gateway

type Authorizer struct {
	// contains filtered or unexported fields
}

type ClientVerifier interface {
	VerifyClientID(ctx context.Context, clientID string) error
}

type CognitoClientStore struct {
	// contains filtered or unexported fields
}

type Config struct {
	Addr            string
	Upstream        *url.URL
	InternalToken   string
	PublicBaseURL   string
	AuthProfile     string
	Issuer          string
	JWKSURL         string
	ClientID        string
	RequiredScope   string
	ScopesSupported []string
	RequiredGroup   string
	RequiredGroups  []string
	GroupClaim      string
	AllowedSubjects map[string]struct{}
	AllowedEmails   map[string]struct{}
	AllowedOrigins  []string
	AuthLeeway      time.Duration
	MaxRequestBytes int64
	MaxBearerBytes  int
	UpstreamTimeout time.Duration

	DCREnabled             bool
	CognitoDomainURL       string
	CognitoUserPoolID      string
	DCRAllowedRedirectURIs []string
	DCRAllowedScopes       []string
	DCRIdentityProviders   []string
	DCRClientNamePrefix    string
	DCRAccessTokenMinutes  int32
	DCRClientCacheTTL      time.Duration
}

type DCRClientRegistrationRequest struct {
	RedirectURIs            []string `json:"redirect_uris"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method"`
	GrantTypes              []string `json:"grant_types"`
	ResponseTypes           []string `json:"response_types"`
	ClientName              string   `json:"client_name"`
	Scope                   string   `json:"scope"`
}

type DCRClientRegistrationResponse struct {
	ClientID                string   `json:"client_id"`
	ClientIDIssuedAt        int64    `json:"client_id_issued_at"`
	RedirectURIs            []string `json:"redirect_uris"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method"`
	GrantTypes              []string `json:"grant_types"`
	ResponseTypes           []string `json:"response_types"`
	ClientName              string   `json:"client_name,omitempty"`
	Scope                   string   `json:"scope"`
}

type DCRRegistrar interface {
	RegisterClient(ctx context.Context, req DCRClientRegistrationRequest) (DCRClientRegistrationResponse, error)
}

type Principal struct {
	Subject string
	Email   string
	Groups  []string
	Scopes  []string
}

type Server struct {
	// contains filtered or unexported fields
}