identity

type Identity struct {
	// Subject is the provider's stable user ID.
	Subject string
	// Email is the user's primary address. EmailVerified reports whether the provider
	// verified it; an unverified identity cannot sign in to an account.
	Email         string
	EmailVerified bool
	// SignedInAt is when the session was created.
	SignedInAt time.Time
}

type Provider interface {
	// Name identifies the provider in stored accounts, such as "hanko". It must not
	// change once accounts exist.
	Name() string
	// Authenticate validates the request's session. It returns ErrNoSession when there
	// is none or it is no longer valid.
	Authenticate(r *http.Request) (Identity, error)
	// Logout ends the request's session at the provider and clears it in the browser.
	// It clears the browser session even when the provider cannot be reached.
	Logout(w http.ResponseWriter, r *http.Request) error
	// Delete deletes the signed-in user at the provider. It returns nil only once the
	// provider has confirmed the deletion.
	Delete(ctx context.Context, r *http.Request) error
}