keymaker

type ActivationSession struct {
	// State is the unique CSRF token identifying this authorization session
	State string
	// Provider identifies which provider is handling the authorization
	Provider types.ProviderType
	// OrgID identifies the organization initiating the flow
	OrgID string
	// IntegrationID identifies the integration record being activated
	IntegrationID string
	// Scopes contains the authorization scopes requested from the provider
	Scopes []string
	// Metadata carries additional provider-specific configuration
	Metadata map[string]any
	// LabelOverrides customizes UI labels presented during authorization
	LabelOverrides map[string]string
	// CreatedAt records when the session was initiated
	CreatedAt time.Time
	// ExpiresAt specifies when the session becomes invalid
	ExpiresAt time.Time
	// AuthSession holds the provider-specific authorization state
	AuthSession types.AuthSession
}

type BeginRequest struct {
	// OrgID identifies the organization initiating the flow
	OrgID string
	// IntegrationID identifies the integration record being activated
	IntegrationID string
	// Provider specifies which provider to use for authorization
	Provider types.ProviderType
	// RedirectURI overrides the default callback URL if specified
	RedirectURI string
	// Scopes requests specific authorization scopes from the provider
	Scopes []string
	// Metadata carries additional provider-specific configuration
	Metadata map[string]any
	// LabelOverrides customizes UI labels presented during authorization
	LabelOverrides map[string]string
	// State optionally supplies a custom CSRF token
	State string
}

type BeginResponse struct {
	// Provider identifies which provider is handling the authorization
	Provider types.ProviderType
	// State contains the CSRF token that must be validated during callback
	State string
	// AuthURL is the provider authorization URL where the user should be redirected
	AuthURL string
}

type CompleteRequest struct {
	// State is the CSRF token returned by the provider that identifies the session
	State string
	// Code is the authorization code exchanged for credentials
	Code string
}

type CompleteResult struct {
	// Provider identifies which provider issued the credential
	Provider types.ProviderType
	// OrgID identifies the organization that owns the credential
	OrgID string
	// IntegrationID identifies the integration record containing the credential
	IntegrationID string
	// Credential contains the persisted credential payload
	Credential types.CredentialPayload
}

type CredentialWriter interface {
	SaveCredential(ctx context.Context, orgID string, payload types.CredentialPayload) (types.CredentialPayload, error)
}

type MemorySessionStore struct {
	// contains filtered or unexported fields
}

type ProviderResolver interface {
	Provider(provider types.ProviderType) (types.Provider, bool)
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceOptions struct {
	// SessionTTL controls how long OAuth sessions remain valid
	SessionTTL time.Duration
	// Now overrides the time source; primarily used for tests
	Now func() time.Time
}

type SessionStore interface {
	Save(session ActivationSession) error
	Take(state string) (ActivationSession, error)
}