sessions

type Lock interface {
	// Obtain obtains the lock on the distributed
	// lock resource if no lock exists yet.
	// Otherwise it will return ErrLockNotObtained
	Obtain(ctx context.Context, expiration time.Duration) error
	// Peek returns true if the lock currently exists
	// Otherwise it returns false.
	Peek(ctx context.Context) (bool, error)
	// Refresh refreshes the expiration time of the lock,
	// if is still applied.
	// Otherwise it will return ErrNotLocked
	Refresh(ctx context.Context, expiration time.Duration) error
	// Release removes the existing lock,
	// Otherwise it will return ErrNotLocked
	Release(ctx context.Context) error
}

type NoOpLock struct{}

type SessionState struct {
	CreatedAt *time.Time `json:"ca,omitempty"`
	ExpiresOn *time.Time `json:"eo,omitempty"`

	AccessToken  string `json:"at,omitempty"`
	IDToken      string `json:"it,omitempty"`
	RefreshToken string `json:"rt,omitempty"`

	Nonce []byte `json:"n,omitempty"`

	Email             string   `json:"e,omitempty"`
	User              string   `json:"u,omitempty"`
	Groups            []string `json:"g,omitempty"`
	PreferredUsername string   `json:"pu,omitempty"`

	// Internal helpers, not serialized
	Clock clock.Clock `json:"-"`
	Lock  Lock        `json:"-"`
}

type SessionStore interface {
	Save(rw http.ResponseWriter, req *http.Request, s *SessionState) error
	Load(req *http.Request) (*SessionState, error)
	Clear(rw http.ResponseWriter, req *http.Request) error
	VerifyConnection(ctx context.Context) error
}