auth

type AuthenticationMode string

type Client interface {
	Login() (*Credentials, error)
}

type Credentials struct {
	User struct {
		Name   string   `json:"name"`
		Groups []string `json:"groups"`
		// Token is an ID token containing user info and capabilities loaded at login
		Token string `json:"token"`
		// WrappedToken is a very short lifetime encrypted token that wraps the ID token.
		// It's for cases where the token must be exposed as HTTP GET parameters over a
		// secure connection where the token will available in access logs and/or browser
		// history which would mean a potential security risk.
		WrappedToken string `json:"wrappedToken"`
	} `json:"user"`
}

type RequestBody struct {
	Mode       AuthenticationMode `json:"mode"`
	Token      string             `json:"token,omitempty"`
	ClientCert struct {
		// base64 encoded client key
		Key string `json:"key"`
		// base64 encoded client cert
		Cert string `json:"cert"`
	} `json:"cert,omitempty"`
}