Go SDK
The Go SDK currently provides token parsing and verification. Use the API reference for Connect, Session, Device, or Native HTTP calls until those clients are available.
Packages
Section titled “Packages”| Surface | Package or module | Release status |
|---|---|---|
| Connect | — | No package |
| Session | — | No package |
| Device | — | No package |
| Native | — | No package |
| Token | github.com/sudomimus/sudomimus-go/v4/token | Source only |
Release status verified: .
The module path includes its major version:
import "github.com/sudomimus/sudomimus-go/v4/token"Until the module is marked Published above, consume it from a checked-out SDK repository rather than assuming a tagged public module is available.
Token verification
Section titled “Token verification”Resolve the token’s kid from GET /applications/{applicationAnchor}/jwks.json, cache the JWK Set according to Cache-Control, and refresh it once when an unknown kid appears. Validate signature, issuer, audience, token type, and time claims before trusting payload fields.
Offline verification cannot observe a later logout or authority change. Call Session /introspect when an operation requires live session state.