identity

type Actor struct {
	Subject string `json:"sub"`
	Type    string `json:"type"`
}

type Claims struct {
	Issuer        string         `json:"iss"`
	Subject       string         `json:"sub"`
	Audience      []string       `json:"aud"`
	ExpiresAt     int64          `json:"exp"`
	IssuedAt      int64          `json:"iat"`
	NotBefore     int64          `json:"nbf"`
	JWTID         string         `json:"jti"`
	SessionID     string         `json:"sid,omitempty"`
	ApplicationID string         `json:"application_id,omitempty"`
	ClientID      string         `json:"client_id,omitempty"`
	TokenKind     string         `json:"token_kind"`
	ActorType     string         `json:"actor_type"`
	Scope         string         `json:"scope,omitempty"`
	Roles         RoleClaims     `json:"roles"`
	Email         string         `json:"email,omitempty"`
	Locale        string         `json:"locale,omitempty"`
	EmailVerified bool           `json:"email_verified,omitempty"`
	IsOrgVerified bool           `json:"is_org_verified,omitempty"`
	CustomClaims  map[string]any `json:"custom_claims,omitempty"`
	AMR           []string       `json:"amr,omitempty"`
	Actor         *Actor         `json:"act,omitempty"`
}

type KeyPair struct {
	PrivatePEM []byte
	PublicJWK  map[string]any
	KID        string
}

type RoleClaims struct {
	Application []string            `json:"application"`
	Workspaces  map[string][]string `json:"workspaces"`
}