database

type Driver interface {
	Name() string
	UpdateSchema(ctx context.Context) (SchemaVersion, SchemaVersion, error)
	InsertOAuth2AuthRequest(ctx context.Context, authRequest *OAuth2AuthRequest) error
	SelectOAuth2AuthRequest(ctx context.Context, id string) (*OAuth2AuthRequest, error)
	SelectOAuth2AuthRequestByCode(ctx context.Context, code string) (*OAuth2AuthRequest, error)
	AuthenticateOAuth2AuthRequest(ctx context.Context, id string, subject string, generateChallengeFunc GenerateChallengeFunc, remember bool) error
	VerifyAndTransformOAuth2AuthRequestToUserSessionRequest(ctx context.Context, id string, subject string, verifyChallengeResponse VerifyChallengeResponseFunc, response string) (*UserSessionRequest, error)
	DeleteOAuth2AuthRequest(ctx context.Context, id string) error
	DeleteExpiredOAuth2AuthRequests(ctx context.Context) error
	InsertOAuth2AuthCode(ctx context.Context, code string, id string) error
	InsertOAuth2Token(ctx context.Context, token *OAuth2Token) error
	SelectOAuth2Token(ctx context.Context, id string) (*OAuth2Token, error)
	DeleteOAuth2Token(ctx context.Context, id string) error
	DeleteExpiredOAuth2Tokens(ctx context.Context) error
	InsertOAuth2RefreshToken(ctx context.Context, refreshToken *OAuth2RefreshToken, token *OAuth2Token) error
	RenewOAuth2RefreshToken(ctx context.Context, id string, newToken *OAuth2Token) (*OAuth2RefreshToken, error)
	SelectOAuth2RefreshToken(ctx context.Context, id string) (*OAuth2RefreshToken, error)
	DeleteOAuth2TokensBySubject(ctx context.Context, applicationID string, subject string) error
	DeleteOAuth2RefreshToken(ctx context.Context, id string) error
	DeleteExpiredOAuth2RefreshTokens(ctx context.Context) error
	RotateSigningKeys(ctx context.Context, algorithm jose.SignatureAlgorithm, now int64, generateSigningKey GenerateSigningKeyFunc) (SigningKeys, error)
	InstanciateEncryptionKey(ctx context.Context, keyGroup string, keyType servercrypto.SymetricKeyType, generateEncryptionKey GenerateEncryptionKeyFunc) (*EncryptionKey, error)
	TransformAndDeleteUserSessionRequest(ctx context.Context, state string, token *oauth2.Token) (*UserSession, bool, error)
	DeleteExpiredUserSessionRequests(ctx context.Context) error
	SelectUserSession(ctx context.Context, id string) (*UserSession, error)
	RefreshUserSessions(ctx context.Context, expiry int64, refresh RefreshUserSession) error
	UpdateUserSession(ctx context.Context, session *UserSession) error
	DeleteExpiredUserSessions(ctx context.Context) error
	InsertOrUpdateUserVerificationLog(ctx context.Context, log *UserVerificationLog) (*UserVerificationLog, error)
	SelectUserVerificationLogs(ctx context.Context, subject string) ([]*UserVerificationLog, error)
	GenerateUserTOTPRegistrationRequest(ctx context.Context, subject string, secret string, generateChallengeFunc GenerateChallengeFunc) (*UserTOTPRegistrationRequest, error)
	SelectUserTOTPRegistrationRequest(ctx context.Context, subject string) (*UserTOTPRegistrationRequest, error)
	DeleteExpiredUserTOTPRegistrationRequests(ctx context.Context) error
	VerifyAndTransformUserTOTPRegistrationRequestToRegistration(ctx context.Context, subject string, verifyChallengeResponse VerifyChallengeResponseFunc, response string) (*UserTOTPRegistration, error)
	SelectUserTOTPRegistration(ctx context.Context, subject string) (*UserTOTPRegistration, error)
	Ping(ctx context.Context) error
	Close() error
}

type EncryptionKey struct {
	ID         string
	KeyGroup   string
	KeyType    string
	HashKey    []byte
	BlockKey   []byte
	CreateTime int64
}

type EncryptionKeys []*EncryptionKey

type GenerateChallengeFunc func(ctx context.Context, subject string) (string, error)

type GenerateEncryptionKeyFunc func(keyType servercrypto.SymetricKeyType, keyGroup string) (*EncryptionKey, error)

type GenerateSigningKeyFunc func(algorithm jose.SignatureAlgorithm) (*SigningKey, error)

type OAuth2AuthRequest struct {
	ID            string
	ACR           string
	AMR           []string
	Audience      []string
	Expiry        int64
	AuthTime      int64
	ClientID      string
	CodeChallenge *oidc.CodeChallenge
	Nonce         string
	RedirectURL   string
	ResponseType  oidc.ResponseType
	ResponseMode  oidc.ResponseMode
	Scopes        []string
	State         string
	Subject       string
	Challenge     string
	Remember      bool
	Done          bool
}

type OAuth2RefreshToken struct {
	ID            string
	AuthTime      int64
	AMR           []string
	Audience      []string
	Subject       string
	ClientID      string
	Expiry        int64
	Scopes        []string
	AccessTokenID string
}

type OAuth2Token struct {
	ID             string
	ClientID       string
	Subject        string
	RefreshTokenID string
	Audience       []string
	Expiry         int64
	Scopes         []string
}

type OpAuthRequest struct {
	// contains filtered or unexported fields
}

type OpRefreshTokenRequest struct {
	// contains filtered or unexported fields
}

type RefreshUserSession func(ctx context.Context, session *UserSession) error

type SchemaVersion string

type SigningKey struct {
	ID         string
	Algorithm  string
	PrivateKey []byte
	PublicKey  []byte
	CreateTime int64
}

type SigningKeys []*SigningKey

type UserSession struct {
	ID            string
	Subject       string
	AccessToken   string
	TokenType     string
	RefreshToken  string
	TokenExpiry   int64
	SessionExpiry int64
}

type UserSessionRequest struct {
	ID       string
	Subject  string
	Remember bool
	State    string
	Expiry   int64
}

type UserTOTPRegistration struct {
	Subject    string
	Secret     string
	CreateTime int64
}

type UserTOTPRegistrationRequest struct {
	Subject   string
	Secret    string
	Challenge string
	Expiry    int64
}

type UserVerificationLog struct {
	Subject     string
	Method      string
	FirstUsed   int64
	LastUsed    int64
	Host        string
	Country     string
	CountryCode string
	City        string
	Lat         float64
	Lon         float64
}

type UserWebAuthnIdentity struct {
	WebAuthnID          []byte
	WebAuthnName        string
	WebAuthnDisplayName string
}

type VerifyChallengeResponseFunc func(ctx context.Context, subject string, challenge string, response string) (bool, error)

type WebAuthnUser struct {
	// contains filtered or unexported fields
}