oidcsdk

type Arguments []string

type AuthenticationRequestContextFactory func(request *http.Request) (IAuthenticationRequestContext, IError)

type AuthenticationResponseWriter func(requestContext IAuthenticationRequestContext, w http.ResponseWriter, r *http.Request) error

type BearerErrorResponseWriter func(writer http.ResponseWriter, request *http.Request) error

type Config struct {
	Issuer                   string
	AuthCodeLifespan         time.Duration
	AccessTokenLifespan      time.Duration
	RefreshTokenLifespan     time.Duration
	AccessTokenEntropy       int
	AuthorizationCodeEntropy int
	RefreshTokenEntropy      int
	StateParamMinimumEntropy int
	GlobalConsentRequired    bool
	PKCEPlainEnabled         bool
}

type ErrorFactory func(status uint8, code string, description string) IError

type ErrorStrategy func(err error, w http.ResponseWriter)

type IAccessTokenStrategy interface {
	GenerateAccessToken() (token string, signature string)
	SignAccessToken(token string) (signature string, err error)
}

type IAuthEPHandler interface {
	HandleAuthEP(ctx context.Context, requestContext IAuthenticationRequestContext) IError
}

type IAuthenticationRequestContext interface {
	IRequestContext
	GetUserSession() ISession
	SetUserSession(sess ISession)
	GetNonce() string
	GetResponseMode() string
	GetResponseType() Arguments
	SetRedirectURI(uri string)
	IssueAuthorizationCode(code string, signature string, expiry time.Time)
}

type IAuthorizationCodeStrategy interface {
	GenerateAuthCode() (code string, signature string)
	SignAuthCode(token string) (signature string, err error)
}

type IBaseContext interface {
	GetRequestID() string
	GetRequestedAt() time.Time
	GetClientID() string
	GetToken() string
	GetTokenTypeHint() string
	SetClient(client IClient)
	GetClientSecret() string
	GetClient() IClient
	GetError() IError
	SetError(err IError)
	GetForm() *url.Values
}

type IClient interface {
	GetID() string
	GetSecret() string
	IsPublic() bool
	GetIDTokenSigningAlg() jose.SignatureAlgorithm
	GetRedirectURIs() []string
	GetApprovedScopes() Arguments
	GetApprovedGrantTypes() Arguments
}

type IClientCredentialContext interface {
	GetClientID() string
	GetClientSecret() string
	SetClient(client IClient)
}

type IClientStore interface {
	GetClient(ctx context.Context, clientID string) (client IClient, err error)
	FetchClientProfile(ctx context.Context, clientID string) RequestProfile
}

type IConfigurable interface {
	Configure(config *Config, arg ...interface{})
}

type IError interface {
	error
	GetStatus() string
	GetReason() string
	GetStatusCode() int
	GetDescription() string
	GetDebugInfo() string
}

type IIDTokenStrategy interface {
	GenerateIDToken(profile RequestProfile, client IClient, expiry time.Time,
		transactionClaims map[string]interface{}) (idToken string, err error)
}

type IIntrospectionEPHandler interface {
	HandleIntrospectionEP(ctx context.Context, requestContext IIntrospectionRequestContext) IError
}

type IIntrospectionRequestContext interface {
	IBaseContext
	GetProfile() RequestProfile
	SetProfile(profile RequestProfile)
	IsActive() bool
	SetActive(active bool)
	GetTokenType() string
	SetTokenType(tokenType string)
}

type IManager interface {
	ProcessAuthorizationEP(writer http.ResponseWriter, request *http.Request)
	ProcessTokenEP(writer http.ResponseWriter, request *http.Request)
	ProcessIntrospectionEP(writer http.ResponseWriter, request *http.Request)
	ProcessRevocationEP(writer http.ResponseWriter, request *http.Request)
	ProcessDiscoveryEP(writer http.ResponseWriter, request *http.Request)
	ProcessKeysEP(writer http.ResponseWriter, request *http.Request)
}

type IRefreshTokenStrategy interface {
	GenerateRefreshToken() (token string, signature string)
	SignRefreshToken(token string) (signature string, err error)
}

type IRequestContext interface {
	GetRequestID() string
	GetRequestedAt() time.Time
	GetState() string
	GetRedirectURI() string
	GetClientID() string
	GetRequestedScopes() Arguments
	GetRequestedAudience() Arguments
	GetClaims() map[string]interface{}
	GetClient() IClient
	SetClient(client IClient)
	GetProfile() RequestProfile
	SetProfile(profile RequestProfile)
	GetIssuedTokens() Tokens
	IssueAccessToken(token string, signature string, expiry time.Time)
	IssueRefreshToken(token string, signature string, expiry time.Time)
	IssueIDToken(token string)
	GetError() IError
	SetError(err IError)
	GetForm() *url.Values
}

type IRevocationEPHandler interface {
	HandleRevocationEP(ctx context.Context, requestContext IRevocationRequestContext) IError
}

type IRevocationRequestContext interface {
	IBaseContext
}

type ISecretStore interface {
	GetAllSecrets() *jose.JSONWebKeySet
}

type ISession interface {
	GetUsername() string
	GetLoginTime() *time.Time
	IsConsentSubmitted() bool
	IsLoginDone() bool
	GetApprovedScopes() Arguments
	GetScope() string
}

type ISessionManager interface {
	RetrieveUserSession(r *http.Request) (ISession, error)
}

type ITokenEPHandler interface {
	HandleTokenEP(ctx context.Context, requestContext ITokenRequestContext) IError
}

type ITokenRequestContext interface {
	IRequestContext
	GetRefreshToken() string
	GetPreviousRequestID() (id string)
	SetPreviousRequestID(id string)
	GetGrantType() string
	GetClientSecret() string
	GetAuthorizationCode() string
	GetUsername() string
	GetPassword() string
}

type ITokenStore interface {
	StoreTokenProfile(ctx context.Context, reqId string, signatures TokenSignatures, profile RequestProfile) (err error)
	GetProfileWithAuthCodeSign(ctx context.Context, signature string) (profile RequestProfile, reqId string, err error)
	GetProfileWithAccessTokenSign(ctx context.Context, signature string) (profile RequestProfile, reqId string, err error)
	GetProfileWithRefreshTokenSign(ctx context.Context, signature string) (profile RequestProfile, reqId string, err error)
	InvalidateWithRequestID(ctx context.Context, reqID string, what uint8) (err error)
}

type ITokenStoreNew interface {
	StoreAuthorizationCode(ctx context.Context, reqId string, sign string, expiry time.Time, profile RequestProfile) (err error)
	StoreAccessToken(ctx context.Context, reqId string, sign string, expiry time.Time, profile RequestProfile) (err error)
	StoreRefreshToken(ctx context.Context, reqId string, sign string, expiry time.Time, profile RequestProfile) (err error)
	InvalidateAuthorizationCode(ctx context.Context, reqId string) (err error)
	InvalidateAccessToken(ctx context.Context, reqId string) (err error)
	InvalidateRefreshToken(ctx context.Context, reqId string) (err error)
	FindAuthorizationCode(ctx context.Context, sign string)
}

type ITransactionalStore interface {
	StartTransaction(ctx context.Context)
	CommitTransaction(ctx context.Context)
	RollbackTransaction(ctx context.Context)
}

type IUserStore interface {
	Authenticate(ctx context.Context, username string, credential []byte) (err error)
	GetClaims(ctx context.Context, username string, scopes Arguments, claimsIDs []string) (map[string]interface{}, error)
	IsConsentRequired(ctx context.Context, username string, clientId string, scopes Arguments) bool
	StoreConsent(ctx context.Context, username string, clientId string, scopes Arguments) error
	FetchUserProfile(ctx context.Context, username string) RequestProfile
}

type IntrospectionRequestContextFactory func(request *http.Request) (IIntrospectionRequestContext, IError)

type IntrospectionResponseWriter func(requestContext IIntrospectionRequestContext, writer http.ResponseWriter, request *http.Request) error

type JsonErrorWriter func(pError IError, w http.ResponseWriter, r *http.Request) error

type RedirectErrorWriter func(requestContext IAuthenticationRequestContext, w http.ResponseWriter, r *http.Request) error

type RequestProfile map[string]string

type RevocationRequestContextFactory func(request *http.Request) (IRevocationRequestContext, IError)

type RevocationResponseWriter func(requestContext IRevocationRequestContext, writer http.ResponseWriter, request *http.Request) error

type TokenRequestContextFactory func(request *http.Request) (ITokenRequestContext, IError)

type TokenResponseWriter func(requestContext ITokenRequestContext, w http.ResponseWriter, r *http.Request) error

type TokenSignatures struct {
	AuthorizationCodeSignature string
	AccessTokenSignature       string
	RefreshTokenSignature      string
	RefreshTokenExpiry         time.Time
	AccessTokenExpiry          time.Time
	AuthorizationCodeExpiry    time.Time
}

type Tokens struct {
	TokenSignatures
	AuthorizationCode string
	AccessToken       string
	RefreshToken      string
	TokenType         string
	IDToken           string
}