oauth

type AuthCodeBroker struct {
	// contains filtered or unexported fields
}

type DeviceCodeBroker struct {
	// contains filtered or unexported fields
}

type FlowBroker interface {
	StartFlow(ctx context.Context, provider Provider, userID int64) (FlowStatus, error)
	Poll(ctx context.Context, flowID string) (FlowStatus, error)
}

type FlowState string

type FlowStatus struct {
	Provider        Provider
	FlowID          string
	UserID          int64
	VerificationURI string
	UserCode        string
	ExpiresAt       time.Time
	State           FlowState
	FlowType        string        // "device_code" or "authorization_code"
	Token           *oauth2.Token // set by DeviceCodeBroker when authorized
}

type FlowStore struct {
	// contains filtered or unexported fields
}

type OAuthBundle struct {
	Version          int       `json:"version"`
	ClientID         string    `json:"client_id"`
	ClientSecret     string    `json:"client_secret"`
	AccessToken      string    `json:"access_token"`
	RefreshToken     string    `json:"refresh_token,omitempty"`
	AccessExpiresAt  time.Time `json:"access_expires_at"`
	RefreshExpiresAt time.Time `json:"refresh_expires_at,omitempty"`
	Brand            string    `json:"brand,omitempty"` // e.g. "lark" or "feishu"
}

type Provider string

type ProviderConfig struct {
	ID       string
	Scopes   []string
	VaultKey string
	Flows    []ProviderFlowConfig
}

type ProviderFlowConfig struct {
	Type          string
	AuthURL       string
	DeviceAuthURL string
	TokenURL      string
	AuthStyle     oauth2.AuthStyle
}

type ProviderRegistry struct {
	// contains filtered or unexported fields
}

type TokenManager struct {
	// contains filtered or unexported fields
}

type VaultStore interface {
	Set(ctx context.Context, userID int64, name string, plaintext string) error
	Delete(ctx context.Context, userID int64, name string) error
	LoadEnv(ctx context.Context, userID int64) (map[string]string, error)
}