auth

type AuthorizationServerMetadata struct {
	Issuer                            string   `json:"issuer"`
	AuthorizationEndpoint             string   `json:"authorization_endpoint"`
	TokenEndpoint                     string   `json:"token_endpoint"`
	RevocationEndpoint                string   `json:"revocation_endpoint,omitempty"`
	RegistrationEndpoint              string   `json:"registration_endpoint"`
	ScopesSupported                   []string `json:"scopes_supported"`
	ResponseTypesSupported            []string `json:"response_types_supported"`
	GrantTypesSupported               []string `json:"grant_types_supported"`
	TokenEndpointAuthMethodsSupported []string `json:"token_endpoint_auth_methods_supported"`
	CodeChallengeMethodsSupported     []string `json:"code_challenge_methods_supported"`
}

type CredentialStore interface {
	Load(profileName string) (Credentials, error)
	Save(profileName string, credentials Credentials) error
	Delete(profileName string) error
	UsingKeyring() bool
	Warning() string
}

type Credentials struct {
	AccessToken  string    `json:"access_token"`
	RefreshToken string    `json:"refresh_token,omitempty"`
	TokenType    string    `json:"token_type"`
	Scope        string    `json:"scope"`
	ExpiresAt    time.Time `json:"expires_at"`
	ClientID     string    `json:"client_id"`
	ClientSecret string    `json:"client_secret,omitempty"`
	Issuer       string    `json:"issuer"`
	Resource     string    `json:"resource"`
}

type Discovery struct {
	Resource      ProtectedResourceMetadata   `json:"resource_metadata"`
	Authorization AuthorizationServerMetadata `json:"authorization_server_metadata"`
}

type LoginOptions struct {
	Profile string
	NoOpen  bool
	URLSink func(string)
}

type LogoutResult struct {
	Profile string `json:"profile"`
	Revoked bool   `json:"revoked"`
	Warning string `json:"warning,omitempty"`
}

type ProfileStore interface {
	SnapshotProfile(string) (config.ProfileSnapshot, error)
	UpsertProfile(config.Profile) error
	RestoreProfile(config.ProfileSnapshot) error
}

type ProtectedResourceMetadata struct {
	Resource               string   `json:"resource"`
	AuthorizationServers   []string `json:"authorization_servers"`
	BearerMethodsSupported []string `json:"bearer_methods_supported"`
	ScopesSupported        []string `json:"scopes_supported"`
}

type Registration struct {
	ClientID                string   `json:"client_id"`
	ClientSecret            string   `json:"client_secret,omitempty"`
	ClientIDIssuedAt        int64    `json:"client_id_issued_at"`
	ClientSecretExpiresAt   int64    `json:"client_secret_expires_at,omitempty"`
	ClientName              string   `json:"client_name"`
	RedirectURIs            []string `json:"redirect_uris"`
	GrantTypes              []string `json:"grant_types"`
	ResponseTypes           []string `json:"response_types"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method"`
	Scope                   string   `json:"scope"`
}

type Service struct {
	Config      ProfileStore
	Credentials CredentialStore
	HTTPClient  *http.Client
	OpenBrowser func(string) error
	Now         func() time.Time
	Discover    func(context.Context, *http.Client) (Discovery, error)
}

type Status struct {
	Profile       string    `json:"profile"`
	Authenticated bool      `json:"authenticated"`
	ExpiresAt     time.Time `json:"expires_at,omitempty"`
	Expired       bool      `json:"expired,omitempty"`
	Refreshable   bool      `json:"-"`
	Scope         string    `json:"scope,omitempty"`
	Issuer        string    `json:"issuer,omitempty"`
	Resource      string    `json:"resource,omitempty"`
	Storage       string    `json:"storage,omitempty"`
	Warning       string    `json:"warning,omitempty"`
}

type Store struct {
	// contains filtered or unexported fields
}