token

type Claims struct {
	BuildID     int64  `json:"build_id,omitempty"`
	BuildNumber int64  `json:"build_number,omitempty"`
	Actor       string `json:"actor,omitempty"`
	IsActive    bool   `json:"is_active,omitempty"`
	IsAdmin     bool   `json:"is_admin,omitempty"`
	Repo        string `json:"repo,omitempty"`
	PullFork    bool   `json:"pull_fork,omitempty"`
	TokenType   string `json:"token_type,omitempty"`
	Image       string `json:"image,omitempty"`
	Request     string `json:"request,omitempty"`
	Commands    bool   `json:"commands,omitempty"`
	jwt.RegisteredClaims
}

type Manager struct {
	// PrivateKeyHMAC is the private key used to sign and validate closed-system tokens
	PrivateKeyHMAC string

	// RSAKeySet is the private key used to sign and validate open-system tokens (OIDC)
	RSAKeySet RSAKeySet

	// UserAccessTokenDuration specifies the token duration to use for users
	UserAccessTokenDuration time.Duration

	// UserRefreshTokenDuration specifies the token duration for user refresh
	UserRefreshTokenDuration time.Duration

	// BuildTokenBufferDuration specifies the additional token duration of build tokens beyond repo timeout
	BuildTokenBufferDuration time.Duration

	// WorkerAuthTokenDuration specifies the token duration for worker auth (check in)
	WorkerAuthTokenDuration time.Duration

	// WorkerRegisterTokenDuration specifies the token duration for worker register
	WorkerRegisterTokenDuration time.Duration

	// IDTokenDuration specifies the token duration for ID tokens
	IDTokenDuration time.Duration

	// Issuer specifies the issuer of the token
	Issuer string
}

type MintTokenOpts struct {
	Build         *api.Build
	Hostname      string
	Repo          string
	TokenDuration time.Duration
	TokenType     string
	User          *api.User
	Audience      []string
	Image         string
	Request       string
	Commands      bool
}

type RSAKeySet struct {
	PrivateKey *rsa.PrivateKey
	KID        string
}