oidc

type AccessTokenClaims struct {
	Issuer    string
	Audience  string
	Subject   string
	Scope     []string
	IssuedAt  time.Time
	ExpiresAt time.Time
	TokenUse  string
}

type AdminClientHandler struct {
	// contains filtered or unexported fields
}

type AuthCodeRecord struct {
	CodeHash       string
	ClientID       string
	UserID         string
	RedirectURI    string
	Scope          []string
	CodeChallenge  string
	CodeMethod     string
	Nonce          string
	ExpiresAt      time.Time
	ConsumedAt     *time.Time
	CreatedAt      time.Time
	OriginalState  string
	SessionBinding string
}

type AuthorizeHandler struct {
	// contains filtered or unexported fields
}

type Config struct {
	Issuer               string
	BasePath             string
	AccessTokenTTL       time.Duration
	IDTokenTTL           time.Duration
	RefreshTokenTTL      time.Duration
	AuthorizationCodeTTL time.Duration
	PrivateKeyPEM        string
	DefaultScopes        []string
}

type ConsentRecord struct {
	ClientID   string
	UserID     string
	Scope      []string
	GrantedAt  time.Time
	UpdatedAt  time.Time
	RevokedAt  *time.Time
	FirstParty bool
}

type GinContext struct {
	// contains filtered or unexported fields
}

type HTTPContext interface {
	Query(string) string
	PostForm(string) string
	Header(string) string
	JSON(int, any)
	Redirect(int, string)
	Status(int)
	BindJSON(any) error
}

type IDTokenClaims struct {
	Issuer    string
	Audience  string
	Subject   string
	Nonce     string
	IssuedAt  time.Time
	ExpiresAt time.Time
	AuthTime  time.Time
}

type InMemoryStore struct {
	// contains filtered or unexported fields
}

type JSONWebKey struct {
	Kty string `json:"kty"`
	Use string `json:"use"`
	Kid string `json:"kid"`
	Alg string `json:"alg"`
	N   string `json:"n"`
	E   string `json:"e"`
}

type JSONWebKeySet struct {
	Keys []JSONWebKey `json:"keys"`
}

type KVStore struct {
	// contains filtered or unexported fields
}

type KeyService struct {
	// contains filtered or unexported fields
}

type MetadataHandler struct {
	// contains filtered or unexported fields
}

type OAuthError struct {
	Error            string `json:"error"`
	ErrorDescription string `json:"error_description,omitempty"`
	TraceID          string `json:"trace_id,omitempty"`
}

type OIDCClient struct {
	ID                      string    `json:"id"`
	Name                    string    `json:"name"`
	SecretHash              string    `json:"-"`
	RedirectURIs            []string  `json:"redirect_uris"`
	Scopes                  []string  `json:"scopes"`
	GrantTypes              []string  `json:"grant_types"`
	TokenEndpointAuthMethod string    `json:"token_endpoint_auth_method"`
	FirstParty              bool      `json:"first_party"`
	Status                  string    `json:"status"`
	CreatedAt               time.Time `json:"created_at"`
	UpdatedAt               time.Time `json:"updated_at"`
}

type PluginInfo struct {
	Name        string `json:"name"`
	Slug        string `json:"slug"`
	Description string `json:"description"`
	Version     string `json:"version"`
}

type RefreshTokenRecord struct {
	TokenHash   string
	ClientID    string
	UserID      string
	Scope       []string
	ExpiresAt   time.Time
	RevokedAt   *time.Time
	CreatedAt   time.Time
	RotatedFrom string
}

type RevokeHandler struct {
	// contains filtered or unexported fields
}

type Store interface {
	CreateClient(client OIDCClient, rawSecret string) (OIDCClient, string, error)
	GetClient(id string) (OIDCClient, error)
	ListClients() []OIDCClient
	UpdateClient(client OIDCClient) (OIDCClient, error)
	DeleteClient(id string) error
	ValidateClientSecret(clientID, rawSecret string) (OIDCClient, error)

	SaveAuthCode(record AuthCodeRecord) error
	ConsumeAuthCode(rawCode string, now time.Time) (AuthCodeRecord, error)

	SaveRefreshToken(record RefreshTokenRecord) error
	GetRefreshToken(rawToken string, now time.Time) (RefreshTokenRecord, error)
	RevokeRefreshToken(rawToken string, now time.Time) error
	RotateRefreshToken(oldRawToken string, newRecord RefreshTokenRecord, now time.Time) error

	SaveConsent(record ConsentRecord) error
	GetConsent(clientID, userID string) (ConsentRecord, error)
}

type TokenClaims map[string]any

type TokenHandler struct {
	// contains filtered or unexported fields
}

type TokenResponse struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int64  `json:"expires_in"`
	RefreshToken string `json:"refresh_token,omitempty"`
	IDToken      string `json:"id_token,omitempty"`
	Scope        string `json:"scope,omitempty"`
}

type TokenService struct {
	// contains filtered or unexported fields
}

type UserInfoHandler struct {
	// contains filtered or unexported fields
}

type UserInfoResolver func(userID string) (UserProfile, error)

type UserProfile struct {
	ID       string `json:"id"`
	Username string `json:"username"`
	Email    string `json:"email"`
	Name     string `json:"name"`
}

type UserResolver func(ctx HTTPContext) (UserProfile, error)