internal

type SignaturePolicy struct {
	// Version is the version for the SignaturePolicy. It is typically 1
	// for most SignaturePolicy listed in a TitleData.
	Version uint32
	// SupportedAlgorithms is a list of algorithms supported for signing
	// the request. The meanings or semantics of this field is currently
	// unknown. Known values are 'XBL' and 'DPoP'.
	SupportedAlgorithms []string
	// MaxBodyBytes is the maximum length of request body that can be signed
	// in a single request when using this policy. If 0, the whole request
	// body will be signed.
	MaxBodyBytes int
	// ExtraHeaders specifies additional headers that should be signed.
	// It is typically empty, but rarely used in some titles.
	// Note that the 'Authorization' header of the request is always
	// signed.
	ExtraHeaders []string
}

type Token[C any] struct {
	// IssueInstant is the time when the Token is created.
	IssueInstant time.Time
	// NotAfter is the expiration time of the Token.
	NotAfter time.Time
	// Token is the JWT for the Token.
	Token string
	// DisplayClaims contains additional data claimed from the issuer of
	// the Token. It generally contains fields about representing a user,
	// device, or title.
	DisplayClaims C
}

type TokenRequest[P any] struct {
	// RelyingParty is a URI representing the relying-party, which the token should be
	// authorized for. It is typically 'http' or 'rp' URI.
	RelyingParty string

	// TokenType indicates that type of the token.
	// It is typically 'JWT' for most tokens.
	TokenType string

	// Properties is the properties specific to the token.
	// It may contain the 'ProofKey' field, which is a JWK object
	// representing the key used for the device token.
	Properties P
}