oauthlogin

type AuthorizationErrorResponse struct {
	Code        string
	Description string
}

type AuthorizeFunc func(ctx context.Context, redirectURL string, present func(context.Context, string) (Result, error)) error

type BrowserLauncher interface {
	Open(context.Context, string) error
}

type CallbackBindError struct{ Reason CallbackBindReason }

type CallbackBindReason uint8

type CallbackRejectedError struct{ Reason string }

type Options struct {
	NoBrowser bool
	URLWriter io.Writer
	Launcher  BrowserLauncher

	// RedirectURL enables an explicitly configured callback with a FIXED PORT as
	// well as a fixed path. Only the package's fixed redirect constants
	// (ExactRedirectURL, ToolHiveCompatibleRedirectURL) are accepted. Use this only
	// for a target that requires an exact redirect_uri string match (a
	// general-purpose OIDC or ToolHive-compatible target with no obligation to
	// implement RFC 8252 loopback dynamic-port matching) — it reintroduces local
	// port-squatting exposure that PinCallbackPath does not (see its doc comment).
	// Mutually exclusive with PinCallbackPath. Empty preserves the random-path,
	// ephemeral-port default.
	RedirectURL string

	// PinCallbackPath fixes the callback's PATH to the same well-known value
	// ExactRedirectURL uses, while still binding an EPHEMERAL port. Use this for a
	// target whose authorization server implements RFC 8252 §7.3 loopback dynamic-
	// port matching — the AS accepts any port for a registered loopback redirect_uri
	// as long as the path matches — which lets a client register one fixed
	// redirect_uri while every login still gets its own unpredictable port,
	// preserving the squatting resistance a fixed port gives up. Mutually exclusive
	// with RedirectURL: New rejects setting both rather than silently picking one.
	// A per-call explicit callback path (AuthorizeWithCallbackPath, used for DCR's
	// own registration-bound path) always takes priority over this option, since
	// that path — not this well-known one — is what a DCR client actually
	// registered; see resolveCallbackMode's case order.
	PinCallbackPath bool
}

type Result struct {
	Code  string
	State string
	Iss   string
}

type Runtime struct {
	// contains filtered or unexported fields
}