identity

type AuthRecord interface {
	Manager() Manager
	Subject() string
	AuthorizedScopes() map[string]bool
	AuthorizeScopes(map[string]bool)
	AuthorizedClaims() *payload.ClaimsRequest
	AuthorizeClaims(*payload.ClaimsRequest)
	Claims(...string) []jwt.Claims

	User() PublicUser
	SetUser(PublicUser)

	LoggedOn() (bool, time.Time)
	SetAuthTime(time.Time)
}

type Config struct {
	SignInFormURI *url.URL
	SignedOutURI  *url.URL

	ScopesSupported []string

	// AllowSignedLogin enables the signed JWT auto sign-in flow.
	AllowSignedLogin bool

	Logger logrus.FieldLogger
}

type IsHandledError struct {
}

type LoginRequiredError struct {
	// contains filtered or unexported fields
}

type LookupContext struct {
	// Audience is the client ID this lookup is made for.
	Audience string

	// NewGrant is true when the lookup belongs to an authorization which
	// creates a new grant, which means that a refresh token was requested.
	// Backends can use this to hand out a new session per grant.
	NewGrant bool

	// RefreshTokenID is the ID of the refresh token which is currently
	// exchanged, if any.
	RefreshTokenID string

	// NewAccessTokenID is the ID of the access token which is about to be
	// issued for this lookup, if any.
	NewAccessTokenID string

	// NewRefreshTokenID is the ID of the refresh token which is about to be
	// issued for this lookup. Empty when this lookup issues no refresh token,
	// so backends can tell a rotating grant from a one shot lookup.
	NewRefreshTokenID string
}

type Manager interface {
	Authenticate(ctx context.Context, rw http.ResponseWriter, req *http.Request, ar *payload.AuthenticationRequest, next Manager) (AuthRecord, error)
	Authorize(ctx context.Context, rw http.ResponseWriter, req *http.Request, ar *payload.AuthenticationRequest, auth AuthRecord) (AuthRecord, error)
	EndSession(ctx context.Context, rw http.ResponseWriter, req *http.Request, esr *payload.EndSessionRequest) error

	ApproveScopes(ctx context.Context, sub string, audience string, approvedScopesList map[string]bool) (string, error)
	ApprovedScopes(ctx context.Context, sub string, audience string, ref string) (map[string]bool, error)

	Fetch(ctx context.Context, userID string, sessionRef *string, scopes map[string]bool, requestedClaimsMaps []*payload.ClaimsRequestMap, requestedScopes map[string]bool, lookup *LookupContext) (AuthRecord, bool, error)

	Name() string
	ScopesSupported(scopes map[string]bool) []string
	ClaimsSupported(claims []string) []string

	AddRoutes(ctx context.Context, router *mux.Router)

	OnSetLogon(func(ctx context.Context, rw http.ResponseWriter, user User) error) error
	OnUnsetLogon(func(ctx context.Context, rw http.ResponseWriter) error) error
}

type PublicUser interface {
	Subject() string
	Raw() string
}

type RedirectError struct {
	// contains filtered or unexported fields
}

type User interface {
	Subject() string
}

type UserWithClaims interface {
	User
	Claims() jwt.MapClaims
}

type UserWithEmail interface {
	User
	Email() string
	EmailVerified() bool
}

type UserWithID interface {
	User
	ID() int64
}

type UserWithProfile interface {
	User
	Name() string
	FamilyName() string
	GivenName() string
}

type UserWithScopedClaims interface {
	User
	ScopedClaims(authorizedScopes map[string]bool) jwt.MapClaims
}

type UserWithSessionRef interface {
	User
	SessionRef() *string
}

type UserWithUniqueID interface {
	User
	UniqueID() string
}

type UserWithUsername interface {
	User
	Username() string
}