oauth

type GitHubUser struct {
	ID        int    `json:"id"`
	Login     string `json:"login"`
	Name      string `json:"name"`
	Email     string `json:"email"`
	AvatarURL string `json:"avatar_url"`
}

type GoogleUser struct {
	ID            string `json:"id"`
	Email         string `json:"email"`
	VerifiedEmail bool   `json:"verified_email"`
	Name          string `json:"name"`
	GivenName     string `json:"given_name"`
	FamilyName    string `json:"family_name"`
	Picture       string `json:"picture"`
}

type Handler struct {
	// contains filtered or unexported fields
}

type MemoryStateStore struct {
	// contains filtered or unexported fields
}

type Provider string

type ProviderConfig struct {
	// Provider is the provider identifier.
	Provider Provider

	// ClientID is the OAuth2 client ID.
	ClientID string

	// ClientSecret is the OAuth2 client secret.
	ClientSecret string //nolint:gosec // G117: config field, not a hardcoded secret

	// RedirectURL is the OAuth2 callback URL.
	RedirectURL string

	// Scopes are the OAuth2 scopes to request.
	Scopes []string
}

type StateData struct {
	Provider    Provider `json:"provider"`
	RedirectURL string   `json:"redirect_url,omitempty"`
	Nonce       string   `json:"nonce,omitempty"`
}

type StateStore interface {
	// Set stores a state value with expiration.
	Set(ctx context.Context, state string, data StateData, expiry time.Duration) error

	// Get retrieves and deletes a state value.
	Get(ctx context.Context, state string) (StateData, error)
}

type UserInfo struct {
	// ID is the user's ID from the provider.
	ID string

	// Email is the user's email address.
	Email string

	// Name is the user's display name.
	Name string

	// AvatarURL is the URL to the user's avatar image.
	AvatarURL string

	// Provider is the OAuth provider.
	Provider Provider

	// AccessToken is the OAuth access token.
	AccessToken string

	// RefreshToken is the OAuth refresh token (if provided).
	RefreshToken string
}