auth

type CoreAuthHandler struct {
	// contains filtered or unexported fields
}

type DNSAuthHandler struct {
	CoreAuthHandler
	// contains filtered or unexported fields
}

type DNSResolver interface {
	LookupTXT(ctx context.Context, name string) ([]string, error)
}

type DNSTokenExchangeInput struct {
	Body SignatureTokenExchangeInput
}

type DefaultDNSResolver struct{}

type DefaultHTTPKeyFetcher struct {
	// contains filtered or unexported fields
}

type GenericOIDCValidator interface {
	ValidateToken(ctx context.Context, token string) (*OIDCClaims, error)
}

type GitHubHandler struct {
	// contains filtered or unexported fields
}

type GitHubOIDCClaims struct {
	jwt.RegisteredClaims
	RepositoryOwner string `json:"repository_owner"` // e.g., "octo-org"
}

type GitHubOIDCHandler struct {
	// contains filtered or unexported fields
}

type GitHubOIDCTokenExchangeInput struct {
	Body struct {
		OIDCToken string `json:"oidc_token" doc:"GitHub Actions OIDC token" required:"true"`
	}
}

type GitHubOIDCValidator struct {
	// contains filtered or unexported fields
}

type GitHubTokenExchangeInput struct {
	Body struct {
		GitHubToken string `json:"github_token" doc:"GitHub OAuth token" required:"true"`
	}
}

type GitHubUserOrOrg struct {
	Login string `json:"login"`
	ID    int    `json:"id"`
}

type HTTPAuthHandler struct {
	CoreAuthHandler
	// contains filtered or unexported fields
}

type HTTPKeyFetcher interface {
	FetchKey(ctx context.Context, domain string) (string, error)
}

type HTTPTokenExchangeInput struct {
	Body SignatureTokenExchangeInput
}

type JWK struct {
	KTY string `json:"kty"`
	KID string `json:"kid"`
	Use string `json:"use"`
	N   string `json:"n"`
	E   string `json:"e"`
}

type JWKS struct {
	Keys []JWK `json:"keys"`
}

type KeyFetcher func(ctx context.Context, domain string) ([]string, error)

type NoneHandler struct {
	// contains filtered or unexported fields
}

type OIDCClaims struct {
	Subject     string         `json:"sub"`
	Issuer      string         `json:"iss"`
	Audience    []string       `json:"aud"`
	ExtraClaims map[string]any `json:"-"`
}

type OIDCHandler struct {
	// contains filtered or unexported fields
}

type OIDCTokenExchangeInput struct {
	Body struct {
		OIDCToken string `json:"oidc_token" doc:"OIDC ID token from any provider" required:"true"`
	}
}

type OIDCValidator interface {
	ValidateToken(ctx context.Context, token string, audience string) (*GitHubOIDCClaims, error)
}

type SignatureTokenExchangeInput struct {
	Domain          string `json:"domain" doc:"Domain name" example:"example.com" required:"true"`
	Timestamp       string `json:"timestamp" doc:"RFC3339 timestamp" example:"2023-01-01T00:00:00Z" required:"true"`
	SignedTimestamp string `json:"signed_timestamp" doc:"Hex-encoded Ed25519 signature of timestamp" example:"abcdef1234567890" required:"true"`
}

type StandardOIDCValidator struct {
	// contains filtered or unexported fields
}