Eric Chiang 1309db5ec6 oidc client plugin: reduce round trips and switch to golang.org/x/oauth2 ...

This PR attempts to simplify the OpenID Connect client plugin to
reduce round trips. The steps taken by the client are now:

* If ID Token isn't expired:
   * Do nothing.
* If ID Token is expired:
   * Query /.well-known discovery URL to find token_endpoint.
   * Use an OAuth2 client and refresh token to request new ID token.

This avoids the previous pattern of always initializing a client,
which would hit the /.well-known endpoint several times.

The client no longer does token validation since the server already
does this. As a result, this code no longer imports
github.com/coreos/go-oidc, instead just using golang.org/x/oauth2
for refreshing.

Kubernetes-commit: 6915f857574505a2cd2072c32d9d6da66ce6f55a

2017-06-13 20:38:44 +00:00

..

auth/authenticator/token/oidc/testing

autogenerated

2017-04-15 20:28:18 +00:00

client/auth

oidc client plugin: reduce round trips and switch to golang.org/x/oauth2

2017-06-13 20:38:44 +00:00