auth

type AuthorizeHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON400      *OAuth2Error
}

type AuthorizeParams struct {
	// ResponseType Must be `code` for the Authorization Code flow.
	ResponseType AuthorizeParamsResponseType `form:"response_type" json:"response_type"`
	ClientId     string                      `form:"client_id" json:"client_id"`

	// RedirectUri Must exactly match the client's registered callback URL.
	RedirectUri string `form:"redirect_uri" json:"redirect_uri"`

	// Scope Requested scope, e.g. `*` for all access.
	Scope string `form:"scope" json:"scope"`

	// State Opaque value returned unchanged in the redirect; use it for CSRF protection.
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// CodeChallenge PKCE code challenge (RFC 7636). Required for public clients.
	CodeChallenge *string `form:"code_challenge,omitempty" json:"code_challenge,omitempty"`

	// CodeChallengeMethod PKCE transformation. `S256` is strongly recommended.
	CodeChallengeMethod *AuthorizeParamsCodeChallengeMethod `form:"code_challenge_method,omitempty" json:"code_challenge_method,omitempty"`
}

type AuthorizeParamsCodeChallengeMethod string

type AuthorizeParamsResponseType string

type Client struct {
	// The endpoint of the server conforming to this interface, with scheme,
	// https://api.deepmap.com for example. This can contain a path relative
	// to the server, such as https://api.deepmap.com/dev-test, and all the
	// paths in the swagger spec will be appended to the server.
	Server string

	// Doer for performing requests, typically a *http.Client with any
	// customized settings, such as certificate chains.
	Client HttpRequestDoer

	// A list of callbacks for modifying requests which are generated before sending over
	// the network.
	RequestEditors []RequestEditorFn
}

type ClientInterface interface {
	// Authorize request
	Authorize(ctx context.Context, params *AuthorizeParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// RevokeWithBody request with any body
	RevokeWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	RevokeWithFormdataBody(ctx context.Context, body RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// TokenWithBody request with any body
	TokenWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	TokenWithFormdataBody(ctx context.Context, body TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
}

type ClientOption func(*Client) error

type ClientWithResponses struct {
	ClientInterface
}

type ClientWithResponsesInterface interface {
	// AuthorizeWithResponse request
	AuthorizeWithResponse(ctx context.Context, params *AuthorizeParams, reqEditors ...RequestEditorFn) (*AuthorizeHTTPResp, error)

	// RevokeWithBodyWithResponse request with any body
	RevokeWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*RevokeHTTPResp, error)

	RevokeWithFormdataBodyWithResponse(ctx context.Context, body RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*RevokeHTTPResp, error)

	// TokenWithBodyWithResponse request with any body
	TokenWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*TokenHTTPResp, error)

	TokenWithFormdataBodyWithResponse(ctx context.Context, body TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*TokenHTTPResp, error)
}

type HttpRequestDoer interface {
	Do(req *http.Request) (*http.Response, error)
}

type OAuth2Error struct {
	// Error RFC 6749 error code, e.g. invalid_grant, invalid_client, invalid_request.
	Error            string  `json:"error"`
	ErrorDescription *string `json:"error_description,omitempty"`

	// State Echoed from the request when present.
	State *string `json:"state,omitempty"`
}

type OAuthRevokeRequest struct {
	// ClientId Optional; validated when supplied.
	ClientId *string `json:"client_id,omitempty"`

	// ClientSecret Required with client_id for confidential clients.
	ClientSecret *string `json:"client_secret,omitempty"`

	// Token The access_token or refresh_token to revoke.
	Token string `json:"token"`

	// TokenTypeHint Optional optimization hint (RFC 7009 §2.1).
	TokenTypeHint *OAuthRevokeRequestTokenTypeHint `json:"token_type_hint,omitempty"`
}

type OAuthRevokeRequestTokenTypeHint string

type OAuthTokenRequest struct {
	// AccessType `offline` (default for authorization_code) also returns a refresh_token.
	AccessType *OAuthTokenRequestAccessType `json:"access_type,omitempty"`

	// ClientId Required for `authorization_code` and `client_credentials`.
	ClientId *string `json:"client_id,omitempty"`

	// ClientSecret Required for confidential clients; omitted by public clients (which use PKCE).
	ClientSecret *string `json:"client_secret,omitempty"`

	// Code `authorization_code` only — the code returned by /oauth/authorize.
	Code *string `json:"code,omitempty"`

	// CodeVerifier `authorization_code` with PKCE (RFC 7636) — required for public clients.
	CodeVerifier *string `json:"code_verifier,omitempty"`

	// GrantType The OAuth 2.0 grant type.
	GrantType OAuthTokenRequestGrantType `json:"grant_type"`

	// Password `password` only — the user's password.
	Password *string `json:"password,omitempty"`

	// RedirectUri `authorization_code` only — must match the value used at /oauth/authorize.
	RedirectUri *string `json:"redirect_uri,omitempty"`

	// RefreshToken `refresh_token` only — the most recently issued refresh token (rotated each use).
	RefreshToken *string `json:"refresh_token,omitempty"`

	// Scope Requested scope. For `authorization_code` the scope bound to the code always wins.
	Scope *string `json:"scope,omitempty"`

	// Username `password` only — the user's email/username.
	Username *string `json:"username,omitempty"`
}

type OAuthTokenRequestAccessType string

type OAuthTokenRequestGrantType string

type OAuthTokenResponse struct {
	AccessToken string  `json:"access_token"`
	ClientId    *string `json:"client_id,omitempty"`

	// ExpiresIn Lifetime in seconds. Omitted for non-expiring tokens.
	ExpiresIn *int64 `json:"expires_in,omitempty"`

	// RefreshToken Present when a refresh token was issued (rotated on every refresh).
	RefreshToken *string `json:"refresh_token,omitempty"`
	Scope        *string `json:"scope,omitempty"`
	TokenType    string  `json:"token_type"`
}

type RequestEditorFn func(ctx context.Context, req *http.Request) error

type RevokeFormdataRequestBody = OAuthRevokeRequest

type RevokeHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *map[string]interface{}
	JSON400      *OAuth2Error
}

type TokenFormdataRequestBody = OAuthTokenRequest

type TokenHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *OAuthTokenResponse
	JSON400      *OAuth2Error
}