oauthgostate

type StateCodec struct {
	HMACSecret []byte
	TTL        time.Duration
}

type StatePayload struct {
	// Provider is the name of the OAuth provider.
	Provider string `json:"provider"`
	// Nonce is a unique value to prevent replay attacks.
	Nonce string `json:"nonce"`
	// CSRF is a value to prevent CSRF attacks.
	CSRF string `json:"csrf"`
	// PKCE is the Proof Key for Code Exchange, used in OAuth 2.0 PKCE flows.
	PKCE *oauthgoutils.PKCE `json:"pkce,omitempty"`
	// Redirect is the URL to redirect the user to after authentication.
	Redirect string `json:"redirect"`
	// IssuedAt is the timestamp when the state was issued.
	IssuedAt int64 `json:"iat"`
	// Extras is a map of additional data that can be included in the state.
	// This can be used to pass custom parameters or data that the application needs.
	Extras map[string]string `json:"extras,omitempty"`
	// ReturnTo is the dynamic url to redirect the user to after authentication.
	ReturnTo string `json:"returnTo"`

	RequestedScopes []string `json:"requestedScopes,omitempty"`

	// RequestParams is a map of additional request parameters that can be included in the state.
	// This can be used to pass custom query parameters in the login endpoint that application can
	// use in the callback results.
	RequestParams map[string]interface{} `json:"requestParams,omitempty"`
}