oidclogin

type Check struct {
	Name   string
	Status CheckStatus
	Detail string
}

type CheckStatus string

type Config struct {
	// Issuer is the OIDC issuer URL (its /.well-known/openid-configuration
	// must be conformant). Required.
	Issuer string
	// ClientID is the OAuth public client id. Required.
	ClientID string
	// Dir is the resolved state directory (identity.ResolveDir). Required.
	Dir string
	// Scopes defaults to [openid, email, profile].
	Scopes []string
	// NoBrowser suppresses opening the system browser; the auth URL is
	// delivered via OnAuthURL for the caller to print (or, in tests, to
	// drive programmatically).
	NoBrowser bool
	// OnAuthURL, if set, receives the authorization URL once the loopback
	// listener is accepting the redirect.
	OnAuthURL func(url string)
	// HTTPClient overrides the client used for discovery, JWKS snapshot
	// and token exchange. Nil means http.DefaultClient.
	HTTPClient *http.Client
	// Now overrides the clock (tests). Nil means time.Now.
	Now func() time.Time
	// Entropy overrides the ULID entropy source that mints the root
	// delegation's `jti`, the root receipt's `receipt_id` and its `run_id`.
	// Nil means crypto/rand, which is what a real login uses. A
	// deterministic recording injects a fixed stream so the login it
	// performs is byte-reproducible (see cmd/behalf-record).
	Entropy io.Reader
	// DeviceKey, if set, is bound as the human's device key instead of a
	// freshly generated one.
	//
	// DEMO AND TEST MATERIAL ONLY. A real login generates a fresh key per
	// login (that is what makes the nonce bind THIS login to THIS key), and
	// the CLI never sets this. It exists for the same reason
	// cmd/behalf-record pins the emitter key: a recording signed by a random
	// key is not reproducible and cannot be named in a checked-in alias map.
	// The login it performs is otherwise the real flow — real PKCE, real
	// token exchange, a real IdP-signed ID token echoing jkt(DeviceKey).
	DeviceKey *identity.Key
}

type LoginState struct {
	SchemaVersion   string `json:"schema_version"` // behalf.sh/login-state/v1
	Issuer          string `json:"issuer"`
	ClientID        string `json:"client_id"`
	SubDigest       string `json:"sub_digest"`
	DeviceJKT       string `json:"device_jkt"`
	IDTokenDigest   string `json:"id_token_digest"`
	JWKSDigest      string `json:"jwks_digest"`
	StatementDigest string `json:"statement_digest"`
	ReceiptID       string `json:"receipt_id"`
	LoggedInAt      string `json:"logged_in_at"` // RFC 3339
}

type Report struct {
	State   State
	Checks  []Check
	Reasons []string
	Login   *LoginState
	// DeviceJKT is the thumbprint of the key this login bound — read from
	// the signed statement where it survives, else from login.json (which is
	// an index, not evidence). A chain root whose cnf.jwk is not this key was
	// not minted by this human's device key.
	DeviceJKT string
	// StatementDigest addresses the signed root delegation statement in the
	// customer-held store: the evidence behind a verified depth-0 hop.
	StatementDigest string
	// Issuer is the OIDC issuer that signed the ID token.
	Issuer string
}

type Result struct {
	StateDir        string
	Issuer          string
	ClientID        string
	SubDigest       string
	DeviceJKT       string
	IDTokenDigest   string
	JWKSDigest      string
	StatementDigest string
	ReceiptID       string
	SealedReceipt   []byte // the sealed receipt payload bytes, as spooled
}

type State string

type Statement struct {
	SchemaVersion string   `json:"schema_version"`
	JTI           string   `json:"jti"` // per-hop token id, behalf extension (Q11)
	Issuer        string   `json:"issuer"`
	SubDigest     string   `json:"sub_digest"` // sha256(issuer "\n" sub), never the raw sub (Q40)
	NonceJKT      string   `json:"nonce_jkt"`  // = jkt(device_pubkey) = the OIDC nonce (D5)
	IDTokenDigest string   `json:"id_token_digest"`
	JWKSDigest    string   `json:"jwks_digest"`
	DeviceJWK     dsse.JWK `json:"device_jwk"`
	DelegatedAt   string   `json:"delegated_at"` // RFC 3339
	Exp           int64    `json:"exp"`          // unix seconds
}