credential

type ApiKey struct {
	Endpoint     xurl.URL
	ClientId     uuid.UUID `json:"client_id"`
	ClientSecret string    `json:"client_secret"`

	Cache *struct {
		Token jwt.JWT `json:"token,omitzero"`
	} `json:"-"`
}

type Credential interface {
	// Identity identifies the credential, see Credentials.SetIdentity.
	Identity() Identity
	CachedToken(ctx context.Context, getWorkspace getWorkspaceFunc) (token jwt.JWT, found bool)
	// RefreshCachedToken re-mints the token, so a CachedToken call after it finds one.
	RefreshCachedToken(ctx context.Context, client http.Client, getWorkspace getWorkspaceFunc) error
}

type Credentials struct {
	ApiKey    *ApiKey    `json:"apiKey,omitempty"`
	Manual    *Manual    `json:"manual,omitempty"`
	OidcLogin *OidcLogin `json:"oidcLogin,omitempty"`
}

type Identity struct {
	Hash string
}

type Manual struct {
	Endpoint xurl.URL `json:"endpoint"`
	Token    jwt.JWT  `json:"token"`
}

type Name string

type OidcLogin struct {
	Endpoint xurl.URL `json:"endpoint"`
	Issuer   xurl.URL `json:"issuer"`
	ClientId string   `json:"clientId"`
	Cache    *struct {
		RefreshToken string                  `json:"refreshToken"`
		ScopedTokens map[scope.Scope]jwt.JWT `json:"tokens,omitzero"`
	} `json:"-"`
}