openid

type Provider interface {
	GetAuthURL(state string) string
	Exchange(ctx context.Context, code string) (*oauth2.Token, error)
	VerifyIDToken(ctx context.Context, rawIDToken string) (*oidc.IDToken, error)
	GetUserInfo(ctx context.Context, token *oauth2.Token, idToken *oidc.IDToken) (*UserInfo, error)
}

type Service interface {
	BeginAuth() (authURL string, state string, err error)
	CompleteAuth(ctx context.Context, code, state, expectedState string) (*model.User, *types.TokenPair, error)
}

type UserInfo struct {
	Subject   string
	Email     string
	FirstName string
	LastName  string
	Name      string
	Roles     []string
}