ic

type ClaimRole struct {
	RoleID         string `json:"roleId"`
	OrganizationID string `json:"organizationId,omitempty" description:"if the role scope is ORG, then organizationId is required"`
	ProjectID      string `json:"projectId,omitempty" description:"if the role scope is PROJ, then projectId is required"`
}

type Client interface {
	ClientToken() (string, error)

	ValidateAccessToken(accessToken string) (bool, error)

	ValidateAndParseClaims(accessToken string) (*JWTClaims, error)

	// ValidatePermission validates if an access token has right for a specific permission
	// requiredPermission: permission to access resource, example:
	// 		{Resource: "ORG:{organizationId}:USER:{userId}:PROJ:{projectId}", Action: 2}
	// permissionResources: resource string to replace the `{}` placeholder in `requiredPermission`
	ValidatePermission(claims *JWTClaims, requiredPermission Permission,
		permissionResources map[string]string) (bool, error)

	GetRolePermissions(roleID string) (perms []Permission, err error)

	GetClientInformation(clientID string) (*ClientInformation, error)
}

type ClientInformation struct {
	ClientName     string `json:"clientName"`
	RedirectURI    string `json:"redirectUri"`
	BaseURI        string `json:"baseUri"`
	OrganizationID string `json:"organizationId"`
}

type Config struct {
	BaseURL      string
	ClientID     string
	ClientSecret string
	Debug        bool
}

type DefaultClient struct {
	// contains filtered or unexported fields
}

type HTTPClient interface {
	Do(req *http.Request) (*http.Response, error)
}

type JWK struct {
	Kty string `json:"kty"`
	Use string `json:"use"`
	Kid string `json:"kid"`
	N   string `json:"n"`
	E   string `json:"e"`
}

type JWTClaims struct {
	OrganizationID string       `json:"organizationId"`
	DisplayName    string       `json:"display_name"`
	Roles          []ClaimRole  `json:"roles"`
	Scope          string       `json:"scope"`
	ClientID       string       `json:"client_id"`
	Permissions    []Permission `json:"permissions"`
	jwt.Claims
}

type Keys struct {
	Keys []JWK `json:"keys"`
}

type Option func(*Options)

type Options struct {
	// contains filtered or unexported fields
}

type Permission struct {
	Resource string `json:"resource"`
	Action   int    `json:"action"`
}

type Role struct {
	RoleID      string       `json:"roleId"`
	Permissions []Permission `json:"permissions"`
}

type TokenResponse struct {
	AccessToken  string   `json:"access_token"`
	RefreshToken string   `json:"refresh_token"`
	IDToken      string   `json:"id_token"`
	ExpiresIn    int      `json:"expires_in"`
	TokenType    string   `json:"token_type"`
	Roles        []string `json:"roles"`
	UserID       string   `json:"user_id"`
}