token

type Issued struct {
	Record         types.Token
	AccessToken    string
	RefreshToken   string
	ReferenceToken string
	// ExpiresIn is the lifetime in seconds; zero means never.
	ExpiresIn int64
}

type Options struct {
	// Now supplies the time; nil means time.Now.
	Now func() time.Time
	// KeyBits is the RSA key size; zero means DefaultKeyBits. Only tests set
	// it, to keep key generation cheap.
	KeyBits int
}

type RefreshCheck struct {
	// Username, when set, must be the refreshed token's user, or the refresh
	// fails with ErrRefreshOtherUser.
	Username string
	// TokenID, when set, must be the refreshed token's id, or the refresh
	// fails as an invalid refresh token: the caller presented that token as
	// its credential, and it must not vouch for refreshing another.
	TokenID string
}

type RegistryRequest struct {
	Username string
	// ExpiresIn is the lifetime; it must be positive, and at most
	// types.RegistryTokenExpiry.
	ExpiresIn time.Duration
	Access    types.RegistryAccess
	// Scope is the scope of the credential that obtained the token, which
	// the token keeps so it never acts more broadly; it defaults to
	// applied-permissions/user, a password's.
	Scope types.Scope
	// Identity is that credential's identity when it came from an OIDC
	// exchange, so the token resolves to the same transient or synthetic
	// user it does.
	Identity types.TokenIdentity
	// Parent is the id of the stored token that obtained it, empty for a
	// password or anonymous caller. The token is refused once the parent is
	// revoked.
	Parent string
}

type Request struct {
	Username string
	// Scope defaults to applied-permissions/user.
	Scope types.Scope
	// ExpiresIn defaults to token.default_expiry (types.DefaultTokenExpiry
	// when unset); zero means never and needs ByAdmin.
	ExpiresIn      *time.Duration
	Refreshable    bool
	ForceRevocable bool
	Audience       string
	Description    string
	ProjectKey     string
	// IncludeReference also issues a reference token.
	IncludeReference bool
	// ByAdmin is whether the caller is an administrator.
	ByAdmin bool
	// Purpose marks a token its user holds at most one of
	// (types.TokenPurposeEncryptedPassword). Such a token always has a
	// reference token, and keeps it sealed so it can be shown again.
	Purpose string
	// Identity is how the token's subject resolves to a user. An OIDC token
	// exchange, and an administrator minting for a name that is no stored
	// user, issue a token for a user who need not be stored.
	Identity types.TokenIdentity
	// NotAfter, when set, is the latest the token may expire; a longer or
	// unending lifetime is cut to it. A transient user's token for itself
	// sets it to the expiry of the token that minted it: the user exists
	// only through that token, so a token outliving it would outlast the
	// 24 hours an OIDC mapping allows.
	NotAfter time.Time
}

type Service struct {
	// contains filtered or unexported fields
}