authz

type ProviderConfig struct {
	Config        map[string]any
	UsernameClaim string
	GroupsClaim   string
	ClientIDClaim string
}

type RoleProvider interface {
	Roles(ctx context.Context, token jwt.Token, req RoleRequest) ([]string, error)
}

type RoleProviderFactory func(ctx context.Context, cfg ProviderConfig) (RoleProvider, error)

type RoleRequest struct {
	Issuer   string
	Resource string
	Action   string
}