model

type Authorization struct {
	Id            string `json:"id"`
	Issuer        string `json:"iss"`
	ClientId      string `json:"client_id"`
	PrincipalName string `json:"principal_name"`
	Subject       string `json:"subject"`
	GrantType     string `json:"grant_type"`
	ResponseType  string `json:"response_type"`
	Scope         string `json:"scope"`
	//	Attributes          map[string]interface{} `json:"attributes"`
	Code                  string `json:"code"`
	Nonce                 string `json:"nonce"`
	AccessToken           string `json:"access_token"`
	RefreshToken          string `json:"refresh_token"`
	IDToken               string `json:"id_token"`
	CodeChallenge         string `json:"code_challenge"`
	CodeChallengeMethod   string `json:"code_challenge_method"`
	DeviceCode            string `json:"device_code"`
	ExpiresAt             int64  `json:"expires_at"` //Unix timestamp
	RefreshTokenExpiresAt int64  `json:"refresh_token_expires_at"`
	UserCode              string `json:"user_code"`
}

type Client struct {
	Id             string   `json:"id"`
	ClientId       string   `json:"client_id"`
	Secret         string   `json:"secret"`
	ClientScope    string   `json:"client_scope"`
	ClientName     string   `json:"client_name"`
	GrantTypes     []string `json:"grant_type"`
	RequireConsent bool     `json:"require_consent"`
	RequirePKCE    bool     `json:"require_pkce"`
	RedirectUris   []string `json:"redirect_uris"`
	WebOrigins     string   `json:"web_origins"`
	PostLogoutUris []string `json:"post_logout_uri"`
	// 创建时间
	CreatedAt string `json:"created_at"`
	// 更新时间
	UpdatedAt string `json:"updated_at"`
}

type IClient interface {
	// GetScopes returns a list of scopes that the client is allowed to access.
	GetScopes() []string

	// GetClientId returns the unique identifier of the client.
	GetClientId() string

	// GetClientName returns the name of the client.
	GetClientName() string

	// GetGrantTypes returns a list of authorization types supported by the client.
	GetGrantTypes() []string

	// GetRequireConsent returns whether user consent is required.
	GetRequireConsent() bool

	// GetRequirePKCE returns whether PKCE (Proof Key for Code Exchange) is required.
	GetRequirePKCE() bool

	// GetRedirectUris returns a list of URIs to which the client redirects.
	GetRedirectUris() []string

	// GetPostLogoutUris returns a list of URIs to which the client redirects after logout.
	GetPostLogoutUris() []string

	// GetSecret returns a list of secrets associated with the client.
	GetSecret() []string
	// GetWebOrigins returns a list of web origins associated with the client.
	GetWebOrigins() []string
}

type IUser interface {
	GetId() string
	GetUserName() string
	GetEmail() string
	GetPasswordHash() string
}

type User struct {
	Id           string `json:"sub"`
	UserName     string `json:"preferred_username"`
	PasswordHash string `json:"-"`
	Email        string `json:"email"`
	Role         string `json:"role"`
}