oauthgooidc

type OIDCConfig struct {
	Issuer                     string
	DisableDiscovery           bool
	DisableIdTokenVerification bool
	JWKSURL                    string
	UserInfoURL                string // for discovery-less
	ClientID                   string // pass explicitly, so we never need to "extract" it
}

type OIDCDecorator struct {
	// contains filtered or unexported fields
}

type OIDCProvider interface {
	// UserInfo returns the user details.
	UserInfo(ctx context.Context, accessToken, idToken string) (*User, error)
	// VerifyIDToken verifies the JWT ID token.
	VerifyIDToken(ctx context.Context, rawIDToken string) error
}

type OIDCUserClaims struct {
	jwt.RegisteredClaims
	//Email is the user's email address.
	Email string `json:"email"`
	//EmailVerified indicates whether the user's email address has been verified.
	EmailVerified oauthgotypes.BoolString `json:"email_verified"`
	//Name is the user's full name.
	Name string `json:"name"`
	// GivenName is the user's first name.
	GivenName string `json:"given_name"`
	// FamilyName is the user's last name.
	FamilyName string `json:"family_name"`
	// Picture is the URL of the user's profile picture.
	Picture string `json:"picture"`
	// Locale is the user's locale, which can be a string or an object.
	Locale *oauthgotypes.Locale `json:"locale"` // supports string or object via custom unmarshal
}

type User struct {
	Subject       string               `json:"sub"`
	Email         string               `json:"email"`
	EmailVerified bool                 `json:"email_verified"`
	Name          string               `json:"name"`
	GivenName     string               `json:"given_name"`
	FamilyName    string               `json:"family_name"`
	Picture       string               `json:"picture"`
	Locale        *oauthgotypes.Locale `json:"locale"`
	Attributes    map[string]string    `json:"attributes"`
	RawProfile    map[string]any       `json:"raw_profile"`
}