oauth

type CertExchangeInfo struct {
	HTTPClient *http.Client
	Audience   []string
}

type ClientCredentials struct {
	ClientAuth interface{} // the supported types for this are a JWK (implying jwt-bearer auth) or a string (implying client secret auth)
	ClientID   string
}

type Token struct {
	AccessToken      string        `json:"access_token"`
	TokenType        string        `json:"token_type"`
	ExpiresIn        int64         `json:"expires_in,omitempty"`
	Scope            string        `json:"scope,omitempty"`
	ExpirationBuffer time.Duration `json:"-"`
	// contains filtered or unexported fields
}

type TokenExchangeInfo struct {
	SubjectToken string
	// SubjectTokenType declares the type of SubjectToken per RFC 8693 §2.1.
	// Defaults to urn:ietf:params:oauth:token-type:access_token when empty.
	SubjectTokenType string
	Audience         []string
}