pam_issuer

type AuthAuthorizeParams struct {
	// ResponseType OAuth2 response type.
	ResponseType AuthAuthorizeParamsResponseType `form:"response_type" json:"response_type"`

	// ClientId OAuth2 client ID.
	ClientId string `form:"client_id" json:"client_id"`

	// RedirectUri OAuth2 redirect URI.
	RedirectUri string `form:"redirect_uri" json:"redirect_uri"`

	// Scope OAuth2 scope.
	Scope *string `form:"scope,omitempty" json:"scope,omitempty"`

	// State OAuth2 state parameter.
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// CodeChallenge PKCE code challenge.
	CodeChallenge *string `form:"code_challenge,omitempty" json:"code_challenge,omitempty"`

	// CodeChallengeMethod PKCE code challenge method (only S256 supported).
	CodeChallengeMethod *AuthAuthorizeParamsCodeChallengeMethod `form:"code_challenge_method,omitempty" json:"code_challenge_method,omitempty"`
}

type AuthAuthorizeParamsCodeChallengeMethod string

type AuthAuthorizeParamsResponseType string

type AuthLoginParams struct {
	// ClientId OAuth2 client ID.
	ClientId string `form:"client_id" json:"client_id"`

	// RedirectUri OAuth2 redirect URI.
	RedirectUri string `form:"redirect_uri" json:"redirect_uri"`

	// State OAuth2 state parameter.
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// Scope OAuth2 scope.
	Scope *string `form:"scope,omitempty" json:"scope,omitempty"`

	// CodeChallenge PKCE code challenge.
	CodeChallenge *string `form:"code_challenge,omitempty" json:"code_challenge,omitempty"`

	// CodeChallengeMethod PKCE code challenge method (only S256 supported).
	CodeChallengeMethod *AuthLoginParamsCodeChallengeMethod `form:"code_challenge_method,omitempty" json:"code_challenge_method,omitempty"`
}

type AuthLoginParamsCodeChallengeMethod string

type AuthLoginPostFormdataBody struct {
	// Password Password for authentication
	Password *string `form:"password,omitempty" json:"password,omitempty"`

	// Username Username for authentication
	Username string `form:"username" json:"username"`
}

type AuthLoginPostFormdataRequestBody AuthLoginPostFormdataBody

type AuthLogoutParams struct {
	// PostLogoutRedirectUri Where to redirect the user after logout (must align with registered redirect URIs).
	PostLogoutRedirectUri *string `form:"post_logout_redirect_uri,omitempty" json:"post_logout_redirect_uri,omitempty"`

	// IdTokenHint Optional ID token hint (accepted for interoperability; not required for logout).
	IdTokenHint *string `form:"id_token_hint,omitempty" json:"id_token_hint,omitempty"`

	// ClientId OAuth2 client ID; if set, must match the configured client.
	ClientId *string `form:"client_id,omitempty" json:"client_id,omitempty"`

	// State Optional opaque state (passed through to post_logout_redirect_uri as query param when redirecting).
	State *string `form:"state,omitempty" json:"state,omitempty"`
}

type AuthTokenFormdataRequestBody = TokenRequest

type AuthTokenJSONRequestBody = TokenRequest

type ChiServerOptions struct {
	BaseURL          string
	BaseRouter       chi.Router
	Middlewares      []MiddlewareFunc
	ErrorHandlerFunc func(w http.ResponseWriter, r *http.Request, err error)
}

type InvalidParamFormatError struct {
	ParamName string
	Err       error
}

type JWKSResponse struct {
	Keys *[]struct {
		// Alg Algorithm.
		Alg *string `json:"alg,omitempty"`

		// Crv Elliptic curve name (for EC keys, e.g., "P-256").
		Crv *string `json:"crv,omitempty"`

		// E RSA exponent (for RSA keys).
		E *string `json:"e,omitempty"`

		// Kid Key ID.
		Kid *string `json:"kid,omitempty"`

		// Kty Key type.
		Kty *string `json:"kty,omitempty"`

		// N RSA modulus (for RSA keys).
		N *string `json:"n,omitempty"`

		// Use Key use.
		Use *string `json:"use,omitempty"`

		// X EC x-coordinate (for EC keys).
		X *string `json:"x,omitempty"`

		// Y EC y-coordinate (for EC keys).
		Y *string `json:"y,omitempty"`
	} `json:"keys,omitempty"`
}

type MiddlewareFunc func(http.Handler) http.Handler

type OAuth2Error struct {
	// Code OAuth2 error code (RFC 6749 Section 5.2).
	Code OAuth2ErrorError `json:"error"`

	// ErrorDescription Human-readable ASCII text providing additional information.
	ErrorDescription *string `json:"error_description,omitempty"`

	// ErrorUri URI identifying a human-readable web page with information about the error.
	ErrorUri *string `json:"error_uri,omitempty"`
}

type OAuth2ErrorError string

type OpenIDConfiguration struct {
	// AuthorizationEndpoint Authorization endpoint.
	AuthorizationEndpoint *string `json:"authorization_endpoint,omitempty"`

	// ClaimsSupported Supported claims.
	ClaimsSupported *[]string `json:"claims_supported,omitempty"`

	// CodeChallengeMethodsSupported Supported PKCE code challenge methods.
	CodeChallengeMethodsSupported *[]OpenIDConfigurationCodeChallengeMethodsSupported `json:"code_challenge_methods_supported,omitempty"`

	// EndSessionEndpoint OIDC RP-Initiated Logout endpoint (end session at the issuer).
	EndSessionEndpoint *string `json:"end_session_endpoint,omitempty"`

	// GrantTypesSupported Supported grant types.
	GrantTypesSupported *[]string `json:"grant_types_supported,omitempty"`

	// IdTokenSigningAlgValuesSupported Supported signing algorithms.
	IdTokenSigningAlgValuesSupported *[]string `json:"id_token_signing_alg_values_supported,omitempty"`

	// Issuer OIDC issuer.
	Issuer *string `json:"issuer,omitempty"`

	// JwksUri JWKS endpoint.
	JwksUri *string `json:"jwks_uri,omitempty"`

	// ResponseTypesSupported Supported response types.
	ResponseTypesSupported *[]string `json:"response_types_supported,omitempty"`

	// ScopesSupported Supported scopes.
	ScopesSupported *[]string `json:"scopes_supported,omitempty"`

	// SubjectTypesSupported Supported subject identifier types.
	SubjectTypesSupported *[]OpenIDConfigurationSubjectTypesSupported `json:"subject_types_supported,omitempty"`

	// TokenEndpoint Token endpoint.
	TokenEndpoint *string `json:"token_endpoint,omitempty"`

	// TokenEndpointAuthMethodsSupported Supported authentication methods.
	TokenEndpointAuthMethodsSupported *[]string `json:"token_endpoint_auth_methods_supported,omitempty"`

	// UserinfoEndpoint UserInfo endpoint.
	UserinfoEndpoint *string `json:"userinfo_endpoint,omitempty"`
}

type OpenIDConfigurationCodeChallengeMethodsSupported string

type OpenIDConfigurationSubjectTypesSupported string

type RequiredHeaderError struct {
	ParamName string
	Err       error
}

type RequiredParamError struct {
	ParamName string
}

type ServerInterface interface {

	// (GET /api/v1/auth/.well-known/openid-configuration)
	AuthOpenIDConfiguration(w http.ResponseWriter, r *http.Request)

	// (GET /api/v1/auth/authorize)
	AuthAuthorize(w http.ResponseWriter, r *http.Request, params AuthAuthorizeParams)

	// (GET /api/v1/auth/jwks)
	AuthJWKS(w http.ResponseWriter, r *http.Request)

	// (GET /api/v1/auth/login)
	AuthLogin(w http.ResponseWriter, r *http.Request, params AuthLoginParams)

	// (POST /api/v1/auth/login)
	AuthLoginPost(w http.ResponseWriter, r *http.Request)

	// (GET /api/v1/auth/logout)
	AuthLogout(w http.ResponseWriter, r *http.Request, params AuthLogoutParams)

	// (POST /api/v1/auth/token)
	AuthToken(w http.ResponseWriter, r *http.Request)

	// (GET /api/v1/auth/userinfo)
	AuthUserInfo(w http.ResponseWriter, r *http.Request)
}

type ServerInterfaceWrapper struct {
	Handler            ServerInterface
	HandlerMiddlewares []MiddlewareFunc
	ErrorHandlerFunc   func(w http.ResponseWriter, r *http.Request, err error)
}

type TokenRequest struct {
	// ClientId OAuth2 client ID.
	ClientId *string `json:"client_id"`

	// ClientSecret OAuth2 client secret (optional for public clients).
	ClientSecret *string `json:"client_secret"`

	// Code Authorization code for authorization_code grant.
	Code *string `json:"code"`

	// CodeVerifier PKCE code verifier.
	CodeVerifier *string `json:"code_verifier"`

	// GrantType OAuth2 grant type.
	GrantType TokenRequestGrantType `json:"grant_type"`

	// Password Password for password grant (not used in OIDC flows).
	Password *string `json:"password"`

	// RedirectUri OAuth2 redirect URI (required for authorization_code grant if included in authorization request).
	RedirectUri *string `json:"redirect_uri"`

	// RefreshToken Refresh token for refresh_token grant.
	RefreshToken *string `json:"refresh_token"`

	// Scope OAuth2 scope.
	Scope *string `json:"scope"`

	// Username Username for password grant (not used in OIDC flows).
	Username *string `json:"username"`
}

type TokenRequestGrantType string

type TokenResponse struct {
	// AccessToken OAuth2 access token.
	AccessToken string `json:"access_token"`

	// ExpiresIn Token expiration time in seconds.
	ExpiresIn *int `json:"expires_in,omitempty"`

	// IdToken OpenID Connect ID token (returned when openid scope is requested).
	IdToken *string `json:"id_token,omitempty"`

	// RefreshToken OAuth2 refresh token.
	RefreshToken *string `json:"refresh_token,omitempty"`

	// TokenType Token type.
	TokenType TokenResponseTokenType `json:"token_type"`
}

type TokenResponseTokenType string

type TooManyValuesForParamError struct {
	ParamName string
	Count     int
}

type UnescapedCookieParamError struct {
	ParamName string
	Err       error
}

type Unimplemented struct{}

type UnmarshalingParamError struct {
	ParamName string
	Err       error
}

type UserInfoResponse struct {
	// Email Email address.
	Email *string `json:"email,omitempty"`

	// EmailVerified Email verification status.
	EmailVerified *bool `json:"email_verified,omitempty"`

	// Name Full name.
	Name *string `json:"name,omitempty"`

	// Organizations User organizations.
	Organizations *[]string `json:"organizations,omitempty"`

	// PreferredUsername Preferred username.
	PreferredUsername *string `json:"preferred_username,omitempty"`

	// Roles User roles.
	Roles *[]string `json:"roles,omitempty"`

	// Sub Subject identifier.
	Sub string `json:"sub"`
}