oauth

type Client struct {
	// contains filtered or unexported fields
}

type ClientInterface interface {
	GetAuthURL(provider Provider, state string, additionalParams map[string]string) (string, error)
	ExchangeCodeForToken(ctx context.Context, provider Provider, code string, codeVerifier ...string) (*TokenResponse, error)
	RefreshAccessToken(ctx context.Context, provider Provider, refreshToken string) (*TokenResponse, error)
	GetUserProfile(ctx context.Context, provider Provider, accessToken string) (*Profile, error)
	ValidateToken(ctx context.Context, provider Provider, token string) (*TokenInfo, error)
	RevokeToken(ctx context.Context, provider Provider, token string) error
}

type Config struct {
	Providers    map[string]*ProviderConfig `json:"providers" yaml:"providers"`
	DefaultScope []string                   `json:"default_scope" yaml:"default_scope"`
	EnablePKCE   bool                       `json:"enable_pkce" yaml:"enable_pkce"`
	StateSecret  string                     `json:"state_secret" yaml:"state_secret"`
}

type Error struct {
	Provider string
	Code     string
	Message  string
	Err      error
}

type MiddlewareOptions struct {
	TokenLookup    string                                             // "header:Authorization,query:token,cookie:oauth_token"
	AuthScheme     string                                             // "Bearer" or "Token"
	SkipPaths      []string                                           // Paths to skip OAuth validation
	ErrorHandler   func(http.ResponseWriter, *http.Request)           // Custom error handler
	SuccessHandler func(http.ResponseWriter, *http.Request, *Profile) // Success handler
}

type PKCEData struct {
	CodeVerifier  string `json:"code_verifier"`
	CodeChallenge string `json:"code_challenge"`
	Method        string `json:"method"` // "S256" or "plain"
}

type Profile struct {
	ID       string `json:"id"`
	Email    string `json:"email"`
	Name     string `json:"name"`
	Avatar   string `json:"avatar"`
	Username string `json:"username"`
	Provider string `json:"provider"`
	Verified bool   `json:"verified"`
	Locale   string `json:"locale,omitempty"`
}

type Provider string

type ProviderConfig struct {
	ClientID     string            `json:"client_id" yaml:"client_id"`
	ClientSecret string            `json:"client_secret" yaml:"client_secret"`
	RedirectURL  string            `json:"redirect_url" yaml:"redirect_url"`
	Scopes       []string          `json:"scopes" yaml:"scopes"`
	AuthURL      string            `json:"auth_url" yaml:"auth_url"`
	TokenURL     string            `json:"token_url" yaml:"token_url"`
	UserInfoURL  string            `json:"user_info_url" yaml:"user_info_url"`
	RevokeURL    string            `json:"revoke_url" yaml:"revoke_url"`
	Enabled      bool              `json:"enabled" yaml:"enabled"`
	ExtraParams  map[string]string `json:"extra_params" yaml:"extra_params"`
}

type ProviderInfo struct {
	Name               string   `json:"name"`
	DisplayName        string   `json:"display_name"`
	Icon               string   `json:"icon"`
	SupportedScopes    []string `json:"supported_scopes"`
	RequiredScopes     []string `json:"required_scopes"`
	SupportsPKCE       bool     `json:"supports_pkce"`
	SupportsRefresh    bool     `json:"supports_refresh"`
	SupportsRevocation bool     `json:"supports_revocation"`
}

type ProviderSpecificClient struct {
	*Client
}

type StateData struct {
	Provider  string    `json:"provider"`
	NextURL   string    `json:"next_url,omitempty"`
	UserID    string    `json:"user_id,omitempty"`
	Action    string    `json:"action,omitempty"` // "login", "register", "link"
	Timestamp int64     `json:"timestamp"`
	Nonce     string    `json:"nonce"`
	PKCE      *PKCEData `json:"pkce,omitempty"`
}

type StateManager struct {
	// contains filtered or unexported fields
}

type TokenInfo struct {
	Valid     bool      `json:"valid"`
	ExpiresAt time.Time `json:"expires_at"`
	Scope     string    `json:"scope"`
	ClientID  string    `json:"client_id"`
}

type TokenResponse struct {
	AccessToken  string    `json:"access_token"`
	RefreshToken string    `json:"refresh_token"`
	TokenType    string    `json:"token_type"`
	ExpiresIn    int       `json:"expires_in"`
	Scope        string    `json:"scope"`
	IDToken      string    `json:"id_token,omitempty"`
	ExpiresAt    time.Time `json:"expires_at"`
}