oauth2

type AccessToken struct {
	Token     string     `json:"token" db:"token"`
	ClientID  string     `json:"client_id" db:"client_id"`
	UserID    *uint      `json:"user_id,omitempty" db:"user_id"` // null for client credentials
	Scopes    []string   `json:"scopes" db:"scopes"`
	ExpiresAt time.Time  `json:"expires_at" db:"expires_at"`
	CreatedAt time.Time  `json:"created_at" db:"created_at"`
	LastUsed  *time.Time `json:"last_used,omitempty" db:"last_used"`
	IsActive  bool       `json:"is_active" db:"is_active"`
}

type AccessTokenRepository interface {
	Create(token *AccessToken) error
	GetByToken(token string) (*AccessToken, error)
	Update(token *AccessToken) error
	Revoke(token string) error
	CleanupExpired() error
}

type AuthorizationCode struct {
	Code                string    `json:"code" db:"code"`
	ClientID            string    `json:"client_id" db:"client_id"`
	UserID              uint      `json:"user_id" db:"user_id"`
	RedirectURI         string    `json:"redirect_uri" db:"redirect_uri"`
	Scopes              []string  `json:"scopes" db:"scopes"`
	CodeChallenge       string    `json:"code_challenge,omitempty" db:"code_challenge"` // PKCE
	CodeChallengeMethod string    `json:"code_challenge_method,omitempty" db:"code_challenge_method"`
	ExpiresAt           time.Time `json:"expires_at" db:"expires_at"`
	Used                bool      `json:"used" db:"used"`
	CreatedAt           time.Time `json:"created_at" db:"created_at"`
}

type AuthorizationCodeRepository interface {
	Create(code *AuthorizationCode) error
	GetByCode(code string) (*AuthorizationCode, error)
	MarkUsed(code string) error
	CleanupExpired() error
}

type Client struct {
	ID             string      `json:"id" db:"id"`
	Secret         string      `json:"secret,omitempty" db:"secret"`
	Name           string      `json:"name" db:"name"`
	Description    string      `json:"description" db:"description"`
	RedirectURIs   []string    `json:"redirect_uris" db:"redirect_uris"`
	Scopes         []string    `json:"scopes" db:"scopes"`
	GrantTypes     []GrantType `json:"grant_types" db:"grant_types"`
	IsActive       bool        `json:"is_active" db:"is_active"`
	IsConfidential bool        `json:"is_confidential" db:"is_confidential"` // true for server apps, false for SPAs/mobile

	// Metadata
	CreatedBy uint       `json:"created_by" db:"created_by"`
	CreatedAt time.Time  `json:"created_at" db:"created_at"`
	UpdatedAt time.Time  `json:"updated_at" db:"updated_at"`
	LastUsed  *time.Time `json:"last_used,omitempty" db:"last_used"`
}

type ClientRepository interface {
	Create(client *Client) error
	GetByID(id string) (*Client, error)
	GetByCredentials(id, secret string) (*Client, error)
	List() ([]*Client, error)
	Update(client *Client) error
	Delete(id string) error
}

type ErrorResponse struct {
	Error            string `json:"error"`
	ErrorDescription string `json:"error_description,omitempty"`
	ErrorURI         string `json:"error_uri,omitempty"`
	State            string `json:"state,omitempty"`
}

type GrantType string

type Provider struct {
	// contains filtered or unexported fields
}

type RefreshToken struct {
	Token         string    `json:"token" db:"token"`
	AccessTokenID string    `json:"access_token_id" db:"access_token_id"`
	ClientID      string    `json:"client_id" db:"client_id"`
	UserID        uint      `json:"user_id" db:"user_id"`
	Scopes        []string  `json:"scopes" db:"scopes"`
	ExpiresAt     time.Time `json:"expires_at" db:"expires_at"`
	CreatedAt     time.Time `json:"created_at" db:"created_at"`
	Used          bool      `json:"used" db:"used"`
}

type RefreshTokenRepository interface {
	Create(token *RefreshToken) error
	GetByToken(token string) (*RefreshToken, error)
	MarkUsed(token string) error
	CleanupExpired() error
}

type ResponseType string

type Scope string

type TokenResponse struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int    `json:"expires_in"`
	RefreshToken string `json:"refresh_token,omitempty"`
	Scope        string `json:"scope,omitempty"`
}

type TokenType string