provider

type AppConfig struct {
	RedirectURI          string
	Name                 string
	IdentifierURI        string
	SecretValidityMonths int
}

type Provider interface {
	CreateOrUpdateApp(AppConfig, context.Context, dex.Connector) (ProviderApp, error)
	DeleteApp(string, context.Context) error
	GetCredentialsForAuthenticatedApp(AppConfig) (map[string]string, error)
	CleanCredentialsForAuthenticatedApp(AppConfig) error
	DeleteAuthenticatedApp(AppConfig) error
	GetName() string
	GetProviderName() string
	GetOwner() string
	GetType() string

	// Self-renewal methods - all providers must implement these
	// Providers that don't support renewal should return false from SupportsServiceCredentialRenewal()
	SupportsServiceCredentialRenewal() bool
	ShouldRotateServiceCredentials(ctx context.Context, config AppConfig) (bool, error)
	RotateServiceCredentials(ctx context.Context, config AppConfig) (map[string]string, error)
}

type ProviderApp struct {
	Connector         dex.Connector
	SecretEndDateTime time.Time
}

type ProviderConfig struct {
	Credential            ProviderCredential
	Log                   logr.Logger
	ManagementClusterName string
}

type ProviderCredential struct {
	Name        string            `yaml:"name"`
	Owner       string            `yaml:"owner"`
	Credentials map[string]string `yaml:"credentials"`
	Description string            `yaml:"description"`
}

type ProviderSecret struct {
	ClientId     string
	ClientSecret string
	EndDateTime  time.Time
}