oidcsdk

type Arguments []string

type AuthenticationRequestContextFactory func(request *http.Request) (IAuthenticationRequestContext, IError)

type AuthenticationResponseWriter func(requestContext IAuthenticationRequestContext, w http.ResponseWriter, r *http.Request) error

type Config struct {
	Issuer                   string
	AuthCodeLifespan         time.Duration
	AccessTokenLifespan      time.Duration
	RefreshTokenLifespan     time.Duration
	AccessTokenEntropy       int
	AuthorizationCodeEntropy int
	RefreshTokenEntropy      int
	StateParamMinimumEntropy int
	GlobalConsentRequired    bool
}

type ErrorFactory func(status uint8, code string, description string) IError

type ErrorStrategy func(err error, w http.ResponseWriter)

type IAccessTokenStrategy interface {
	GenerateAccessToken() (token string, signature string)
	SignAccessToken(token string) (signature string, err error)
}

type IAuthEPHandler interface {
	HandleAuthEP(ctx context.Context, requestContext IAuthenticationRequestContext) IError
}

type IAuthenticationRequestContext interface {
	IRequestContext
	GetUserSession() ISession
	SetUserSession(sess ISession)
	GetNonce() string
	GetResponseMode() string
	GetResponseType() Arguments
	SetRedirectURI(uri string)
	IssueAuthorizationCode(code string, signature string, expiry time.Time)
}

type IAuthorizationCodeStrategy interface {
	GenerateAuthCode() (code string, signature string)
	SignAuthCode(token string) (signature string, err error)
}

type IBaseContext interface {
	GetRequestID() string
	GetRequestedAt() time.Time
	GetClientID() string
	SetClient(client IClient)
	GetSecret() string
	GetClient() IClient
	GetError() IError
	SetError(err IError)
	GetForm() *url.Values
}

type IClient interface {
	GetID() string
	GetSecret() string
	IsPublic() bool
	GetIDTokenSigningAlg() jose.SignatureAlgorithm
	GetRedirectURIs() []string
	GetApprovedScopes() Arguments
	GetApprovedGrantTypes() Arguments
}

type IClientStore interface {
	GetClient(ctx context.Context, clientID string) (client IClient, err error)
	FetchClientProfile(ctx context.Context, clientID string) RequestProfile
}

type IConfigurable interface {
	Configure(strategy interface{}, config *Config, arg ...interface{})
}

type IError interface {
	error
	GetStatus() string
	GetReason() string
	GetStatusCode() int
	GetDescription() string
	GetDebugInfo() string
}

type IIDTokenStrategy interface {
	GenerateIDToken(profile RequestProfile, client IClient, expiry time.Time,
		transactionClaims map[string]interface{}) (idToken string, err error)
}

type IIntrospectionRequestContext interface {
	IBaseContext
	GetProfile() RequestProfile
	SetProfile(profile RequestProfile)
	GetToken() string
	GetTokenTypeHint() string
}

type IManager interface {
	ProcessAuthorizationEP(w http.ResponseWriter, r *http.Request)
	ProcessTokenEP(w http.ResponseWriter, r *http.Request)
	ProcessIntrospectionEP(w http.ResponseWriter, r *http.Request)
	ProcessRevocationEP(w http.ResponseWriter, r *http.Request)
}

type IRefreshTokenStrategy interface {
	GenerateRefreshToken() (token string, signature string)
	SignRefreshToken(token string) (signature string, err error)
}

type IRequestContext interface {
	GetRequestID() string
	GetRequestedAt() time.Time
	GetState() string
	GetRedirectURI() string
	GetClientID() string
	GetRequestedScopes() Arguments
	GetRequestedAudience() Arguments
	GetClaims() map[string]interface{}
	GetClient() IClient
	SetClient(client IClient)
	GetProfile() RequestProfile
	SetProfile(profile RequestProfile)
	GetIssuedTokens() Tokens
	IssueAccessToken(token string, signature string, expiry time.Time)
	IssueRefreshToken(token string, signature string, expiry time.Time)
	IssueIDToken(token string)
	GetError() IError
	SetError(err IError)
	GetForm() *url.Values
}

type IRevocationRequestContext interface {
	IBaseContext
	GetToken() string
	GetTokenTypeHint() string
}

type ISession interface {
	GetUsername() string
	GetLoginTime() *time.Time
	IsConsentSubmitted() bool
	IsLoginDone() bool
	GetApprovedScopes() Arguments
	GetScope() string
}

type ISessionManager interface {
	RetrieveUserSession(r *http.Request) (ISession, error)
}

type ITokenEPHandler interface {
	HandleTokenEP(ctx context.Context, requestContext ITokenRequestContext) IError
}

type ITokenRequestContext interface {
	IRequestContext
	GetRefreshToken() string
	GetPreviousRequestID() (id string)
	SetPreviousRequestID(id string)
	GetGrantType() string
	GetClientSecret() string
	GetAuthorizationCode() string
	GetUsername() string
	GetPassword() string
}

type ITokenStore interface {
	StoreTokenProfile(ctx context.Context, reqId string, signatures TokenSignatures, profile RequestProfile) (err error)
	GetProfileWithAuthCodeSign(ctx context.Context, signature string) (profile RequestProfile, reqId string, err error)
	GetProfileWithAccessTokenSign(ctx context.Context, signature string) (profile RequestProfile, reqId string, err error)
	GetProfileWithRefreshTokenSign(ctx context.Context, signature string) (profile RequestProfile, reqId string, err error)
	InvalidateWithRequestID(ctx context.Context, reqID string, what uint8) (err error)
}

type ITransactionalStore interface {
	StartTransaction(ctx context.Context)
	CommitTransaction(ctx context.Context)
	RollbackTransaction(ctx context.Context)
}

type IUserStore interface {
	Authenticate(ctx context.Context, username string, credential []byte) (err error)
	GetClaims(ctx context.Context, username string, scopes Arguments, claimsIDs []string) (map[string]interface{}, error)
	IsConsentRequired(ctx context.Context, username string, clientId string, scopes Arguments) bool
	StoreConsent(ctx context.Context, username string, clientId string, scopes Arguments) error
	FetchUserProfile(ctx context.Context, username string) RequestProfile
}

type IntrospectionRequestContextFactory func(r *http.Request) (IRevocationRequestContext, IError)

type IntrospectionResponseWriter func(requestContext IRevocationRequestContext, w http.ResponseWriter, r *http.Request) error

type JsonErrorWriter func(requestContext ITokenRequestContext, w http.ResponseWriter, r *http.Request) error

type RedirectErrorWriter func(requestContext IAuthenticationRequestContext, w http.ResponseWriter, r *http.Request) error

type RequestProfile map[string]string

type RevocationRequestContextFactory func(r *http.Request) (IRevocationRequestContext, IError)

type RevocationResponseWriter func(requestContext IRevocationRequestContext, w http.ResponseWriter, r *http.Request) error

type TokenRequestContextFactory func(request *http.Request) (ITokenRequestContext, IError)

type TokenResponseWriter func(requestContext ITokenRequestContext, w http.ResponseWriter, r *http.Request) error

type TokenSignatures struct {
	AuthorizationCodeSignature string
	AccessTokenSignature       string
	RefreshTokenSignature      string
	RefreshTokenExpiry         time.Time
	AccessTokenExpiry          time.Time
	AuthorizationCodeExpiry    time.Time
}

type Tokens struct {
	TokenSignatures
	AuthorizationCode string
	AccessToken       string
	RefreshToken      string
	TokenType         string
	IDToken           string
}