openid

type ARPOption struct {
	Issuer     security.Issuer
	JwtDecoder jwt.JwtDecoder
}

type ARPOptions func(opt *ARPOption)

type ClaimsRequest struct {
	UserInfo requestedClaims `json:"userinfo"`
	IdToken  requestedClaims `json:"id_token"`
}

type EnhancerOption struct {
	Issuer     security.Issuer
	JwtEncoder jwt.JwtEncoder
}

type EnhancerOptions func(opt *EnhancerOption)

type EpOption struct {
	WhitelabelErrorPath string
}

type EpOptions func(opt *EpOption)

type HandlerOption struct {
	Dec         jwt.JwtDecoder
	Issuer      security.Issuer
	ClientStore oauth2.OAuth2ClientStore
}

type HandlerOptions func(opt *HandlerOption)

type IdTokenClaims struct {
	oauth2.FieldClaimsMapper

	Issuer   string                `claim:"iss"`
	Subject  string                `claim:"sub"`
	Audience oauth2.StringSetClaim `claim:"aud"`
	Expire   time.Time             `claim:"exp"`
	IssueAt  time.Time             `claim:"iat"`

	/* Standard */
	AuthTime        time.Time `claim:"auth_time"`
	Nonce           string    `claim:"nonce"`
	AuthCtxClassRef string    `claim:"acr"`
	AuthMethodRef   []string  `claim:"amr"`
	AuthorizedParty string    `claim:"azp"`
	AccessTokenHash string    `claim:"at_hash"`

	/* Profile Scope */
	FullName          string    `claim:"name"`
	FirstName         string    `claim:"given_name"`
	LastName          string    `claim:"family_name"`
	MiddleName        string    `claim:"middle_name"`
	Nickname          string    `claim:"nickname"`
	PreferredUsername string    `claim:"preferred_username"`
	ProfileUrl        string    `claim:"profile"`
	PictureUrl        string    `claim:"picture"`
	Website           string    `claim:"website"`
	Gender            string    `claim:"gender"`
	Birthday          string    `claim:"birthdate"` // ISO 8601:2004 [ISO8601‑2004] YYYY-MM-DD format
	ZoneInfo          string    `claim:"zoneinfo"`  // Europe/Paris or America/Los_Angeles
	Locale            string    `claim:"locale"`    // Typically ISO 639-1 Alpha-2 [ISO639‑1] language code in lowercase and an ISO 3166-1
	UpdatedAt         time.Time `claim:"updated_at"`

	/* Email Scope */
	Email         string `claim:"email"`
	EmailVerified *bool  `claim:"email_verified"`

	/* Phone Number Scope */
	PhoneNumber      string `claim:"phone_number"` // RFC 3966 [RFC3966] e.g. +1 (604) 555-1234;ext=5678
	PhoneNumVerified *bool  `claim:"phone_number_verified"`

	/* Address Scope */
	Address *claims.AddressClaim `claim:"address"`

	/* Profile Scope */
	DefaultTenantId string          `claim:"default_tenant_id"`
	AssignedTenants utils.StringSet `claim:"assigned_tenants"`
	Roles           utils.StringSet `claim:"roles"`
	Permissions     utils.StringSet `claim:"permissions"`

	/* General Scope */
	UserId           string `claim:"user_id"`
	AccountType      string `claim:"account_type"`
	TenantId         string `claim:"tenant_id"`
	TenantExternalId string `claim:"tenant_name"` //for backward compatibility, map to tenant_name
	TenantSuspended  *bool  `claim:"tenant_suspended"`
	ProviderId       string `claim:"provider_id"`
	ProviderName     string `claim:"provider_name"`
	OrigUsername     string `claim:"original_username"`
	Currency         string `claim:"currency"`
}

type OPMetadata struct {
	oauth2.FieldClaimsMapper
	oauth2.MapClaims
	Issuer                 string          `claim:"issuer"`
	AuthEndpoint           string          `claim:"authorization_endpoint"`
	TokenEndpoint          string          `claim:"token_endpoint"`
	UserInfoEndpoint       string          `claim:"userinfo_endpoint"`
	JwkSetURI              string          `claim:"jwks_uri"`
	SupportedGrantTypes    utils.StringSet `claim:"grant_types_supported"`
	SupportedScopes        utils.StringSet `claim:"scopes_supported"`
	SupportedResponseTypes utils.StringSet `claim:"response_types_supported"`
	SupportedACRs          utils.StringSet `claim:"acr_values_supported"`
	SupportedSubjectTypes  utils.StringSet `claim:"subject_types_supported"`
	SupportedIdTokenJwsAlg utils.StringSet `claim:"id_token_signing_alg_values_supported"`
	SupportedClaims        utils.StringSet `claim:"claims_supported"`
}

type OidcEntryPoint struct {
	// contains filtered or unexported fields
}

type OidcLogoutHandler struct {
	// contains filtered or unexported fields
}

type OidcSuccessHandler struct {
	// contains filtered or unexported fields
}

type OpenIDAuthorizeRequestProcessor struct {
	// contains filtered or unexported fields
}

type OpenIDTokenEnhancer struct {
	// contains filtered or unexported fields
}

type SuccessOption struct {
	ClientStore         oauth2.OAuth2ClientStore
	WhitelabelErrorPath string
}

type SuccessOptions func(opt *SuccessOption)