credentialruntime

type AuthSource interface {
	ResolveMCPBearer(context.Context, string, string) (BearerCredential, bool, error)
}

type BearerCredential struct {
	Token        string
	VaultID      string
	CredentialID string
}

type HTTPResponse struct {
	Body          string `json:"body"`
	BodyTruncated bool   `json:"body_truncated"`
	ContentType   string `json:"content_type"`
	StatusCode    int    `json:"status_code"`
}

type MCPProbeFailure struct {
	Method       string        `json:"method"`
	HTTPResponse *HTTPResponse `json:"http_response"`
}

type MCPProbeResult struct {
	Verdict Verdict
	Failure *MCPProbeFailure
}

type MCPValidator interface {
	ValidateBearer(context.Context, string, string) (MCPProbeResult, error)
}

type OAuthRefreshRequest struct {
	TokenEndpoint     string
	ClientID          string
	RefreshToken      string
	TokenEndpointAuth string
	ClientSecret      string
	Resource          string
	Scope             string
}

type OAuthRefreshResult struct {
	Status       OAuthRefreshStatus
	Verdict      Verdict
	HTTPResponse *HTTPResponse
	AccessToken  string
	RefreshToken *string
	ExpiresIn    *time.Duration
}

type OAuthRefreshStatus string

type OAuthRefresher interface {
	Refresh(context.Context, OAuthRefreshRequest) (OAuthRefreshResult, error)
}

type Verdict string