janekolszak/idp

Method IDP.NewChallenge has 5 return statements (exceeds 4 allowed).

Open

func (idp *IDP) NewChallenge(ctx context.Context, r *http.Request, user string) (challenge *Challenge, err error) {
    tokenStr := r.FormValue("challenge")
    if tokenStr == "" {
        // No challenge token
        err = ErrorBadRequest

Method IDP.getChallengeToken has 5 return statements (exceeds 4 allowed).

Open

func (idp *IDP) getChallengeToken(challengeString string) (*jwt.Token, error) {
    token, err := jwt.Parse(challengeString, func(token *jwt.Token) (interface{}, error) {
        _, ok := token.Method.(*jwt.SigningMethodRSA)
        if !ok {
            return nil, ErrorBadSigningMethod

Similar blocks of code found in 2 locations. Consider refactoring.

Open

func (idp *IDP) downloadVerificationKey() (*rsa.PublicKey, error) {

    jwk, err := idp.hc.JSONWebKeys.GetKey(hoauth2.ConsentChallengeKey, "public")
    if err != nil {
        return nil, err

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

func (idp *IDP) downloadConsentKey() (*rsa.PrivateKey, error) {
    jwk, err := idp.hc.JSONWebKeys.GetKey(hoauth2.ConsentEndpointKey, "private")
    if err != nil {
        return nil, err
    }

• Read up
  Read up

exported const VerifyPublicKey should have comment (or a comment on this block) or be unexported

Open

    VerifyPublicKey   = "VerifyPublic"

• Exclude checks
  • Disable engine
  • Disable check

comment on exported method IDP.Close should be of the form "Close ..."

Open

// Closes connection to Hydra, cleans cache etc.

• Exclude checks
  • Disable engine
  • Disable check

comment on exported type IDP should be of the form "IDP ..." (with optional leading article)

Open

// Identity Provider helper

• Exclude checks
  • Disable engine
  • Disable check

exported function ClientInfoKey should have comment or be unexported

Open

func ClientInfoKey(clientID string) string {

• Exclude checks
  • Disable engine
  • Disable check

type name will be used as idp.IDPConfig by other packages, and that stutters; consider calling this Config

Open

type IDPConfig struct {

• Exclude checks
  • Disable engine
  • Disable check

comment on exported method IDP.NewChallenge should be of the form "NewChallenge ..."

Open

// Create a new Challenge. The request will contain all the necessary information from Hydra, passed in the URL.

• Exclude checks
  • Disable engine
  • Disable check

comment on exported type IDPConfig should be of the form "IDPConfig ..." (with optional leading article)

Open

// Identity Provider's options

• Exclude checks
  • Disable engine
  • Disable check

comment on exported function NewIDP should be of the form "NewIDP ..."

Open

// Create the Identity Provider helper

• Exclude checks
  • Disable engine
  • Disable check

comment on exported method IDP.GetChallenge should be of the form "GetChallenge ..."

Open

// Get the Challenge from a cookie, using Gorilla sessions

• Exclude checks
  • Disable engine
  • Disable check