provider

type OidcProviderConfig struct {
	// REQUIRED
	Issuer string

	// REQUIRED
	ClientId string

	// REQUIRED
	ClientSecret string

	// FULLY QUALIFIED Oauth2 Callback path
	RedirectUri string

	// OPTIONAL, will be defaulted if unspecified
	Scopes []string

	// OPTIONAL
	// If set, limit the allowed signing args to this list
	// defaults to RS256,RS512
	SupportedSigningAlgs []string
}

type OidcProviders struct {
	OidcProviderConfig OidcProviderConfig
	// contains filtered or unexported fields
}

type ProviderAuth struct {
	Valid    bool
	RawToken string
	// contains filtered or unexported fields
}

type Providers interface {
	// FiberOidc uses lazy initialization - call this if you're eager!
	Initialize(ctx context.Context) error

	// validate an inbound auth
	// N.B. this does NOT bind ProviderAuth to a context on success
	ValidateJwt(ctx context.Context, jwt string, refreshToken string) (*ProviderAuth, error)

	// individual provider components
	GoOidcProvider(ctx context.Context) (*gooidc.Provider, error)
	Oauth2Config(ctx context.Context) (*oauth2.Config, error)
	IdTokenVerifier(ctx context.Context) (*gooidc.IDTokenVerifier, error)
}