authorization

type Authorization struct {
	RequiredScopes            []string                        `json:"requiredScopes"`
	UseIdToken                bool                            `json:"useIdToken,omitempty"`
	ProtectedResourceMetadata *meta.ProtectedResourceMetadata `json:"protectedResourceMetadata"`
}

type IdTokenSource interface {
	IdToken(ctx context.Context, token *oauth2.Token, protectedResource *meta.ProtectedResourceMetadata) (*oauth2.Token, error)
}

type Policy struct {
	// Global resource protection metadata (mutually exclusive with Tools/Resources)
	Global *Authorization `json:"global,omitempty"`
	// ExcludeURI skips middleware on matching paths
	ExcludeURI string `json:"excludeURI,omitempty"`
	// Per-tool authorization metadata
	Tools map[string]*Authorization `json:"tools,omitempty"`
	// Per-tenant authorization metadata (reserved for future use)
	Resources map[string]*Authorization `json:"resources,omitempty"`
}

type ProtectedResourceTokenSource interface {
	ProtectedResourceToken(ctx context.Context, protectedResource *meta.ProtectedResourceMetadata, scope string) (*oauth2.Token, error)
}

type Token struct {
	Token string `json:"token"`
}

type TokenKeyType string

type WithMeta struct {
	Name     string `json:"name"`
	AuthMeta struct {
		Authorization *Token `json:"authorization,omitempty"`
	} `json:"_meta,omitempty"`
}