fosite

type AAuthHandler struct {
	// contains filtered or unexported fields
}

type ActorData struct {
	// Subject is the actor's subject.
	Subject string

	// Issuer is the actor's issuer.
	Issuer string
}

type AudienceStrategy interface {
	// ValidateAudience validates requested audiences.
	ValidateAudience(requested []string) error
}

type DefaultAudienceStrategy struct{}

type DefaultScopeStrategy struct{}

type HandlerConfig struct {
	// Issuer is the OAuth server issuer URL.
	Issuer string

	// AccessTokenLifetime is the access token validity duration.
	AccessTokenLifetime time.Duration

	// RefreshTokenLifetime is the refresh token validity duration.
	RefreshTokenLifetime time.Duration

	// ScopeStrategy validates requested scopes.
	ScopeStrategy ScopeStrategy

	// AudienceStrategy validates requested audiences.
	AudienceStrategy AudienceStrategy
}

type IDJAGHandler struct {
	// contains filtered or unexported fields
}

type MemoryStorage struct {
	// contains filtered or unexported fields
}

type ScopeStrategy interface {
	// ValidateScopes validates requested scopes against allowed scopes.
	ValidateScopes(requested, allowed []string) ([]string, error)
}

type TokenData struct {
	// Subject is the token subject.
	Subject string

	// Issuer is the token issuer.
	Issuer string

	// Audience is the intended audience.
	Audience []string

	// Scopes are the granted scopes.
	Scopes []string

	// IssuedAt is when the token was issued.
	IssuedAt time.Time

	// ExpiresAt is when the token expires.
	ExpiresAt time.Time

	// ClientID is the OAuth client ID.
	ClientID string

	// Actor contains delegation information (optional).
	Actor *ActorData
}

type TokenRequest struct {
	GrantType        string
	SubjectToken     string
	SubjectTokenType string
	ActorToken       string
	ActorTokenType   string
	Scope            []string
	Audience         []string
	ClientID         string
	ClientSecret     string
}

type TokenResponse struct {
	AccessToken     string    `json:"access_token"`
	TokenType       string    `json:"token_type"`
	ExpiresIn       int64     `json:"expires_in"`
	RefreshToken    string    `json:"refresh_token,omitempty"`
	Scope           string    `json:"scope,omitempty"`
	IssuedTokenType string    `json:"issued_token_type,omitempty"`
	IssuedAt        time.Time `json:"-"`
}

type TokenStorage interface {
	// CreateAccessToken creates and stores an access token.
	CreateAccessToken(ctx context.Context, data *TokenData) (string, error)

	// GetAccessToken retrieves token data by token string.
	GetAccessToken(ctx context.Context, token string) (*TokenData, error)

	// RevokeAccessToken revokes an access token.
	RevokeAccessToken(ctx context.Context, token string) error
}