authn

type Authenticator interface {
	Authenticate(ctx context.Context, token string) (*principal.Principal, error)
}

type ExchangeCodeRequest struct {
	Code        string
	RedirectURI string
	Extra       url.Values
}

type LoginRequest struct {
	RedirectURI string
	State       string
	Scope       string
	Prompt      string
	Extra       url.Values
}

type LoginURLBuilder interface {
	LoginURL(req LoginRequest) (string, error)
}

type LogoutRequest struct {
	IDTokenHint           string
	PostLogoutRedirectURI string
	State                 string
	Extra                 url.Values
}

type LogoutURLBuilder interface {
	LogoutURL(req LogoutRequest) (string, error)
}

type OAuthExchanger interface {
	ExchangeCode(ctx context.Context, req ExchangeCodeRequest) (*TokenResponse, error)
	RefreshToken(ctx context.Context, req RefreshTokenRequest) (*TokenResponse, error)
}

type Options struct {
	AllowAnonymous bool
	TokenExtractor TokenExtractor
}

type RefreshTokenRequest struct {
	RefreshToken string
	Scope        string
	Extra        url.Values
}

type TokenExtractor func(ctx context.Context) (string, bool)

type TokenResponse struct {
	AccessToken  string `json:"access_token"`
	RefreshToken string `json:"refresh_token,omitempty"`
	IDToken      string `json:"id_token,omitempty"`
	TokenType    string `json:"token_type,omitempty"`
	ExpiresIn    int64  `json:"expires_in,omitempty"`
	Scope        string `json:"scope,omitempty"`
	Raw          []byte `json:"-"`
}