---
title: Go SDK
description: Use the official Sudomimus Go token module and understand its current coverage.
editUrl: true
head: []
template: doc
sidebar:
  order: 5
  hidden: false
  attrs: {}
pagefind: true
draft: false
---

import { CardGrid, LinkCard } from "@astrojs/starlight/components";
import SdkCapabilityTable from "../../../../components/SdkCapabilityTable.astro";

The Go SDK currently provides token parsing and verification. Use the API reference for Connect, Session, Device, or Native HTTP calls until those clients are available.

## Packages

<SdkCapabilityTable language="go" locale="en-us" />

The module path includes its major version:

```go
import "github.com/sudomimus/sudomimus-go/v4/token"
```

Until the module is marked **Published** above, consume it from a checked-out SDK repository rather than assuming a tagged public module is available.

## Token verification

Resolve the token's `kid` from `GET /applications/{applicationAnchor}/jwks.json`, cache the JWK Set according to `Cache-Control`, and refresh it once when an unknown `kid` appears. Validate signature, issuer, audience, token type, and time claims before trusting payload fields.

Offline verification cannot observe a later logout or authority change. Call Session `/introspect` when an operation requires live session state.

## Source

<CardGrid>
<LinkCard title="Go SDK" description="Module source, tests, and README." href="https://github.com/sudomimus/sudomimus/tree/master/sdks/go" />
<LinkCard title="Session API" description="JWK Set, introspection, and session lifecycle wire contracts." href="/en-us/api/session/" />
</CardGrid>