idp

type AuthnType string

type Client struct {
	// contains filtered or unexported fields
}

type CreateAccessorRequest struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type CreateAccessorResponse struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type CreateColumnRequest struct {
	Column userstore.Column `json:"column"`
}

type CreateColumnResponse struct {
	Column userstore.Column `json:"column"`
}

type CreateMutatorRequest struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type CreateMutatorResponse struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type CreateUserAndAuthnRequest struct {
	// TODO: these fields really belong in a better client-facing User type
	ExternalAlias *string `json:"external_alias,omitempty"`
	RequireMFA    bool    `json:"require_mfa"`

	Profile userstore.Record `json:"profile"`

	OrganizationID uuid.UUID `json:"organization_id"`

	UserAuthn
}

type ExecuteAccessorRequest struct {
	AccessorID     uuid.UUID                    `json:"accessor_id"`     // the accessor that specifies what data to access
	Context        policy.ClientContext         `json:"context"`         // context that is provided to the accessor Access Policy
	SelectorValues userstore.UserSelectorValues `json:"selector_values"` // the values to use for the selector
}

type ExecuteAccessorResponse struct {
	Value []string `json:"value"`
}

type ExecuteMutatorRequest struct {
	MutatorID      uuid.UUID                    `json:"mutator_id"`      // the mutator that specifies what columns to edit
	Context        policy.ClientContext         `json:"context"`         // context that is provided to the mutator's Access Policy
	SelectorValues userstore.UserSelectorValues `json:"selector_values"` // the values to use for the selector
	RowValues      map[string]interface{}       `json:"row_values"`      // the values to use for the users table row
}

type ExecuteMutatorResponse struct {
	UserIDs []uuid.UUID `json:"user_ids"`
}

type ListAccessorsResponse struct {
	Accessors []userstore.Accessor `json:"accessors"`
}

type ListColumnsResponse struct {
	Columns []userstore.Column `json:"columns"`
}

type ListMutatorsResponse struct {
	Mutators []userstore.Mutator `json:"mutators"`
}

type UpdateAccessorRequest struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type UpdateAccessorResponse struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type UpdateColumnRequest struct {
	Column userstore.Column `json:"column"`
}

type UpdateColumnResponse struct {
	Column userstore.Column `json:"column"`
}

type UpdateMutatorRequest struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type UpdateMutatorResponse struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type UpdateUserRequest struct {
	// TODO: add MFA factors
	RequireMFA *bool `json:"require_mfa,omitempty"`

	// Only fields set in the underlying map will be updated
	Profile userstore.Record `json:"profile"`

	OrganizationID *uuid.UUID `json:"organization_id"`
}

type UserAndAuthnResponse struct {
	ID        uuid.UUID `json:"id"`
	UpdatedAt int64     `json:"updated_at"` // seconds since the Unix Epoch (UTC)

	ExternalAlias *string `json:"external_alias,omitempty"`
	RequireMFA    bool    `json:"require_mfa"`

	Profile userstore.Record `json:"profile"`

	OrganizationID uuid.UUID `json:"organization_id"`

	Authns []UserAuthn `json:"authns"`
}

type UserAuthn struct {
	AuthnType AuthnType `json:"authn_type"`

	// Fields specified if AuthnType == 'password'
	Username string `json:"username,omitempty"`
	Password string `json:"password,omitempty"`

	// Fields specified if AuthnType == 'social'
	SocialProvider socialprovider.SocialProvider `json:"social_provider,omitempty"`
	OIDCSubject    string                        `json:"oidc_subject,omitempty"`
}

type UserProfile struct {
	Email         string `json:"email"`
	EmailVerified bool   `json:"email_verified"`
	Name          string `json:"name,omitempty"`     // Full name in displayable form (incl titles, suffixes, etc) localized to end-user.
	Nickname      string `json:"nickname,omitempty"` // Casual name of the user, may or may not be same as Given Name.
	Picture       string `json:"picture,omitempty"`  // URL of the user's profile picture.

}