auth

type AuthStatus struct {
	LoggedIn     bool
	Credentials  *Credentials
	Error        error
	NeedsRefresh bool
}

type BrowserOpener interface {
	OpenURL(url string) error
}

type CredentialStore interface {
	// Load retrieves stored credentials
	Load() (*Credentials, error)
	// Save stores credentials securely
	Save(creds *Credentials) error
	// Delete removes stored credentials
	Delete() error
	// Exists checks if credentials are stored
	Exists() bool

	// M2M-specific methods
	StoreToken(token string, expiresIn int) error
	GetM2MConfig() (*M2MConfig, error)
	StoreM2MConfig(config *M2MConfig) error
	SetActorType(actorType string) error
	GetActorType() (string, error)
}

type Credentials struct {
	// AuthKit domain used for authentication
	AuthKitDomain string `json:"authkit_domain"`
	// OAuth access token
	AccessToken string `json:"access_token"`
	// OAuth refresh token for renewing access
	RefreshToken string `json:"refresh_token,omitempty"`
	// Token expiration time
	ExpiresAt *time.Time `json:"expires_at,omitempty"`
	// Client ID used for authentication
	ClientID string `json:"client_id,omitempty"`
}

type DeviceAuthResponse struct {
	DeviceCode              string `json:"device_code"`
	UserCode                string `json:"user_code"`
	VerificationURI         string `json:"verification_uri"`
	VerificationURIComplete string `json:"verification_uri_complete"`
	ExpiresIn               int    `json:"expires_in"`
	Interval                int    `json:"interval,omitempty"`
}

type HTTPClient interface {
	Do(req *http.Request) (*http.Response, error)
}

type JWTClaims struct {
	// Standard claims
	Subject   string `json:"sub"`
	Email     string `json:"email"`
	Name      string `json:"name"`
	ExpiresAt int64  `json:"exp"`
	IssuedAt  int64  `json:"iat"`

	// WorkOS-specific claims
	OrganizationID string   `json:"org_id"`
	Organizations  []string `json:"org_ids"`
	ActorType      string   `json:"actor_type"`
	UserID         string   `json:"user_id"`

	// Additional user info
	EmailVerified bool   `json:"email_verified"`
	Username      string `json:"username"`
	FirstName     string `json:"first_name"`
	LastName      string `json:"last_name"`
}

type KeyringStore struct{}

type LoginConfig struct {
	// Don't open browser automatically
	NoBrowser bool
	// Override AuthKit domain (for testing)
	AuthKitDomain string
	// Override OAuth client ID (for testing)
	ClientID string
	// Force re-authentication even if already logged in
	Force bool
}

type M2MConfig struct {
	ClientID     string `json:"client_id"`
	ClientSecret string `json:"client_secret"`
	Issuer       string `json:"issuer,omitempty"`
	OrgID        string `json:"org_id,omitempty"` // Set after token exchange
}

type M2MManager struct {
	// contains filtered or unexported fields
}

type M2MTokenResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
	ExpiresIn   int    `json:"expires_in"`
}

type Manager struct {
	// contains filtered or unexported fields
}

type MockBrowserOpener struct {

	// OpenURL behavior
	OpenURLFunc  func(url string) error
	OpenURLCalls []struct {
		URL string
	}
	// contains filtered or unexported fields
}

type MockBuilder struct {
	// contains filtered or unexported fields
}

type MockHTTPClient struct {

	// Do behavior
	DoFunc  func(req *http.Request) (*http.Response, error)
	DoCalls []struct {
		Req *http.Request
	}
	// contains filtered or unexported fields
}

type MockOAuthProvider struct {

	// StartDeviceFlow behavior
	StartDeviceFlowFunc  func(ctx context.Context) (*DeviceAuthResponse, error)
	StartDeviceFlowCalls []struct {
		Ctx context.Context
	}

	// PollForToken behavior
	PollForTokenFunc  func(ctx context.Context, deviceCode string, interval time.Duration) (*TokenResponse, error)
	PollForTokenCalls []struct {
		Ctx        context.Context
		DeviceCode string
		Interval   time.Duration
	}

	// RefreshToken behavior
	RefreshTokenFunc  func(ctx context.Context, refreshToken string) (*TokenResponse, error)
	RefreshTokenCalls []struct {
		Ctx          context.Context
		RefreshToken string
	}
	// contains filtered or unexported fields
}

type MockStore struct {
	// contains filtered or unexported fields
}

type OAuthClient struct {
	// contains filtered or unexported fields
}

type OAuthProvider interface {
	// StartDeviceFlow initiates the OAuth device flow
	StartDeviceFlow(ctx context.Context) (*DeviceAuthResponse, error)
	// PollForToken polls the token endpoint until authentication completes
	PollForToken(ctx context.Context, deviceCode string, interval time.Duration) (*TokenResponse, error)
	// RefreshToken refreshes an expired access token
	RefreshToken(ctx context.Context, refreshToken string) (*TokenResponse, error)
}

type TestHelpers struct{}

type TokenError struct {
	ErrorCode        string `json:"error"`
	ErrorDescription string `json:"error_description,omitempty"`
}

type TokenResponse struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int    `json:"expires_in,omitempty"`
	RefreshToken string `json:"refresh_token,omitempty"`
	IDToken      string `json:"id_token,omitempty"`
}