sts

type Exchanger interface {
	Exchange(ctx context.Context, principal *identity.Principal, gatewayID ids.GatewayID, cfg *registrydomain.MCPAuth, cacheKey string) (*Token, error)
}

type IdPTokenClient interface {
	Call(ctx context.Context, issuer string, form url.Values) (*Token, error)
}

type Token struct {
	AccessToken string
	TokenType   string
	ExpiresAt   time.Time
}

type TokenSigner interface {
	Issuer() string
	MintClaims(claims jwt.MapClaims, ttl time.Duration) (string, error)
	JWKS() map[string]any
}