oauth

type Apple struct {
	// contains filtered or unexported fields
}

type AppleEndpoints struct {
	JWKSURL string
	Issuer  string
}

type GitHubEndpoints struct {
	AuthURL  string
	TokenURL string
	APIURL   string
}

type GoogleEndpoints struct {
	AuthURL  string
	TokenURL string
	JWKSURL  string
	// Issuers are the accepted values of the ID token's iss claim.
	Issuers []string
}

type Identity struct {
	// Subject is the provider's ID for the user, which never changes.
	Subject string
	// Email is the user's address at the provider. It may be empty.
	Email string
	// EmailVerified reports whether the provider vouches for Email.
	EmailVerified bool
}

type Provider interface {
	// AuthCodeURL returns the URL to send the user to. verifier is the PKCE
	// verifier; nonce is checked in the ID token, by providers that issue
	// one.
	AuthCodeURL(state, verifier, nonce, redirectURI string) string
	// Exchange swaps the code from the provider's redirect for the user's
	// identity.
	Exchange(ctx context.Context, code, verifier, nonce, redirectURI string) (Identity, error)
}