oidc

type AuthCodeFlowOpts struct {
	OAuth2Config oauth2.Config

	// Hostname of the redirect URL.
	// You can set this if your provider does not accept localhost.
	// Default to localhost.
	RedirectURLHostname string
	// Options for an authorization request.
	// You can set oauth2.AccessTypeOffline and the PKCE options here.
	AuthCodeOptions []oauth2.AuthCodeOption
	// Options for a token request.
	// You can set the PKCE options here.
	TokenRequestOptions []oauth2.AuthCodeOption
	// State parameter in the authorization request.
	// Default to a string of random 32 bytes.
	State string

	// Candidates of hostname and port which the local server binds to.
	// You can set port number to 0 to allocate a free port.
	// If multiple addresses are given, it will try the ports in order.
	// If nil or an empty slice is given, it defaults to "127.0.0.1:0" i.e. a free port.
	LocalServerBindAddress []string

	// Response HTML body on authorization completed.
	// Default to DefaultLocalServerSuccessHTML.
	LocalServerSuccessHTML string
	// Middleware for the local server. Default to none.
	LocalServerMiddleware func(h http.Handler) http.Handler
	// A channel to send its URL when the local server is ready. Default to none.
	LocalServerReadyChan chan<- string

	// Redirect URL upon successful login
	SuccessRedirectURL string
	// Redirect URL upon failed login
	FailureRedirectURL string

	Logf func(string, ...any)
}

type Client interface {
	ClientSecret() string
	SetClientSecret(s string)
	SupportedPKCEMethods() []string
	GetTokenByAuthCode(
		ctx context.Context,
		opts GetTokenByAuthCodeOpts,
		localServerReadyChan chan<- string,
	) (*Token, error)
	GetTokenByPassword(ctx context.Context, username string, password string) (*Token, error)
	DeviceAuth(ctx context.Context) (*oauth2.DeviceAuthResponse, error)
	GetTokenByDeviceCode(ctx context.Context, resp *oauth2.DeviceAuthResponse) (*Token, error)
	GetTokenByDeviceCodeManual(ctx context.Context, resp *oauth2.DeviceAuthResponse) (*Token, error)
	GetTokenByClientCredentials(ctx context.Context) (*Token, error)
	Refresh(ctx context.Context, refreshToken string) (*Token, error)
}

type Clock interface {
	Now() time.Time
}

type Config struct {
	IssuerURL    string
	ClientID     string
	ClientSecret string   // optional
	ExtraScopes  []string // optional
	UsePKCE      bool     // optional
}

type GetTokenByAuthCodeOpts struct {
	BindAddress            []string
	State                  string
	Nonce                  string
	PKCEParams             pkce.Params
	RedirectURLHostname    string
	AuthRequestExtraParams map[string]string
	LocalServerSuccessHTML string
}

type Listener struct {

	// URL to the listener.
	// This is always "http://localhost:PORT" regardless of the listening address.
	URL *url.URL
	// contains filtered or unexported fields
}

type NoAvailablePortError interface {
	error

	// Return the array of errors.
	// You can unwrap the error to check the root cause.
	Causes() []error
}

type OIDCClient struct {
	// contains filtered or unexported fields
}

type Option func(*option)

type Token struct {
	IDToken      string
	AccessToken  string
	RefreshToken string
}

type Transport struct {
	Base   http.RoundTripper
	Logger logger.LogWriter
}