<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Authentication &amp; authorization | go-openapi runtime</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/index.html</link><description>Worked examples covering API keys, HTTP Basic, Bearer/JWT, OAuth2
access-code flow, composed schemes, custom authorizers, and
client-side credential attachment.</description><generator>Hugo</generator><language>en-us</language><atom:link href="https://go-openapi.github.io/runtime/usage/examples/auth/index.xml" rel="self" type="application/rss+xml"/><item><title>API key (single scheme)</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/api-key/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/api-key/index.html</guid><description>Simplest server-side auth — a single API key carried in a header
(or query parameter), validated against a static map.</description></item><item><title>HTTP Basic</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/basic/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/basic/index.html</guid><description>RFC 7617 Basic auth with realm and a WWW-Authenticate challenge on
failure.</description></item><item><title>Bearer + JWT</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/bearer-jwt/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/bearer-jwt/index.html</guid><description>OAuth2-style Bearer tokens carrying a JWT — verified locally,
scope-checked against the operation's required scopes.</description></item><item><title>Composed schemes (AND / OR)</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/composed/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/composed/index.html</guid><description>Multiple security schemes per operation — AND inside an entry,
OR between entries — with a single principal type.</description></item><item><title>OAuth2 access-code (Google)</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/oauth2-access-code/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/oauth2-access-code/index.html</guid><description>Full OAuth2 access-code handshake against Google — login redirect,
callback handler, token exchange and protected operations.</description></item><item><title>Custom Authorizer (RBAC)</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/custom-authorizer/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/custom-authorizer/index.html</guid><description>Pluggable Authorizer that gates the principal for the matched
operation — a worked role-based access control example, orthogonal
to whichever Authenticator was used.</description></item><item><title>Client-side credentials</title><link>https://go-openapi.github.io/runtime/usage/examples/auth/client-side/index.html</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://go-openapi.github.io/runtime/usage/examples/auth/client-side/index.html</guid><description>Attaching auth information to outgoing requests — Basic, API key,
Bearer, composed writers, and a custom HMAC signer.</description></item></channel></rss>