Authenticate Go client

To authenticate using the OpenID Connect (OIDC) protocol in Go, you can use the golang.org/x/oauth2 package, which provides support for OAuth2 and OIDC.

Get Harsha Thirimanna’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Here’s an example of how you can use the oauth2 package to authenticate with an IAM server:

package main

import (
 "context"
 "fmt"
 "log"

 "golang.org/x/oauth2"
)

func main() {
 // Replace with your IAM server's OIDC discovery URL
 discoveryURL := "https://iam.example.com/.well-known/openid-configuration"

 // Use the oauth2 package's NewOIDCDiscoveryClient function to create a new client
 // that can be used to discover the OIDC configuration for the IAM server.
 oidcClient := oauth2.NewOIDCDiscoveryClient("iam-server")

 // Use the client to retrieve the OIDC configuration from the IAM server.
 provider, err := oidcClient.ProviderConfig(context.Background(), discoveryURL)
 if err != nil {
  log.Fatalf("Error retrieving OIDC configuration: %v", err)
 }

 // Create a new oauth2 Config using the OIDC provider's client ID and the authorization
 // and token endpoints from the OIDC configuration.
 oauth2Config := oauth2.Config{
  ClientID:     "client-id",
  Endpoint:     provider.Endpoint,
  RedirectURL:  "http://localhost:8080/callback",
  Scopes:       []string{"openid", "profile", "email"},
  TokenURL:     provider.TokenEndpoint,
  AuthStyle:    oauth2.AuthStyleInParams,
  AccessType:   "offline",
  ResponseType: "code",
 }

 // Use the oauth2 Config to create a new oauth2 client.
 oauth2Client, err := oauth2Config.Client(context.Background())
 if err != nil {
  log.Fatalf("Error creating oauth2 client: %v", err)
 }

 // Use the oauth2 client to make an authenticated request to the IAM server.
 resp, err := oauth2Client.Get("https://iam.example.com/me")
 if err != nil {
  log.Fatalf("Error making authenticated request: %v", err)
 }
 defer resp.Body.Close()

 // Print the response from the IAM server.
 fmt.Println(resp)
}

This example shows the basic steps involved in using the oauth2 package to authenticate with an IAM server using OIDC. It first retrieves the OIDC configuration from the IAM server using the golang.org/x/oauth2/oidc package's NewOIDCDiscoveryClient function, then uses the configuration to create an oauth2.Config struct. It then uses the oauth2.Config to create an oauth2.Client, which can be used to make authenticated requests to the IAM server.