pkg

type AuthorizationChecker interface {
	CheckAuthorization(req TokenIntrospectionRequest) (bool, error)
}

type IntrospectionAuthChecker struct {
	// contains filtered or unexported fields
}

type LinkedIssuerConf struct {
	IssuerURL                   string `yaml:"issuer_url"`
	NativeIntrospectionEndpoint string `yaml:"native_introspection_endpoint"`
	ProxyWellKnown              bool   `yaml:"proxy_well_known"`
	PublicIntrospectionEndpoint string `yaml:"public_introspection_endpoint"`
}

type TIP struct {
	// contains filtered or unexported fields
}

type TIPConfig struct {
	LinkedIssuer              LinkedIssuerConf   `yaml:"linked_issuer"`
	RemoteIssuers             []remoteIssuerConf `yaml:"remote_issuers"`
	FallbackIssuerUnknown     remoteIssuerConf   `yaml:"fallback_issuer_unknown_token_issuer"`
	FallbackIssuerUnsupported remoteIssuerConf   `yaml:"fallback_issuer_unsupported_token_issuer"`
	Federation                federationConf     `yaml:"federation"`
}

type TIPError struct {
	ErrorCode        string `json:"error"`
	ErrorDescription string `json:"error_description,omitempty"`
	Status           int    `json:"-"`
}

type TokenIntrospectionRequest struct {
	Token         string `json:"token" form:"token" query:"token" url:"token"`
	TokenTypeHint string `json:"token_type_hint,omitempty" form:"token_type_hint,omitempty" query:"token,omitempty" url:"token,omitempty"`
	Authorization string `json:"-" form:"-" query:"-" url:"-"`
	Body          []byte `json:"-" form:"-" query:"-" url:"-"`
	ContentType   string `json:"-" form:"-" query:"-" url:"-"`
}

type TokenIntrospectionResponse struct {
	Active     bool                              `json:"active"`
	Scope      string                            `json:"scope,omitempty"`
	ClientID   string                            `json:"client_id,omitempty"`
	Username   string                            `json:"username,omitempty"`
	TokenType  string                            `json:"token_type,omitempty"`
	Expiration unixtime.UnixTime                 `json:"exp,omitempty"`
	IssuedAt   unixtime.UnixTime                 `json:"iat,omitempty"`
	NotBefore  unixtime.UnixTime                 `json:"nbf,omitempty"`
	Subject    string                            `json:"sub,omitempty"`
	Audience   oidfed.SliceOrSingleValue[string] `json:"aud,omitempty"`
	Issuer     string                            `json:"iss,omitempty"`
	JTI        string                            `json:"jti,omitempty"`
	Extra      map[string]any                    `json:"-"`
}

type WellKnownProxy struct {
	// contains filtered or unexported fields
}