clientconfig

type Device struct {
	Issuer        string   `json:"issuer"`
	ClientID      string   `json:"client_id"`
	Scopes        []string `json:"scopes,omitempty"`
	TokenEndpoint string   `json:"token_endpoint,omitempty"`
}

type DeviceAuthorization struct {
	DeviceCode              string `json:"device_code"`
	UserCode                string `json:"user_code"`
	VerificationURI         string `json:"verification_uri"`
	VerificationURIComplete string `json:"verification_uri_complete,omitempty"`
	ExpiresIn               int    `json:"expires_in"`
	Interval                int    `json:"interval,omitempty"`
}

type DeviceFlow struct {
	// HTTP is the client for IdP calls (default DefaultHTTPClient).
	HTTP *http.Client
	// ClientID is the public client id (info.auth.device.client_id).
	ClientID string
	// Scopes requested (info.auth.device.scopes).
	Scopes []string
	// Discovery holds the IdP endpoints (see Discover).
	Discovery *Discovery
	// PollUnit is the length of one interval second (default time.Second);
	// tests shorten it.
	PollUnit time.Duration
}

type Discovery struct {
	Issuer                      string `json:"issuer"`
	DeviceAuthorizationEndpoint string `json:"device_authorization_endpoint"`
	TokenEndpoint               string `json:"token_endpoint"`
}

type File struct {
	// Current is the active profile name.
	Current string `json:"current"`
	// Profiles by name.
	Profiles map[string]*Profile `json:"profiles"`
}

type JWTClaims struct {
	Exp   int64           `json:"exp"`
	Iss   string          `json:"iss"`
	Sub   string          `json:"sub"`
	Email string          `json:"email"`
	Aud   json.RawMessage `json:"aud"`
	Azp   string          `json:"azp"`
	Cid   string          `json:"cid"`
}

type OAuthError struct {
	Status      int
	Code        string
	Description string
}

type Overrides struct {
	Profile string
	Server  string
	Gateway string
	Token   string
	Method  string
}

type Profile struct {
	// Server is the hub URL, e.g. https://backyard.acme.com.
	Server string `json:"server,omitempty"`
	// Gateway is an explicit deploy gateway URL (standalone gateway, or the
	// proxy-exempt path); empty means Server + "/__backyard/api/deploy".
	Gateway string `json:"gateway,omitempty"`
	// Token is the bearer token (Backyard API token, static token or IdP JWT).
	Token string `json:"token,omitempty"`
	// TokenExpiresAt is when Token expires (zero when unknown or never).
	TokenExpiresAt time.Time `json:"token_expires_at,omitzero"`
	// Method is the preferred deploy method (auto|api|s3|gcs|azure|rsync).
	Method string `json:"method,omitempty"`
	// RefreshToken is the IdP refresh token of a device-flow login.
	RefreshToken string `json:"refresh_token,omitempty"`
	// Device holds what is needed to refresh a device-flow token.
	Device *Device `json:"device,omitempty"`
	// Login records how the credentials were obtained (token, browser,
	// device or anonymous).
	Login string `json:"login,omitempty"`
	// User is the identity behind the credentials at login time.
	User *User `json:"user,omitempty"`
	// Info caches the gateway's /info document from the last successful
	// contact so direct-sync deploys work while the gateway is unreachable.
	Info *deploy.Info `json:"info,omitempty"`
}

type Project struct {
	// Site is the site name to deploy to.
	Site string `json:"site,omitempty"`
	// Dir is the folder to deploy, relative to the project file (default ".").
	Dir string `json:"dir,omitempty"`
	// Method is the preferred deploy method (default auto).
	Method string `json:"method,omitempty"`
	// Ignore lists extra gitignore-style patterns excluded from deploys.
	Ignore []string `json:"ignore,omitempty"`
}

type ProjectFile struct {
	Project
	// Path is the absolute path of the .backyard.json file.
	Path string
}

type Resolved struct {
	// ProfileName is the selected profile (it may not exist yet).
	ProfileName string
	// Profile is a copy of the stored profile (never nil).
	Profile *Profile
	// Exists reports whether the profile is stored in the file.
	Exists bool

	Server  string
	Gateway string // effective gateway URL ("" when no server is known)
	Token   string
	Method  string

	ServerSource Source
	TokenSource  Source
}

type Session struct {
	*Resolved
	// Path is the config file path.
	Path string
	// File is the loaded config file.
	File *File
	// Warnings collects non-fatal problems worth showing the user (expired
	// tokens, failed refreshes).
	Warnings []string
	// contains filtered or unexported fields
}

type SessionOptions struct {
	// ConfigPath is the config file (default DefaultPath()).
	ConfigPath string
	// Overrides are flag values.
	Overrides Overrides
	// HTTP is used for IdP token refreshes (default DefaultHTTPClient()).
	HTTP *http.Client
	// Now returns the current time (default time.Now).
	Now func() time.Time
	// Logger receives debug/warn logs (default: discard).
	Logger *slog.Logger
}

type Source string

type TokenResponse struct {
	AccessToken  string `json:"access_token"`
	IDToken      string `json:"id_token,omitempty"`
	RefreshToken string `json:"refresh_token,omitempty"`
	TokenType    string `json:"token_type,omitempty"`
	ExpiresIn    int64  `json:"expires_in,omitempty"`
}

type User struct {
	ID    string `json:"id"`
	Email string `json:"email,omitempty"`
	Name  string `json:"name,omitempty"`
	Admin bool   `json:"admin,omitempty"`
}