authapi

type Auth string

type AuthParser string

type Authorization struct {
	UserID             string              `json:"user_id"` // organization/tenant id
	Name               string              `json:"name"`    // organization/tenant name
	UserGroupID        map[string]struct{} `json:"user_group_id"`
	UiAndApiPermission map[string]bool     `json:"api_and_ui_permission"`
}

type Data struct {
	URL    string   `json:"url"`
	Email  string   `json:"email"`
	Roles  []string `json:"roles"`
	UserID string   `json:"user_id"`
}

type GSIConfig struct {
	Email string `json:"email"`
}

type Grant struct {
	// DO NOT USE THIS AS BACK-END VALIDATION!!!!!!!!!!!!!!!!!!!!!!!!!!!
	UserId string `json:"user_id,omitempty"`
	// DO NOT USE THIS AS BACK-END VALIDATION!!!!!!!!!!!!!!!!!!!!!!!!!!!
	GroupId string `json:"group_id,omitempty"`
	// DO NOT USE THIS AS BACK-END VALIDATION!!!!!!!!!!!!!!!!!!!!!!!!!!!
	Name string `json:"name,omitempty"`
	// DO NOT USE THIS AS BACK-END VALIDATION!!!!!!!!!!!!!!!!!!!!!!!!!!!
	UiAndApiPermission map[string]bool `` /* 127-byte string literal not displayed */
}

type IdTokenExchanger struct {
	// contains filtered or unexported fields
}

type MIPConfig struct {
	Email string `json:"email"`
}

type Organization struct {
	URL    string `json:"url"`
	ApiURL string `json:"api_url"`

	// SignInPK should be the path to the actual key in GSM
	SignInPK    string `json:"sign_in_pk"`
	SignInKeyID string `json:"sign_in_key_id"`
	Auth        Auth   `json:"auth"`
}

type Payload struct {
	Email           string                   `json:"email"` // email (as ID, possible improvements)
	Profile         UserProfile              `json:"profile"`
	GSI             GSIConfig                `json:"gsi"`
	MIP             MIPConfig                `json:"mip"`
	DefaultHomepage string                   `json:"default_homepage"`
	Authorization   map[string]Authorization `json:"authorization"` // organization/tenant id as key
}

type Profile struct {
	URL              string `json:"url"`
	DisplayName      string `json:"display_name"`
	ImageDataURL     string `json:"image_data_url"`
	ImageURL         string `json:"image_url"`
	Avatar1x1URL     string `json:"avatar_1x1_url"`
	Background3x1URL string `json:"background_3x1_url"`
	Email            string `json:"email"`
}

type SignInResponse struct {
	// Profile from OIDC provider
	LoginProfile *Profile `json:"login_profile,omitempty"`

	Locale  []string `json:"locale,omitempty"`
	IDToken *string  `json:"id_token,omitempty"`
	// Collection of grants NOT signed, for debugging.
	// DO NOT USE THIS FOR BACK END VALIDATION!!!
	Grants map[string]*session.Grant `json:"grants"`
	Expiry string                    `json:"expiry,omitempty"`
	Data   any                       `json:"data,omitempty"`
}

type TokenBuilder func(req *http.Request, authMethod string, payload *idtoken.Payload) (tokenData proto.Message, apiData any, expiry time.Time, err *types.CommonError)

type UserProfile struct {
	ID               string `json:"id"`
	ImageURL         string `json:"image_url"`
	Name             string `json:"name"`
	DisplayName      string `json:"display_name"`
	Role             string `json:"role"`
	Description      string `json:"description"`
	Avatar1x1URL     string `json:"avatar_1x1_url"`
	Background3x1URL string `json:"background_3x1_url"`
	CreatedAt        string `json:"created_at"`
}