Google Git
Sign in
go / oauth2 / d5ff5ab876fbb2a8c14cc5470db12f6b60fb90ef
commitd5ff5ab876fbb2a8c14cc5470db12f6b60fb90ef[log] [tgz]
authorrobnorman <rob.norman@infinitycloud.com>Wed Sep 16 16:33:09 2015 +0000
committerBurcu Dogan <jbd@google.com>Mon Sep 21 17:56:07 2015 +0000
treeccb80a69179e16862934fced591c6c9a2641f457
parent9ecad5029bb3332276edfb7b23add78b0387a9f3 [diff]
jwt: allow setting a custom expiry time for JWT tokens

The current implementation of JWS/JWT in this package uses a fixed
1 hour expiry time for JWT tokens.

Some services do not accept such a long expiry time, e.g. Salesforce,
which defaults to a 5 minute expiry.
https://help.salesforce.com/HTViewHelpDoc?id=remoteaccess_oauth_jwt_flow.htm

This change adds an Expires time.Duration property to the jwt.Config
struct that, if set, will be used to calculate the jws.ClaimSet Exp property.
It allows a custom expiry to be set on a JWT token.

This change is backward compatible and will revert to previous behaviour if
the Expires property is not set.

Fixes golang/oauth2#151

Change-Id: I3159ac2a5711ef10389d83c0e290bfc7a9f54015
Reviewed-on: https://go-review.googlesource.com/14681
Reviewed-by: Burcu Dogan <jbd@google.com>
2 files changed
tree: ccb80a69179e16862934fced591c6c9a2641f457
  1. bitbucket/
  2. clientcredentials/
  3. facebook/
  4. github/
  5. google/
  6. internal/
  7. jws/
  8. jwt/
  9. linkedin/
  10. odnoklassniki/
  11. paypal/
  12. vk/
  13. .travis.yml
  14. AUTHORS
  15. client_appengine.go
  16. CONTRIBUTING.md
  17. CONTRIBUTORS
  18. example_test.go
  19. LICENSE
  20. oauth2.go
  21. oauth2_test.go
  22. README.md
  23. token.go
  24. token_test.go
  25. transport.go
  26. transport_test.go
README.md

OAuth2 for Go

Build Status

oauth2 package contains a client implementation for OAuth 2.0 spec.

Installation

go get golang.org/x/oauth2

See godoc for further documentation and examples.

App Engine

In change 96e89be (March 2015) we removed the oauth2.Context2 type in favor of the context.Context type from the golang.org/x/net/context package

This means its no longer possible to use the “Classic App Engine” appengine.Context type with the oauth2 package. (You're using Classic App Engine if you import the package "appengine".)

To work around this, you may use the new "google.golang.org/appengine" package. This package has almost the same API as the "appengine" package, but it can be fetched with go get and used on “Managed VMs” and well as Classic App Engine.

See the new appengine package's readme for information on updating your app.

If you don't want to update your entire app to use the new App Engine packages, you may use both sets of packages in parallel, using only the new packages with the oauth2 package.

import (
	"golang.org/x/net/context"
	"golang.org/x/oauth2"
	"golang.org/x/oauth2/google"
	newappengine "google.golang.org/appengine"
	newurlfetch "google.golang.org/appengine/urlfetch"

	"appengine"
)

func handler(w http.ResponseWriter, r *http.Request) {
	var c appengine.Context = appengine.NewContext(r)
	c.Infof("Logging a message with the old package")

	var ctx context.Context = newappengine.NewContext(r)
	client := &http.Client{
		Transport: &oauth2.Transport{
			Source: google.AppEngineTokenSource(ctx, "scope"),
			Base:   &newurlfetch.Transport{Context: ctx},
		},
	}
	client.Get("...")
}