (struct _i_session *i_session, int get_jwt)
int | i_get_userinfo_custom (struct _i_session *i_session, const char *http_method, struct _u_map *additional_query, struct _u_map *additional_headers)
int | i_get_token_introspection (struct _i_session *i_session, json_t **j_result, int authentication, int get_jwt)
int | i_revoke_token (struct _i_session *i_session, int authentication)
int | i_register_client (struct _i_session *i_session, json_t *j_parameters, int update_session, json_t **j_result)
int | i_get_registration_client (struct _i_session *i_session, json_t **j_result)
int | i_manage_registration_client (struct _i_session *i_session, json_t *j_parameters, int update_session, json_t **j_result)
int | i_delete_registration_client (struct _i_session *i_session)
char * | i_generate_dpop_token (struct _i_session *i_session, const char *htm, const char *htu, time_t iat, int add_ath)
int | i_verify_dpop_proof (const char *dpop_header, const char *htm, const char *htu, time_t max_iat, const char *jkt, const char *access_token)
char * | i_generate_client_assertion (struct _i_session *i_session, const char *aud)
int | i_perform_resource_service_request (struct _i_session *i_session, struct _u_request *http_request, struct _u_response *http_response, int refresh_if_expired, int bearer_type, int use_dpop, time_t dpop_iat)
int | i_run_par_request (struct _i_session *i_session)
int | i_run_device_auth_request (struct _i_session *i_session)
int | i_run_ciba_request (struct _i_session *i_session)
char * | i_build_end_session_url (struct _i_session *i_session)
int | i_verify_end_session_backchannel_token (struct _i_session *i_session, const char *token)
int | i_close_session (struct _i_session *i_session, const char *sid)