ui

type App struct {
	// contains filtered or unexported fields
}

type Config struct {
	PublicBaseURL string // external base; the OAuth redirect URI is <base>/auth/callback
	SessionSecret string
	// GitHubWebhookSecret optionally verifies GitHub App webhook deliveries
	// at the relay before fan-out (defense in depth — each serve verifies the
	// HMAC itself either way; empty forwards blindly).
	GitHubWebhookSecret string
	AllowedDomain       string // required id_token hd claim, lowercase
	// OAuth is the Google authorization-code client. Endpoint is overridable
	// so tests run against a fake token server.
	OAuth *oauth2.Config
	// QuotaProject rides x-goog-user-project on user-token PAM calls (user
	// credentials attribute API quota to the OAuth client's project; empty
	// sends no header). PAMBaseURL overrides the PAM endpoint for tests.
	QuotaProject string
	PAMBaseURL   string
	// VerifyIDToken validates the id_token from the code exchange and returns
	// its claims (signature + audience checked; claim semantics enforced by
	// the login handler). Injectable for offline tests.
	VerifyIDToken gauth.VerifyClaimsFunc
	Tiers         []Tier
}

type Session struct {
	Email   string    `json:"email"`
	Expires time.Time `json:"expires"`
}

type Tier struct {
	Name  string
	URL   string
	Token gauth.TokenFunc
}