oauth

type ClientInfo struct {
	Name     string   `json:"name"`
	ClientID string   `json:"client_id"`
	Scopes   []string `json:"scopes"`
}

type MetadataHandlerConfig struct {
	ResourceName         string
	ResourceURL          string
	AuthorizationServers []string
	// ScopesSupported is advertised as scopes_supported in the protected-resource
	// metadata (RFC 9728). MCP clients prefer this list over the authorization
	// server's scopes_supported — critical when the AS (e.g. Cognito) advertises
	// pool-level scopes that a specific app client doesn't allow.
	ScopesSupported []string
	Clients         []ClientInfo
	SecurityEnabled bool
	Logger          *slog.Logger
}

type ProtectedResourceMetadata struct {
	ResourceName              string       `json:"resource_name"`
	Resource                  string       `json:"resource"`
	AuthorizationServers      []string     `json:"authorization_servers"`
	BearerMethodsSupported    []string     `json:"bearer_methods_supported"`
	ScopesSupported           []string     `json:"scopes_supported"`
	OpenChoreoClients         []ClientInfo `json:"openchoreo_clients,omitempty"`
	OpenChoreoSecurityEnabled bool         `json:"openchoreo_security_enabled"`
}