code wiki / _hdl_build / nx_apistack_oidc.nx
nx_apistack_oidc.nx
buildroot/runtime/_hdl_build/nx_apistack_oidc.nx
about
nx_apistack_oidc.nx -- CAP-API-OIDC: OAuth2/OIDC bridge for /api -- parse a JWT (header.payload.signature),
base64url-decode the payload, and extract a claim (sub / level / ...), so an external OIDC token can be mapped to
a Nishi level. (The primary auth stays OPAQUE aPAKE -- no secret ever sent -- which already exceeds bearer OAuth;
this is the interop bridge.) Pure base64url + claim scan, deterministic. license_tier: ORIGINAL
dependencies 1 imports · 1 importers
imports: nx_syscalls.nx
imported by: nx_apistack_oidc_gate.nx
structs
| none |
consts
| 6 | const K_MAGIC_8192: i64 = 8192 |
functions
| 9 | func oidc_valid_structure(jwt: *u8, jwt_n: i64) -> i64 called by 1: main |
| 15 | func oidc_b64val(c: i64) -> i64 called by 1: oidc_b64url_decode |
| 23 | func oidc_b64char(v: i64) -> i64 called by 1: oidc_b64url_encode |
| 30 | func oidc_b64url_decode(src: *u8, src_n: i64, out: *u8) -> i64 |
| 39 | func oidc_b64url_encode(src: *u8, src_n: i64, out: *u8) -> i64 |
| 46 | func oidc_extract_claim(jwt: *u8, jwt_n: i64, claim: *u8, claim_n: i64, out: *u8, cap: i64) -> i64 |