keymaker

type AuthCompleteHookFunc func(ctx context.Context, installationID string, credentialRef types.CredentialSlotID, definition types.Definition, result types.AuthCompleteResult) error

type AuthState struct {
	// State is the unique CSRF token identifying this authorization session
	State string
	// DefinitionID identifies which definition is handling the authorization
	DefinitionID string
	// InstallationID identifies the installation record being activated
	InstallationID string
	// CredentialRef identifies which credential-schema-selected connection mode is being activated
	CredentialRef types.CredentialSlotID
	// CallbackState holds the opaque state payload returned by the definition's AuthStartFunc
	CallbackState json.RawMessage
	// CreatedAt records when the session was initiated
	CreatedAt time.Time
	// ExpiresAt specifies when the session becomes invalid
	ExpiresAt time.Time
}

type AuthStateStore interface {
	Save(state AuthState) error
	Take(token string) (AuthState, error)
}

type BeginRequest struct {
	// DefinitionID identifies which definition to use for authorization
	DefinitionID string
	// InstallationID identifies the installation record being activated
	InstallationID string
	// CredentialRef identifies which credential-schema-selected connection mode should be activated
	CredentialRef types.CredentialSlotID
	// Input carries optional definition-specific input to the auth start function
	Input json.RawMessage
}

type BeginResponse struct {
	// DefinitionID identifies which definition is handling the authorization
	DefinitionID string
	// State contains the CSRF token that must be presented during callback
	State string
	// AuthURL is the authorization URL where the user should be redirected
	AuthURL string
}

type CompleteRequest struct {
	// State is the CSRF token that identifies the session
	State string
	// Callback carries the generic callback payload captured from the provider redirect
	Callback types.AuthCallbackInput
}

type CompleteResult struct {
	// DefinitionID identifies which definition issued the credential
	DefinitionID string
	// InstallationID identifies the installation record containing the credential
	InstallationID string
	// CredentialRef identifies which credential slot received the persisted credential
	CredentialRef types.CredentialSlotID
	// Credential contains the persisted credential payload
	Credential types.CredentialSet
}

type DefinitionLookupFunc func(id string) (types.Definition, bool)

type InMemoryAuthStateStore struct {
	// contains filtered or unexported fields
}

type InstallationLookupFunc func(ctx context.Context, installationID string) (InstallationRecord, error)

type InstallationRecord struct {
	ID           string
	OwnerID      string
	DefinitionID string
}

type RedisAuthStateStore struct {
	// contains filtered or unexported fields
}

type Service struct {
	// contains filtered or unexported fields
}