pluginpb

type AuthClient interface {
	Info(ctx context.Context, in *InfoRequest, opts ...grpc.CallOption) (*InfoResponse, error)
	Authenticate(ctx context.Context, in *AuthenticateRequest, opts ...grpc.CallOption) (*Identity, error)
	Begin(ctx context.Context, in *BeginRequest, opts ...grpc.CallOption) (*BeginResponse, error)
	Complete(ctx context.Context, in *CompleteRequest, opts ...grpc.CallOption) (*Identity, error)
}

type AuthServer interface {
	Info(context.Context, *InfoRequest) (*InfoResponse, error)
	Authenticate(context.Context, *AuthenticateRequest) (*Identity, error)
	Begin(context.Context, *BeginRequest) (*BeginResponse, error)
	Complete(context.Context, *CompleteRequest) (*Identity, error)
	// contains filtered or unexported methods
}

type AuthenticateRequest struct {
	Identifier string `protobuf:"bytes,1,opt,name=identifier,proto3" json:"identifier,omitempty"`
	// Plaintext credential the user submitted FOR THIS PROVIDER (password capability only).
	// Never the OSCTF password, a hash, or a token. See the trust model.
	Secret string `protobuf:"bytes,2,opt,name=secret,proto3" json:"secret,omitempty"`
	// contains filtered or unexported fields
}

type BeginRequest struct {
	RedirectUri string `protobuf:"bytes,1,opt,name=redirect_uri,json=redirectUri,proto3" json:"redirect_uri,omitempty"` // host's callback URL
	// The CSRF state the HOST minted for this login. The plugin MUST use it verbatim as the
	// authorize URL's `state` parameter, so the value the identity provider echoes back is the
	// one the host can verify. The host checks the returned URL and refuses a login whose state
	// is missing or different — a provider-chosen state would put CSRF protection inside the
	// component the auth return-path contract says not to trust.
	State string `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type BeginResponse struct {
	AuthorizeUrl string `protobuf:"bytes,1,opt,name=authorize_url,json=authorizeUrl,proto3" json:"authorize_url,omitempty"`
	// The plugin's OWN opaque round-trip data (e.g. a PKCE verifier and nonce). The host stores
	// it with the login and hands it back to Complete; it is never the CSRF state and never
	// reaches the browser or the identity provider.
	State string `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type ChallengeTypeClient interface {
	Info(ctx context.Context, in *InfoRequest, opts ...grpc.CallOption) (*InfoResponse, error)
	ValidateConfig(ctx context.Context, in *ValidateRequest, opts ...grpc.CallOption) (*ValidateResponse, error)
	CheckFlag(ctx context.Context, in *CheckRequest, opts ...grpc.CallOption) (*CheckResponse, error)
}

type ChallengeTypeServer interface {
	Info(context.Context, *InfoRequest) (*InfoResponse, error)
	ValidateConfig(context.Context, *ValidateRequest) (*ValidateResponse, error)
	CheckFlag(context.Context, *CheckRequest) (*CheckResponse, error)
	// contains filtered or unexported methods
}

type CheckRequest struct {
	Submitted string            `protobuf:"bytes,1,opt,name=submitted,proto3" json:"submitted,omitempty"` // the user's guess (never the flag)
	Config    map[string]string ``                                                                        // author config (host injects no flag)
	/* 139-byte string literal not displayed */
	Instance map[string]string `` // per-instance metadata (no flag)
	/* 143-byte string literal not displayed */
	// contains filtered or unexported fields
}

type CheckResponse struct {
	Correct bool `protobuf:"varint,1,opt,name=correct,proto3" json:"correct,omitempty"`
	// contains filtered or unexported fields
}

type CompleteRequest struct {
	Params map[string]string `` // callback query params
	/* 139-byte string literal not displayed */
	State string `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type Event struct {
	Name       string            `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`                               // "challenge.solved"
	Id         string            `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`                                   // unique event id (dedup)
	OccurredAt string            `protobuf:"bytes,3,opt,name=occurred_at,json=occurredAt,proto3" json:"occurred_at,omitempty"` // RFC3339
	Data       map[string]string ``                                                                                            // flat, non-secret AND non-PII
	/* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Identity struct {
	Subject  string            `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"` // stable IdP-unique id
	Email    string            `protobuf:"bytes,2,opt,name=email,proto3" json:"email,omitempty"`
	Username string            `protobuf:"bytes,3,opt,name=username,proto3" json:"username,omitempty"` // suggested handle
	Claims   map[string]string ``                                                                      /* 139-byte string literal not displayed */
	// Whether the provider asserts it VERIFIED this email (OIDC's email_verified). The host
	// requires it before binding a login to an existing account by email address — see the auth
	// return-path contract in docs/v0.3/04-plugin-interfaces.md. This is not a defense against a
	// hostile plugin, which could simply set it: it distinguishes an honest provider that verifies
	// addresses from one where a user can assert any address they like. Added in ABI 1.1; a plugin
	// on 1.0 leaves it false, which fails closed (no email binding).
	EmailVerified bool `protobuf:"varint,5,opt,name=email_verified,json=emailVerified,proto3" json:"email_verified,omitempty"`
	// contains filtered or unexported fields
}

type InfoRequest struct {
	// contains filtered or unexported fields
}

type InfoResponse struct {
	Name         string     `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // must match the manifest name
	Type         PluginType `protobuf:"varint,2,opt,name=type,proto3,enum=osctf.plugin.v1.PluginType" json:"type,omitempty"`
	Abi          string     `protobuf:"bytes,3,opt,name=abi,proto3" json:"abi,omitempty"`                   // "1.<minor>"
	Version      string     `protobuf:"bytes,4,opt,name=version,proto3" json:"version,omitempty"`           // the plugin's own semver, for display
	Capabilities []string   `protobuf:"bytes,5,rep,name=capabilities,proto3" json:"capabilities,omitempty"` // optional feature flags within the type (e.g. "password")
	// contains filtered or unexported fields
}

type NotificationClient interface {
	Info(ctx context.Context, in *InfoRequest, opts ...grpc.CallOption) (*InfoResponse, error)
	Subscriptions(ctx context.Context, in *InfoRequest, opts ...grpc.CallOption) (*SubscriptionList, error)
	Notify(ctx context.Context, in *Event, opts ...grpc.CallOption) (*NotifyAck, error)
}

type NotificationServer interface {
	Info(context.Context, *InfoRequest) (*InfoResponse, error)
	Subscriptions(context.Context, *InfoRequest) (*SubscriptionList, error)
	Notify(context.Context, *Event) (*NotifyAck, error)
	// contains filtered or unexported methods
}

type NotifyAck struct {
	Handled bool `protobuf:"varint,1,opt,name=handled,proto3" json:"handled,omitempty"`
	// contains filtered or unexported fields
}

type PluginType int32

type ScoreRequest struct {
	Initial int32             `protobuf:"varint,1,opt,name=initial,proto3" json:"initial,omitempty"`
	Min     int32             `protobuf:"varint,2,opt,name=min,proto3" json:"min,omitempty"`
	Decay   int32             `protobuf:"varint,3,opt,name=decay,proto3" json:"decay,omitempty"`
	Solves  int32             `protobuf:"varint,4,opt,name=solves,proto3" json:"solves,omitempty"`
	Params  map[string]string `` // extra curve knobs, from config
	/* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ScoreResponse struct {
	Value int32 `protobuf:"varint,1,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type ScoringClient interface {
	Info(ctx context.Context, in *InfoRequest, opts ...grpc.CallOption) (*InfoResponse, error)
	Value(ctx context.Context, in *ScoreRequest, opts ...grpc.CallOption) (*ScoreResponse, error)
}

type ScoringServer interface {
	Info(context.Context, *InfoRequest) (*InfoResponse, error)
	Value(context.Context, *ScoreRequest) (*ScoreResponse, error)
	// contains filtered or unexported methods
}

type SubscriptionList struct {
	EventNames []string `protobuf:"bytes,1,rep,name=event_names,json=eventNames,proto3" json:"event_names,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedAuthServer struct{}

type UnimplementedChallengeTypeServer struct{}

type UnimplementedNotificationServer struct{}

type UnimplementedScoringServer struct{}

type UnsafeAuthServer interface {
	// contains filtered or unexported methods
}

type UnsafeChallengeTypeServer interface {
	// contains filtered or unexported methods
}

type UnsafeNotificationServer interface {
	// contains filtered or unexported methods
}

type UnsafeScoringServer interface {
	// contains filtered or unexported methods
}

type ValidateRequest struct {
	Config map[string]string `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ValidateResponse struct {
	Ok          bool              `protobuf:"varint,1,opt,name=ok,proto3" json:"ok,omitempty"`
	FieldErrors map[string]string `` /* 168-byte string literal not displayed */
	Normalized  map[string]string `` /* 147-byte string literal not displayed */
	// contains filtered or unexported fields
}