authentication

type APIService struct {
	// contains filtered or unexported fields
}

type DummyService struct{}

type LoginTokenProvider interface {
	// GetRedirect is called to start logging in via an authenticated user.  It is called
	// unauthenticated, initiated by the requesting client, with no user on the context.
	GetRedirect(ctx context.Context) (*TokenRedirect, error)
	// Release drops token into mailbox, releasing it for the next GetToken call.  It is
	// called authenticated, initiated by the web browser running.
	Release(ctx context.Context, loginRequestToken string) error
	// GetToken returns a token waiting on mailbox.  It is called unauthenticated, initiated
	// the requesting client, with no user on the context.
	GetToken(ctx context.Context, mailbox string) (string, time.Time, error)
}

type Service interface {
	IsExternalPrincipalsEnabled() bool
	ExternalPrincipalLogin(ctx context.Context, identityRequest map[string]interface{}) (*apiclient.ExternalPrincipal, error)
	// ValidateSTS validates the STS parameters and returns the external user ID
	ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
	RegisterAdditionalRoutes(r *chi.Mux, sessionStore sessions.Store)
	OauthCallback(w http.ResponseWriter, r *http.Request, sessionStore sessions.Store)
}

type TokenRedirect struct {
	RedirectURL string
	Mailbox     string
}