Create a Scalekit client with your environment URL, client ID, and client secret. All other clients hang off this instance. Store credentials in environment variables. Never hard-code secrets. After you create the client, use [Sessions](/saaskit/sdks/go/sessions/) or domain clients such as [Organizations](/saaskit/sdks/go/organizations/) and [Users](/saaskit/sdks/go/users/). ### GetAuthorizationUrl

Runs `GetAuthorizationUrl` and returns the result. Redirect uri. Optional request settings. url.URL ```go wrap showLineNumbers=false authURL, err := scalekitClient.GetAuthorizationUrl( "https://yourapp.com/auth/callback", scalekit.AuthorizationUrlOptions{ State: "random-state-value", OrganizationId: "org_123", }, ) if err != nil { // handle } // Redirect user to authURL.String() ```

### AuthenticateWithCode

Runs `AuthenticateWithCode` and returns the result. Request context Authorization code. Redirect uri. Optional request settings. Authentication. ```go wrap showLineNumbers=false resp, err := scalekitClient.AuthenticateWithCode( ctx, code, "https://yourapp.com/auth/callback", scalekit.AuthenticationOptions{}, ) if err != nil { // handle } accessToken := resp.AccessToken user := resp.User _ = accessToken _ = user ```

### GetIdpInitiatedLoginClaims

Runs `GetIdpInitiatedLoginClaims` and returns the result. Request context Idp initiate login token. The response payload for this operation. ```go wrap showLineNumbers=false claims, err := scalekitClient.GetIdpInitiatedLoginClaims(ctx, idpInitiatedLoginToken) if err != nil { // handle } // claims.ConnectionID, claims.OrganizationID, claims.LoginHint, claims.RelayState _ = claims ```

### GetAccessTokenClaims

Runs `GetAccessTokenClaims` and returns the result. Request context Access token. The response payload for this operation. ```go wrap showLineNumbers=false claims, err := scalekitClient.GetAccessTokenClaims(ctx, accessToken) if err != nil { // handle } _ = claims ```

### ValidateAccessToken

Runs `ValidateAccessToken` and returns the result. Request context Access token. bool ```go wrap showLineNumbers=false ok, err := scalekitClient.ValidateAccessToken(ctx, accessToken) if err != nil { // invalid } _ = ok ```

### RefreshAccessToken

Runs `RefreshAccessToken` and returns the result. Request context Refresh token. Token. ```go wrap showLineNumbers=false tokens, err := scalekitClient.RefreshAccessToken(ctx, refreshToken) if err != nil { // handle } _ = tokens.AccessToken ```

### GetLogoutUrl

Runs `GetLogoutUrl` and returns the result. Optional request settings. url.URL ```go wrap showLineNumbers=false logoutURL, err := scalekitClient.GetLogoutUrl(scalekit.LogoutUrlOptions{ IdTokenHint: idToken, PostLogoutRedirectUri: "https://yourapp.com/", State: "state", }) if err != nil { // handle } _ = logoutURL ```

### VerifyWebhookPayload

Runs `VerifyWebhookPayload` and returns the result. Secret. Headers. Payload. bool ```go wrap showLineNumbers=false valid, err := scalekitClient.VerifyWebhookPayload( "whsec_...", map[string]string{ "webhook-id": "webhook_123", "webhook-timestamp": "1730000000", "webhook-signature": "v1,base64sig", }, []byte(`{"event":"user.created","data":{"id":"123"}}`), ) if err != nil { // handle } _ = valid ```

### VerifyInterceptorPayload

Runs `VerifyInterceptorPayload` and returns the result. Secret. Headers. Payload. bool ```go wrap showLineNumbers=false valid, err := scalekitClient.VerifyInterceptorPayload(secret, headers, payload) if err != nil { // handle } _ = valid ```

### Connection

Runs `Connection` and returns the result. Connection.

### Organization

Runs `Organization` and returns the result. Organization.

### User

Runs `User` and returns the result. User service.

### Domain

Runs `Domain` and returns the result. Domain.

### Directory

Runs `Directory` and returns the result. Directory.

### Session

Runs `Session` and returns the result. Session service.

### Role

Runs `Role` and returns the result. Role service.

### Permission

Runs `Permission` and returns the result. Permission service.

### Passwordless

Runs `Passwordless` and returns the result. Passwordless service.

### WebAuthn

Runs `WebAuthn` and returns the result. Web authn service.

### Auth

Runs `Auth` and returns the result. Auth service.

### Client

Runs `Client` and returns the result. Client service.

### Token

Runs `Token` and returns the result. Token service.

### ValidateTokenWithOptions

ValidateTokenWithOptions validates a signed JWT (access token or ID token) and enforces optional checks such as audience and scope validation. Request context Token string. Optional request settings. bool ```go wrap showLineNumbers=false valid, err := scalekitClient.ValidateTokenWithOptions(ctx, accessToken, &scalekit.ValidateTokenOptions{ Audience: []string{"my-api"}, Scopes: []string{"read", "write"}, }) if err != nil { // handle } _ = valid ```

### ValidateToken

Runs `ValidateToken` and returns the result. Request context Token string. Verified claims or result. ```go wrap showLineNumbers=false claims, err := scalekitClient.ValidateToken(ctx, idToken) if err != nil { // handle } _ = claims ```

### WithSecret

Runs `WithSecret` and returns the result. Client secret. Scalekit. ```go wrap showLineNumbers=false clientWithNewSecret := scalekitClient.WithSecret("new_client_secret") ```

### GenerateClientToken

GenerateClientToken creates a client-credentials access token. Request context Optional request settings. Client token. ```go wrap showLineNumbers=false resp, err := scalekitClient.GenerateClientToken(ctx, scalekit.GenerateClientTokenOptions{ ClientID: "service_client_id", ClientSecret: "service_client_secret", Scopes: []string{"read", "write"}, }) if err != nil { // handle } _ = resp.AccessToken ```

### GetClientAccessToken

Runs `GetClientAccessToken` and returns the result. Request context string ```go wrap showLineNumbers=false accessToken, err := scalekitClient.GetClientAccessToken(ctx) if err != nil { // handle } _ = accessToken ```

### UnmarshalJSON

Runs `UnmarshalJSON` and returns the result. Data. error

### M2M

Runs `M2M` and returns the result. M2mservice.

### VerifyPayloadSignature

Runs `VerifyPayloadSignature` and returns the result. Secret. Headers. Payload. bool