client

type BaseClient struct {
	Issuer     string
	Endpoints  Endpoints
	HTTPClient *http.Client
}

type ClientAuthMethod int

type ClientCredentialsBuilder struct {
	ClientID     string
	ClientSecret string
	Signer       *crypto.Signer
	Issuer       string
	Scopes       []string
}

type ClientSecretBasicAuthRequest interface {
	Auth(req *http.Request)
}

type DeviceAccessTokenRequest struct {
	*protocol.ClientCredentialsRequest
	protocol.DeviceAccessTokenRequest
}

type DeviceAuthorizationCaller interface {
	GetDeviceAuthorizationEndpoint() string
	HttpClient() *http.Client
}

type EndSessionCaller interface {
	GetEndSessionEndpoint() string
	HttpClient() *http.Client
}

type Endpoints struct {
	// OAuth2 endpoints
	AuthURL  string
	TokenURL string

	// OIDC endpoints
	IntrospectionURL       string
	UserinfoURL            string
	JWKSURL                string
	EndSessionURL          string
	RevocationURL          string
	DeviceAuthorizationURL string
	PushedAuthRequestURL   string

	// AuthStyle for token endpoint
	AuthStyle oauth2.AuthStyle
}

type IntrospectionCaller interface {
	IntrospectionURL() string
	HttpClient() *http.Client
}

type KeyFile struct {
	Type   string `json:"type"` // serviceaccount or application
	KeyID  string `json:"keyId"`
	Key    string `json:"key"`
	Issuer string `json:"issuer"` // not yet in file

	// serviceaccount
	UserID string `json:"userId"`

	// application
	ClientID string `json:"clientId"`
}

type RevokeCaller interface {
	GetRevokeEndpoint() string
	HttpClient() *http.Client
}

type RevokeRequest struct {
	Token         string `schema:"token"`
	TokenTypeHint string `schema:"token_type_hint"`
	ClientID      string `schema:"client_id"`
	ClientSecret  string `schema:"client_secret"`
}

type TokenEndpointCaller interface {
	TokenEndpoint() string
	HttpClient() *http.Client
}