server

type Authenticator struct {
	// contains filtered or unexported fields
}

type LoginStore interface {
	// SaveLoginFlow stores the in-flight handshake state under the OAuth state key.
	SaveLoginFlow(state string, f loginFlow) error
	// TakeLoginFlow returns and removes the flow for state (one-time use); the bool
	// is false when no flow matches.
	TakeLoginFlow(state string) (loginFlow, bool, error)
	// SaveLoginSession stores a completed login session under its opaque id.
	SaveLoginSession(id string, s loginSession) error
	// LoginSession returns the session for id; the bool is false when none matches.
	LoginSession(id string) (loginSession, bool, error)
	// DeleteLoginSession removes a login session; deleting a missing id is a no-op.
	DeleteLoginSession(id string) error
	// PurgeExpiredLogins drops login sessions and flows that expired before now.
	PurgeExpiredLogins(now time.Time) error
}

type Server struct {
	// contains filtered or unexported fields
}

type SpokeStatus struct {
	Name       string    `json:"name" jsonschema:"the spoke's name; 'local' is the in-process spoke"`
	Connected  bool      `json:"connected" jsonschema:"whether the spoke currently has a live connection to the hub"`
	Local      bool      `json:"local,omitempty" jsonschema:"true for the in-process spoke (always connected)"`
	EnrolledAt time.Time `json:"enrolled_at,omitempty" jsonschema:"when the remote spoke enrolled (absent for the local spoke)"`
}

type Store interface {
	// Save writes (creating or replacing) one session keyed by its token.
	Save(ps persistedSession) error
	// Delete removes the session for a token; deleting a missing token is a no-op.
	Delete(token string) error
	// LoadAll returns every persisted session.
	LoadAll() ([]persistedSession, error)
	// Close releases the underlying store.
	Close() error

	LoginStore
	cluster.Store
}