oidc

type AuthorizationCodeFlow struct {
	Client

	RedirectURI xurl.URL
	// contains filtered or unexported fields
}

type Client struct {
	http.Client

	ClientConfig

	Id string
}

type ClientConfig struct {
	Issuer                xurl.URL `json:"issuer"`
	AuthorizationEndpoint xurl.URL `json:"authorization_endpoint"`
	TokenEndpoint         xurl.URL `json:"token_endpoint"`
	// Both are optional in the discovery document, and either one ends a session.
	EndSessionEndpoint *xurl.URL `json:"end_session_endpoint"`
	RevocationEndpoint *xurl.URL `json:"revocation_endpoint"`
}

type Token struct {
	AccessToken  jwt.JWT `json:"access_token"`
	RefreshToken string  `json:"refresh_token"`
	Scope        string  `json:"scope"`
	// RefreshExpiresIn is Keycloak's own field: the seconds left until the refresh token's session
	// ends at the latest, where 0 or its absence means no limit.
	RefreshExpiresIn int64 `json:"refresh_expires_in"`
	// RefreshExpiresAt counts from before the request was sent, so it errs early.
	RefreshExpiresAt time.Time `json:"-"`
}