iam

type AccessToken struct {
	// DPoP is the proof-of-possession of the key for the DID of the entity requesting the access token.
	DPoP *dpop.DPoP `json:"dpop"`
	// Token is the access token
	Token string `json:"token"`
	// Issuer and Subject of a token are always the same.
	Issuer string `json:"issuer"`
	// TODO: should client_id be extracted to the PDPMap using the presentation definition?
	// ClientId is the DID of the entity requesting the access token. The Client needs to proof its id through proof-of-possession of the key for the DID.
	ClientId string `json:"client_id"`
	// IssuedAt is the time the token is issued
	IssuedAt time.Time `json:"issued_at"`
	// Expiration is the time the token expires
	Expiration time.Time `json:"expiration"`
	// Scope the token grants access to. Not necessarily the same as the requested scope
	Scope string `json:"scope"`
	// InputDescriptorConstraintIdMap maps the ID field of a PresentationDefinition input descriptor constraint to the value provided in the VPToken for the constraint.
	// The Policy Decision Point can use this map to make decisions without having to deal with PEX/VCs/VPs/SignatureValidation
	InputDescriptorConstraintIdMap map[string]any `json:"inputdescriptor_constraint_id_map,omitempty"`

	// VPToken contains the VPs provided in the 'assertion' field of the s2s AT request.
	VPToken []VerifiablePresentation `json:"vp_token,omitempty"`
	// PresentationSubmissions as provided in by the wallet to fulfill the required Presentation Definition(s).
	PresentationSubmissions map[string]pe.PresentationSubmission `json:"presentation_submissions,omitempty"`
	// PresentationDefinitions that were required by the verifier to fulfill the request.
	PresentationDefinitions pe.WalletOwnerMapping `json:"presentation_definitions,omitempty"`
}

type Callback302Response struct {
	Headers Callback302ResponseHeaders
}

type Callback302ResponseHeaders struct {
	Location string
}

type CallbackParams struct {
	// Code The authorization code received from the authorization server.
	Code *string `form:"code,omitempty" json:"code,omitempty"`

	// State The client state.
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// Error The error code.
	Error *string `form:"error,omitempty" json:"error,omitempty"`

	// ErrorDescription The error description.
	ErrorDescription *string `form:"error_description,omitempty" json:"error_description,omitempty"`
}

type CallbackRequestObject struct {
	SubjectID string `json:"subjectID"`
	Params    CallbackParams
}

type CallbackResponseObject interface {
	VisitCallbackResponse(w http.ResponseWriter) error
}

type CallbackdefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type Cnf struct {
	// Jkt JWK thumbprint
	Jkt string `json:"jkt"`
}

type CreateDPoPProof200JSONResponse DPoPResponse

type CreateDPoPProof401Response struct {
}

type CreateDPoPProofJSONRequestBody = DPoPRequest

type CreateDPoPProofRequestObject struct {
	Kid  string `json:"kid"`
	Body *CreateDPoPProofJSONRequestBody
}

type CreateDPoPProofResponseObject interface {
	VisitCreateDPoPProofResponse(w http.ResponseWriter) error
}

type DIDDocument = did.Document

type DIDDocumentMetadata = resolver.DocumentMetadata

type DPoPRequest struct {
	// Htm The HTTP method for which the DPoP proof is requested.
	Htm string `json:"htm"`

	// Htu The URL for which the DPoP proof is requested. Query params and fragments are ignored during validation.
	Htu string `json:"htu"`

	// Token The access token for which the DPoP proof is requested.
	Token string `json:"token"`
}

type DPoPResponse struct {
	// Dpop The DPoP proof as specified by https://datatracker.ietf.org/doc/html/rfc9449 for resource requests
	Dpop string `json:"dpop"`
}

type DPoPValidateRequest struct {
	// DpopProof The DPoP Proof as specified by https://datatracker.ietf.org/doc/html/rfc9449 for resource requests
	DpopProof string `json:"dpop_proof"`

	// Method The HTTP method against which the DPoP proof is validated.
	Method string `json:"method"`

	// Thumbprint The thumbprint of the public key used to sign the DPoP proof. Base64url encoded, no padding.
	Thumbprint string `json:"thumbprint"`

	// Token The access token against which the DPoP proof is validated.
	Token string `json:"token"`

	// Url The URL against which the DPoP proof is validated. Query params and fragments are ignored during validation.
	Url string `json:"url"`
}

type DPoPValidateResponse struct {
	// Reason The reason why the DPoP Proof header is invalid.
	Reason *string `json:"reason,omitempty"`

	// Valid True if the DPoP Proof header is valid for the access token and HTTP request, false if it is not.
	Valid bool `json:"valid"`
}

type EchoRouter interface {
	CONNECT(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	DELETE(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	GET(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	HEAD(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	OPTIONS(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	PATCH(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	POST(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	PUT(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
	TRACE(path string, h echo.HandlerFunc, m ...echo.MiddlewareFunc) *echo.Route
}

type ErrorResponse = oauth.OAuth2Error

type ExtendedTokenIntrospectionResponse struct {
	// Active True if the token is active, false if the token is expired, malformed etc. Required per RFC7662
	Active bool `json:"active"`

	// Aud RFC7662 - Service-specific string identifier or list of string identifiers representing the intended audience for this token, as defined in JWT [RFC7519].
	Aud *string `json:"aud,omitempty"`

	// ClientId The client identity the access token was issued to. Since the Verifiable Presentation is used to grant access, the client_id reflects the client_id in the access token request.
	ClientId *string `json:"client_id,omitempty"`

	// Cnf The 'confirmation' claim is used in JWTs to proof the possession of a key.
	Cnf *Cnf `json:"cnf,omitempty"`

	// Exp Expiration date in seconds since UNIX epoch
	Exp *int `json:"exp,omitempty"`

	// Iat Issuance time in seconds since UNIX epoch
	Iat *int `json:"iat,omitempty"`

	// Iss Issuer URL of the authorizer.
	Iss *string `json:"iss,omitempty"`

	// PresentationDefinitions Presentation Definitions, as described in Presentation Exchange specification, fulfilled to obtain the access token
	// The map key is the wallet owner (user/organization)
	PresentationDefinitions *RequiredPresentationDefinitions `json:"presentation_definitions,omitempty"`

	// PresentationSubmissions Mapping of Presentation Definition IDs that were fulfilled to Presentation Submissions.
	PresentationSubmissions *map[string]PresentationSubmission `json:"presentation_submissions,omitempty"`

	// Scope granted scopes
	Scope                *string                   `json:"scope,omitempty"`
	Vps                  *[]VerifiablePresentation `json:"vps,omitempty"`
	AdditionalProperties map[string]interface{}    `json:"-"`
}

type HandleAuthorizeRequest200TexthtmlResponse struct {
	Body          io.Reader
	ContentLength int64
}

type HandleAuthorizeRequest302Response struct {
	Headers HandleAuthorizeRequest302ResponseHeaders
}

type HandleAuthorizeRequest302ResponseHeaders struct {
	Location string
}

type HandleAuthorizeRequestParams struct {
	Params *map[string]string `form:"params,omitempty" json:"params,omitempty"`
}

type HandleAuthorizeRequestRequestObject struct {
	SubjectID string `json:"subjectID"`
	Params    HandleAuthorizeRequestParams
}

type HandleAuthorizeRequestResponseObject interface {
	VisitHandleAuthorizeRequestResponse(w http.ResponseWriter) error
}

type HandleAuthorizeResponse200JSONResponse RedirectResponse

type HandleAuthorizeResponseFormdataBody struct {
	// Error error code as defined by the OAuth2 specification
	Error *string `form:"error,omitempty" json:"error,omitempty"`

	// ErrorDescription error description as defined by the OAuth2 specification
	ErrorDescription       *string `form:"error_description,omitempty" json:"error_description,omitempty"`
	PresentationSubmission *string `form:"presentation_submission,omitempty" json:"presentation_submission,omitempty"`

	// State the client state for the verifier
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// VpToken A Verifiable Presentation in either JSON-LD or JWT format.
	VpToken *string `form:"vp_token,omitempty" json:"vp_token,omitempty"`
}

type HandleAuthorizeResponseFormdataRequestBody HandleAuthorizeResponseFormdataBody

type HandleAuthorizeResponseRequestObject struct {
	SubjectID string `json:"subjectID"`
	Body      *HandleAuthorizeResponseFormdataRequestBody
}

type HandleAuthorizeResponseResponseObject interface {
	VisitHandleAuthorizeResponseResponse(w http.ResponseWriter) error
}

type HandleTokenRequest200JSONResponse TokenResponse

type HandleTokenRequestFormdataBody struct {
	Assertion              *string `form:"assertion,omitempty" json:"assertion,omitempty"`
	ClientId               *string `form:"client_id,omitempty" json:"client_id,omitempty"`
	Code                   *string `form:"code,omitempty" json:"code,omitempty"`
	CodeVerifier           *string `form:"code_verifier,omitempty" json:"code_verifier,omitempty"`
	GrantType              string  `form:"grant_type" json:"grant_type"`
	PresentationSubmission *string `form:"presentation_submission,omitempty" json:"presentation_submission,omitempty"`
	Scope                  *string `form:"scope,omitempty" json:"scope,omitempty"`
}

type HandleTokenRequestFormdataRequestBody HandleTokenRequestFormdataBody

type HandleTokenRequestRequestObject struct {
	SubjectID string `json:"subjectID"`
	Body      *HandleTokenRequestFormdataRequestBody
}

type HandleTokenRequestResponseObject interface {
	VisitHandleTokenRequestResponse(w http.ResponseWriter) error
}

type HandleTokenRequestdefaultJSONResponse struct {
	Body       ErrorResponse
	StatusCode int
}

type IntrospectAccessToken200JSONResponse TokenIntrospectionResponse

type IntrospectAccessToken401Response struct {
}

type IntrospectAccessTokenExtended200JSONResponse ExtendedTokenIntrospectionResponse

type IntrospectAccessTokenExtended401Response struct {
}

type IntrospectAccessTokenExtendedFormdataRequestBody = TokenIntrospectionRequest

type IntrospectAccessTokenExtendedRequestObject struct {
	Body *IntrospectAccessTokenExtendedFormdataRequestBody
}

type IntrospectAccessTokenExtendedResponseObject interface {
	VisitIntrospectAccessTokenExtendedResponse(w http.ResponseWriter) error
}

type IntrospectAccessTokenFormdataRequestBody = TokenIntrospectionRequest

type IntrospectAccessTokenRequestObject struct {
	Body *IntrospectAccessTokenFormdataRequestBody
}

type IntrospectAccessTokenResponseObject interface {
	VisitIntrospectAccessTokenResponse(w http.ResponseWriter) error
}

type JAR interface {
	// Create an unsigned request object.
	// By default, it adds the following parameters:
	//  - client_id
	//  - iss
	//  - aud (if not nil)
	// the request_uri_method is determined by the presence of an audience (get) or not (post)
	Create(client did.DID, clientID string, audience string, modifier requestObjectModifier) jarRequest
	// Sign the jarRequest, which is available on jarRequest.Token.
	// Returns an error if the jarRequest already contains a signed JWT.
	// TODO: check if signature type of client is supported by the AS/wallet.
	Sign(ctx context.Context, claims oauthParameters) (string, error)
	// Parse and validate an incoming authorization request.
	// Requests that do not conform to RFC9101 or OpenID4VP result in an error.
	// The ownMetadata parameter is used when the request contains a request_uri, and it is fetched using HTTP POST;
	// in that case, the metadata is posted to the Authorization Server.
	Parse(ctx context.Context, ownMetadata oauth.AuthorizationServerMetadata, q url.Values) (oauthParameters, error)
}

type MockJAR struct {
	// contains filtered or unexported fields
}

type MockJARMockRecorder struct {
	// contains filtered or unexported fields
}

type OAuthAuthorizationServerMetadata = oauth.AuthorizationServerMetadata

type OAuthAuthorizationServerMetadata200JSONResponse OAuthAuthorizationServerMetadata

type OAuthAuthorizationServerMetadataRequestObject struct {
	SubjectID string `json:"subjectID"`
}

type OAuthAuthorizationServerMetadataResponseObject interface {
	VisitOAuthAuthorizationServerMetadataResponse(w http.ResponseWriter) error
}

type OAuthAuthorizationServerMetadatadefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type OAuthClientMetadata = oauth.OAuthClientMetadata

type OAuthClientMetadata200JSONResponse OAuthClientMetadata

type OAuthClientMetadataRequestObject struct {
	SubjectID string `json:"subjectID"`
}

type OAuthClientMetadataResponseObject interface {
	VisitOAuthClientMetadataResponse(w http.ResponseWriter) error
}

type OAuthClientMetadatadefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type OAuthSession struct {
	AuthorizationServerMetadata *oauth.AuthorizationServerMetadata `json:"authorization_server_metadata,omitempty"`
	ClientFlow                  oauthClientFlow                    `json:"client_flow,omitempty"`
	ClientID                    string                             `json:"client_id,omitempty"`
	ClientState                 string                             `json:"client_state,omitempty"`
	OpenID4VPVerifier           *PEXConsumer                       `json:"openid4vp_verifier,omitempty"`
	OwnSubject                  *string                            `json:"own_subject,omitempty"`
	// OwnDID is the DID of the entity that owns this session, which must be a DID of the subject (OwnSubject).
	// It is used in OpenID4VCI to select the target wallet.
	OwnDID        *did.DID   `json:"own_did,omitempty"`
	OtherDID      *did.DID   `json:"other_did,omitempty"`
	PKCEParams    PKCEParams `json:"pkce_params"`
	RedirectURI   string     `json:"redirect_uri,omitempty"`
	Scope         string     `json:"scope,omitempty"`
	SessionID     string     `json:"session_id,omitempty"`
	TokenEndpoint string     `json:"token_endpoint,omitempty"`
	// IssuerURL is the URL that identifies the OAuth2 Authorization Server according to RFC 8414 (Authorization Server Metadata).
	IssuerURL string `json:"issuer_url,omitempty"`
	UseDPoP   bool   `json:"use_dpop,omitempty"`
	// IssuerCredentialEndpoint: endpoint to exchange the access_token for a credential in the OpenID4VCI flow
	IssuerCredentialEndpoint string `json:"issuer_credential_endpoint,omitempty"`
}

type OpenIDConfiguration = map[string]interface{}

type OpenIDConfiguration200ApplicationentityStatementJwtResponse struct {
	Body          io.Reader
	ContentLength int64
}

type OpenIDConfigurationRequestObject struct {
	SubjectID string `json:"subjectID"`
}

type OpenIDConfigurationResponseObject interface {
	VisitOpenIDConfigurationResponse(w http.ResponseWriter) error
}

type OpenIDConfigurationdefaultJSONResponse struct {
	Body       ErrorResponse
	StatusCode int
}

type PEXConsumer struct {
	RequiredPresentationDefinitions pe.WalletOwnerMapping `json:"required_presentations"`
	// Submissions tracks which Submissions have been submitted through OpenID4VP
	Submissions map[string]pe.PresentationSubmission `json:"submissions"`
	// SubmittedEnvelopes tracks the Presentation Exchange Envelopes that were submitted.
	// They correspond to the submissions.
	SubmittedEnvelopes map[string]pe.Envelope `json:"submitted_envelopes"`
}

type PKCEParams struct {
	Challenge       string
	ChallengeMethod string
	Verifier        string
}

type PresentationDefinition = pe.PresentationDefinition

type PresentationDefinition200JSONResponse PresentationDefinition

type PresentationDefinitionParams struct {
	Scope           string           `form:"scope" json:"scope"`
	WalletOwnerType *WalletOwnerType `form:"wallet_owner_type,omitempty" json:"wallet_owner_type,omitempty"`
}

type PresentationDefinitionRequestObject struct {
	SubjectID string `json:"subjectID"`
	Params    PresentationDefinitionParams
}

type PresentationDefinitionResponseObject interface {
	VisitPresentationDefinitionResponse(w http.ResponseWriter) error
}

type PresentationDefinitiondefaultJSONResponse struct {
	Body       ErrorResponse
	StatusCode int
}

type PresentationSubmission = pe.PresentationSubmission

type RedirectResponse = oauth.Redirect

type RedirectResponseWithID struct {
	// RedirectUri The URL to which the user-agent will be redirected after the authorization request.
	RedirectUri string `json:"redirect_uri"`

	// SessionId The session ID that can be used to retrieve the access token by the calling application.
	SessionId string `json:"session_id"`
}

type RedirectSession struct {
	AccessTokenRequest RequestUserAccessTokenRequestObject
	// SessionID is used by the calling app to get the access token later on
	SessionID string
	SubjectID string
}

type RequestJWTByGet200ApplicationoauthAuthzReqJwtResponse struct {
	Body          io.Reader
	ContentLength int64
}

type RequestJWTByGetRequestObject struct {
	SubjectID string `json:"subjectID"`
	Id        string `json:"id"`
}

type RequestJWTByGetResponseObject interface {
	VisitRequestJWTByGetResponse(w http.ResponseWriter) error
}

type RequestJWTByGetdefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type RequestJWTByPost200ApplicationoauthAuthzReqJwtResponse struct {
	Body          io.Reader
	ContentLength int64
}

type RequestJWTByPostFormdataBody struct {
	// WalletMetadata OAuth2 Authorization Server Metadata
	// Contain properties from several specifications and may grow over time
	WalletMetadata *OAuthAuthorizationServerMetadata `form:"wallet_metadata,omitempty" json:"wallet_metadata,omitempty"`

	// WalletNonce A String value used to mitigate replay attacks of the Authorization Request.
	// When received, the Verifier MUST use it as the wallet_nonce value in the signed authorization request object.
	WalletNonce *string `form:"wallet_nonce,omitempty" json:"wallet_nonce,omitempty"`
}

type RequestJWTByPostFormdataRequestBody RequestJWTByPostFormdataBody

type RequestJWTByPostRequestObject struct {
	SubjectID string `json:"subjectID"`
	Id        string `json:"id"`
	Body      *RequestJWTByPostFormdataRequestBody
}

type RequestJWTByPostResponseObject interface {
	VisitRequestJWTByPostResponse(w http.ResponseWriter) error
}

type RequestJWTByPostdefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type RequestObjectResponse = string

type RequestOpenid4VCICredentialIssuance200JSONResponse RedirectResponse

type RequestOpenid4VCICredentialIssuanceJSONBody struct {
	AuthorizationDetails []map[string]interface{} `json:"authorization_details"`

	// Issuer The OAuth Authorization Server's identifier, that issues the Verifiable Credentials, as specified in RFC 8414 (section 2),
	// used to locate the OAuth2 Authorization Server metadata.
	Issuer string `json:"issuer"`

	// RedirectUri The URL to which the user-agent will be redirected after the authorization request.
	RedirectUri string `json:"redirect_uri"`

	// WalletDid The DID to which the Verifiable Credential must be issued. Must be owned by the given subject.
	WalletDid string `json:"wallet_did"`
}

type RequestOpenid4VCICredentialIssuanceJSONRequestBody RequestOpenid4VCICredentialIssuanceJSONBody

type RequestOpenid4VCICredentialIssuanceRequestObject struct {
	SubjectID string `json:"subjectID"`
	Body      *RequestOpenid4VCICredentialIssuanceJSONRequestBody
}

type RequestOpenid4VCICredentialIssuanceResponseObject interface {
	VisitRequestOpenid4VCICredentialIssuanceResponse(w http.ResponseWriter) error
}

type RequestOpenid4VCICredentialIssuancedefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type RequestServiceAccessToken200JSONResponse TokenResponse

type RequestServiceAccessTokenJSONRequestBody = ServiceAccessTokenRequest

type RequestServiceAccessTokenParams struct {
	// CacheControl Access tokens are cached by the Nuts node, specify Cache-Control: no-cache to bypass the cache.
	// This forces the Nuts node to request a new access token from the authorizer.
	//
	// A valid use case for this is when the Resource Server rejects the access token with 401 Unauthorized.
	// It could be that the Authorization Server lost the access token due to a server restart,
	// in combination with (non-recommended) usage of in-memory session storage.
	// The local Nuts node then still considers the token valid, while the Authorization Server does not.
	//
	// Note that this should not be used under normal circumstances, as it will increase round trip time and load on both the requester and authorizer.
	CacheControl *string `json:"Cache-Control,omitempty"`
}

type RequestServiceAccessTokenRequestObject struct {
	SubjectID string `json:"subjectID"`
	Params    RequestServiceAccessTokenParams
	Body      *RequestServiceAccessTokenJSONRequestBody
}

type RequestServiceAccessTokenResponseObject interface {
	VisitRequestServiceAccessTokenResponse(w http.ResponseWriter) error
}

type RequestServiceAccessTokendefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type RequestUserAccessToken200JSONResponse RedirectResponseWithID

type RequestUserAccessTokenJSONRequestBody = UserAccessTokenRequest

type RequestUserAccessTokenRequestObject struct {
	SubjectID string `json:"subjectID"`
	Body      *RequestUserAccessTokenJSONRequestBody
}

type RequestUserAccessTokenResponseObject interface {
	VisitRequestUserAccessTokenResponse(w http.ResponseWriter) error
}

type RequestUserAccessTokendefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type RequiredPresentationDefinitions = pe.WalletOwnerMapping

type RetrieveAccessToken200JSONResponse TokenResponse

type RetrieveAccessTokenRequestObject struct {
	SessionID string `json:"sessionID"`
}

type RetrieveAccessTokenResponseObject interface {
	VisitRetrieveAccessTokenResponse(w http.ResponseWriter) error
}

type RetrieveAccessTokendefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type ServerInterface interface {
	// Get the OAuth2 Authorization Server metadata for the specified subject.
	// (GET /.well-known/oauth-authorization-server/oauth2/{subjectID})
	OAuthAuthorizationServerMetadata(ctx echo.Context, subjectID string) error
	// Get the OpenID entity configuration for the specified subject. Required for OpenID4VP.
	// (GET /.well-known/openid-configuration/oauth2/{subjectID})
	OpenIDConfiguration(ctx echo.Context, subjectID string) error
	// Introspection endpoint to retrieve information from an Access Token as described by RFC7662.
	// It returns fields derived from the credentials that were used during authentication.
	// (POST /internal/auth/v2/accesstoken/introspect)
	IntrospectAccessToken(ctx echo.Context) error
	// Introspection endpoint to retrieve information from an Access Token as described by RFC7662.
	// It returns the same information as the non-extended API call, but with the Presentation Definitions,
	// Presentation Submissions and Verifiable Presentations added.
	// (POST /internal/auth/v2/accesstoken/introspect_extended)
	IntrospectAccessTokenExtended(ctx echo.Context) error
	// Get the access token from the Nuts node that was requested through /request-user-access-token.
	// (GET /internal/auth/v2/accesstoken/{sessionID})
	RetrieveAccessToken(ctx echo.Context, sessionID string) error
	// Handle some of the validation of a DPoP proof as specified by RFC9449.
	// (POST /internal/auth/v2/dpop/validate)
	ValidateDPoPProof(ctx echo.Context) error
	// Create a DPoP proof as specified by RFC9449 for a given access token. It is to be used as HTTP header when accessing resources.
	// (POST /internal/auth/v2/dpop/{kid})
	CreateDPoPProof(ctx echo.Context, kid string) error
	// EXPERIMENTAL Start the Oid4VCI authorization flow.
	// (POST /internal/auth/v2/{subjectID}/request-credential)
	RequestOpenid4VCICredentialIssuance(ctx echo.Context, subjectID string) error
	// Start the authorization flow to get an access token from a remote authorization server.
	// (POST /internal/auth/v2/{subjectID}/request-service-access-token)
	RequestServiceAccessToken(ctx echo.Context, subjectID string, params RequestServiceAccessTokenParams) error
	// EXPERIMENTAL Start the authorization code flow to get an access token from a remote authorization server when user context is required.
	// (POST /internal/auth/v2/{subjectID}/request-user-access-token)
	RequestUserAccessToken(ctx echo.Context, subjectID string) error
	// Used by resource owners (the browser) to initiate the authorization code flow.
	// (GET /oauth2/{subjectID}/authorize)
	HandleAuthorizeRequest(ctx echo.Context, subjectID string, params HandleAuthorizeRequestParams) error
	// The OAuth2 callback endpoint of the client.
	// (GET /oauth2/{subjectID}/callback)
	Callback(ctx echo.Context, subjectID string, params CallbackParams) error
	// Get the OAuth2 Client metadata
	// (GET /oauth2/{subjectID}/oauth-client)
	OAuthClientMetadata(ctx echo.Context, subjectID string) error
	// Used by relying parties to obtain a presentation definition for desired scopes as specified by Nuts RFC021.
	// (GET /oauth2/{subjectID}/presentation_definition)
	PresentationDefinition(ctx echo.Context, subjectID string, params PresentationDefinitionParams) error
	// Get Request Object referenced in an authorization request to the Authorization Server.
	// (GET /oauth2/{subjectID}/request.jwt/{id})
	RequestJWTByGet(ctx echo.Context, subjectID string, id string) error
	// Provide missing information to Client to finish Authorization request's Request Object, which is then returned.
	// (POST /oauth2/{subjectID}/request.jwt/{id})
	RequestJWTByPost(ctx echo.Context, subjectID string, id string) error
	// Used by wallets to post the authorization response or error to.
	// (POST /oauth2/{subjectID}/response)
	HandleAuthorizeResponse(ctx echo.Context, subjectID string) error
	// Used by the OAuth2 client (backend, not the browser) to request access- or refresh tokens.
	// (POST /oauth2/{subjectID}/token)
	HandleTokenRequest(ctx echo.Context, subjectID string) error
	// Get the StatusList2021Credential for the given DID and page
	// (GET /statuslist/{did}/{page})
	StatusList(ctx echo.Context, did string, page int) error
}

type ServerInterfaceWrapper struct {
	Handler ServerInterface
}

type ServerState struct {
	CredentialMap          map[string]vc.VerifiableCredential
	Presentations          []vc.VerifiablePresentation
	PresentationSubmission *pe.PresentationSubmission
}

type ServiceAccessTokenRequest struct {
	// AuthorizationServer The OAuth Authorization Server's identifier as specified in RFC 8414 (section 2),
	// used to locate the OAuth2 Authorization Server metadata.
	AuthorizationServer string `json:"authorization_server"`

	// Credentials Additional credentials to present (if required by the authorizer), in addition to those in the requester's wallet.
	// They must be in the form of a Verifiable Credential in JSON form.
	// The serialized form (JWT or JSON-LD) in the resulting Verifiable Presentation depends on the capability of the authorizing party.
	// A typical use case is to provide a self-attested credential to convey information about the user that initiated the request.
	//
	// The following credential fields are automatically filled (when not present), and may be omitted:
	// - issuer, credentialSubject.id (MUST be omitted; filled with the DID of the requester)
	// - issuanceDate (filled with the current date/time)
	// - id (filled with a UUID)
	// - proof/signature (MUST be omitted; integrity protection is covered by the VP's proof/signature)
	Credentials *[]VerifiableCredential `json:"credentials,omitempty"`

	// Scope The scope that will be the service for which this access token can be used.
	Scope string `json:"scope"`

	// TokenType The type of access token that is preferred, default: DPoP
	TokenType *ServiceAccessTokenRequestTokenType `json:"token_type,omitempty"`
}

type ServiceAccessTokenRequestTokenType string

type StatusList200JSONResponse VerifiableCredential

type StatusListRequestObject struct {
	Did  string `json:"did"`
	Page int    `json:"page"`
}

type StatusListResponseObject interface {
	VisitStatusListResponse(w http.ResponseWriter) error
}

type StatusListdefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type StrictHandlerFunc = strictecho.StrictEchoHandlerFunc

type StrictMiddlewareFunc = strictecho.StrictEchoMiddlewareFunc

type StrictServerInterface interface {
	// Get the OAuth2 Authorization Server metadata for the specified subject.
	// (GET /.well-known/oauth-authorization-server/oauth2/{subjectID})
	OAuthAuthorizationServerMetadata(ctx context.Context, request OAuthAuthorizationServerMetadataRequestObject) (OAuthAuthorizationServerMetadataResponseObject, error)
	// Get the OpenID entity configuration for the specified subject. Required for OpenID4VP.
	// (GET /.well-known/openid-configuration/oauth2/{subjectID})
	OpenIDConfiguration(ctx context.Context, request OpenIDConfigurationRequestObject) (OpenIDConfigurationResponseObject, error)
	// Introspection endpoint to retrieve information from an Access Token as described by RFC7662.
	// It returns fields derived from the credentials that were used during authentication.
	// (POST /internal/auth/v2/accesstoken/introspect)
	IntrospectAccessToken(ctx context.Context, request IntrospectAccessTokenRequestObject) (IntrospectAccessTokenResponseObject, error)
	// Introspection endpoint to retrieve information from an Access Token as described by RFC7662.
	// It returns the same information as the non-extended API call, but with the Presentation Definitions,
	// Presentation Submissions and Verifiable Presentations added.
	// (POST /internal/auth/v2/accesstoken/introspect_extended)
	IntrospectAccessTokenExtended(ctx context.Context, request IntrospectAccessTokenExtendedRequestObject) (IntrospectAccessTokenExtendedResponseObject, error)
	// Get the access token from the Nuts node that was requested through /request-user-access-token.
	// (GET /internal/auth/v2/accesstoken/{sessionID})
	RetrieveAccessToken(ctx context.Context, request RetrieveAccessTokenRequestObject) (RetrieveAccessTokenResponseObject, error)
	// Handle some of the validation of a DPoP proof as specified by RFC9449.
	// (POST /internal/auth/v2/dpop/validate)
	ValidateDPoPProof(ctx context.Context, request ValidateDPoPProofRequestObject) (ValidateDPoPProofResponseObject, error)
	// Create a DPoP proof as specified by RFC9449 for a given access token. It is to be used as HTTP header when accessing resources.
	// (POST /internal/auth/v2/dpop/{kid})
	CreateDPoPProof(ctx context.Context, request CreateDPoPProofRequestObject) (CreateDPoPProofResponseObject, error)
	// EXPERIMENTAL Start the Oid4VCI authorization flow.
	// (POST /internal/auth/v2/{subjectID}/request-credential)
	RequestOpenid4VCICredentialIssuance(ctx context.Context, request RequestOpenid4VCICredentialIssuanceRequestObject) (RequestOpenid4VCICredentialIssuanceResponseObject, error)
	// Start the authorization flow to get an access token from a remote authorization server.
	// (POST /internal/auth/v2/{subjectID}/request-service-access-token)
	RequestServiceAccessToken(ctx context.Context, request RequestServiceAccessTokenRequestObject) (RequestServiceAccessTokenResponseObject, error)
	// EXPERIMENTAL Start the authorization code flow to get an access token from a remote authorization server when user context is required.
	// (POST /internal/auth/v2/{subjectID}/request-user-access-token)
	RequestUserAccessToken(ctx context.Context, request RequestUserAccessTokenRequestObject) (RequestUserAccessTokenResponseObject, error)
	// Used by resource owners (the browser) to initiate the authorization code flow.
	// (GET /oauth2/{subjectID}/authorize)
	HandleAuthorizeRequest(ctx context.Context, request HandleAuthorizeRequestRequestObject) (HandleAuthorizeRequestResponseObject, error)
	// The OAuth2 callback endpoint of the client.
	// (GET /oauth2/{subjectID}/callback)
	Callback(ctx context.Context, request CallbackRequestObject) (CallbackResponseObject, error)
	// Get the OAuth2 Client metadata
	// (GET /oauth2/{subjectID}/oauth-client)
	OAuthClientMetadata(ctx context.Context, request OAuthClientMetadataRequestObject) (OAuthClientMetadataResponseObject, error)
	// Used by relying parties to obtain a presentation definition for desired scopes as specified by Nuts RFC021.
	// (GET /oauth2/{subjectID}/presentation_definition)
	PresentationDefinition(ctx context.Context, request PresentationDefinitionRequestObject) (PresentationDefinitionResponseObject, error)
	// Get Request Object referenced in an authorization request to the Authorization Server.
	// (GET /oauth2/{subjectID}/request.jwt/{id})
	RequestJWTByGet(ctx context.Context, request RequestJWTByGetRequestObject) (RequestJWTByGetResponseObject, error)
	// Provide missing information to Client to finish Authorization request's Request Object, which is then returned.
	// (POST /oauth2/{subjectID}/request.jwt/{id})
	RequestJWTByPost(ctx context.Context, request RequestJWTByPostRequestObject) (RequestJWTByPostResponseObject, error)
	// Used by wallets to post the authorization response or error to.
	// (POST /oauth2/{subjectID}/response)
	HandleAuthorizeResponse(ctx context.Context, request HandleAuthorizeResponseRequestObject) (HandleAuthorizeResponseResponseObject, error)
	// Used by the OAuth2 client (backend, not the browser) to request access- or refresh tokens.
	// (POST /oauth2/{subjectID}/token)
	HandleTokenRequest(ctx context.Context, request HandleTokenRequestRequestObject) (HandleTokenRequestResponseObject, error)
	// Get the StatusList2021Credential for the given DID and page
	// (GET /statuslist/{did}/{page})
	StatusList(ctx context.Context, request StatusListRequestObject) (StatusListResponseObject, error)
}

type TokenIntrospectionRequest struct {
	Token string `json:"token"`
}

type TokenIntrospectionResponse = ExtendedTokenIntrospectionResponse

type TokenResponse = oauth.TokenResponse

type UserAccessTokenRequest struct {
	// AuthorizationServer The OAuth Authorization Server's identifier as specified in RFC 8414 (section 2),
	// used to locate the OAuth2 Authorization Server metadata.
	AuthorizationServer string `json:"authorization_server"`

	// PreauthorizedUser Claims about the authorized user.
	PreauthorizedUser *UserDetails `json:"preauthorized_user,omitempty"`

	// RedirectUri The URL to which the user-agent will be redirected after the authorization request.
	// This is the URL of the calling application.
	// The OAuth2 flow will finish at the /callback URL of the node and the node will redirect the user to this redirect_uri.
	RedirectUri string `json:"redirect_uri"`

	// Scope The scope that will be the service for which this access token can be used.
	Scope string `json:"scope"`

	// TokenType The type of access token that is prefered. Supported values: [Bearer, DPoP], default: DPoP
	TokenType *UserAccessTokenRequestTokenType `json:"token_type,omitempty"`
}

type UserAccessTokenRequestTokenType string

type UserDetails struct {
	// Id Machine-readable identifier, uniquely identifying the user in the issuing system.
	Id string `json:"id"`

	// Name Human-readable name of the user.
	Name string `json:"name"`

	// Role Role of the user.
	Role string `json:"role"`
}

type ValidateDPoPProof200JSONResponse DPoPValidateResponse

type ValidateDPoPProofJSONRequestBody = DPoPValidateRequest

type ValidateDPoPProofRequestObject struct {
	Body *ValidateDPoPProofJSONRequestBody
}

type ValidateDPoPProofResponseObject interface {
	VisitValidateDPoPProofResponse(w http.ResponseWriter) error
}

type ValidateDPoPProofdefaultApplicationProblemPlusJSONResponse struct {
	Body struct {
		// Detail A human-readable explanation specific to this occurrence of the problem.
		Detail string `json:"detail"`

		// Status HTTP statuscode
		Status float32 `json:"status"`

		// Title A short, human-readable summary of the problem type.
		Title string `json:"title"`
	}
	StatusCode int
}

type VerifiableCredential = vc.VerifiableCredential

type VerifiablePresentation = vc.VerifiablePresentation

type WalletOwnerType = pe.WalletOwnerType

type Wrapper struct {
	// contains filtered or unexported fields
}