oauthgocookie

type HMACSessionCookieManager struct {
	// Name is the name of the cookie
	Name string
	// Secret is the secret used to sign the cookie data
	Secret []byte
	// TTL is the time-to-live of the cookie
	TTL time.Duration
	// Secure indicates whether the cookie should be secure
	Secure bool
	// Domain is the domain of the cookie
	Domain string
	// HttpOnly indicates whether the cookie should be HTTP-only
	HttpOnly bool
	// CookiePath is the path of the cookie
	CookiePath string
	// SameSite indicates whether the cookie should be same-site
	SameSite http.SameSite
}

type SessionCookieManager interface {
	Set(w http.ResponseWriter, s SessionCookiePayload) error
	Clear(w http.ResponseWriter)
	Parse(r *http.Request) (*SessionCookiePayload, bool)
	Expiry() time.Duration
}

type SessionCookiePayload struct {
	// Provider is the name of the OAuth provider e.g. "google"
	Provider string `json:"provider"`
	// Subject is the user's unique identifier
	Subject string `json:"sub"`
	// Email is the user's email address
	Email string `json:"email"`
	// Name is the user's full name
	Name string `json:"name"`
	// Expiry is the time when the session expires
	Expiry time.Time `json:"exp"`
}