idp

type AuthnType string

type Client struct {
	// contains filtered or unexported fields
}

type CreateAccessorRequest struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type CreateAccessorResponse struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type CreateColumnRequest struct {
	Column userstore.Column `json:"column"`
}

type CreateColumnResponse struct {
	Column userstore.Column `json:"column"`
}

type CreateMutatorRequest struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type CreateMutatorResponse struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type CreateUserAndAuthnRequest struct {
	UserProfile `json:"profile"`

	// TODO: these fields really belong in a better client-facing User type
	ExternalAlias *string `json:"external_alias,omitempty"`
	RequireMFA    bool    `json:"require_mfa"`

	UserExtendedProfile userstore.Record `json:"profile_ext"`

	OrganizationID uuid.UUID `json:"organization_id"`

	UserAuthn
}

type ExecuteAccessorRequest struct {
	User       UserSelector         `json:"user"`        // the user who's data you are accessing
	AccessorID uuid.UUID            `json:"accessor_id"` // the accessor that specifies what you're accessing
	Context    policy.ClientContext `json:"context"`     // context that is provided to the accessor Access Policy
}

type ExecuteAccessorResponse struct {
	Value string `json:"value"`
}

type ListAccessorsResponse struct {
	Accessors []userstore.Accessor `json:"accessors"`
}

type ListColumnsResponse struct {
	Columns []userstore.Column `json:"columns"`
}

type ListMutatorsResponse struct {
	Mutators []userstore.Mutator `json:"mutators"`
}

type MutableUserProfile struct {
	EmailVerified *bool   `json:"email_verified,omitempty"`
	Name          *string `json:"name,omitempty"`
	Nickname      *string `json:"nickname,omitempty"`
	Picture       *string `json:"picture,omitempty"`
}

type UpdateAccessorRequest struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type UpdateAccessorResponse struct {
	Accessor userstore.Accessor `json:"accessor"`
}

type UpdateColumnRequest struct {
	Column userstore.Column `json:"column"`
}

type UpdateColumnResponse struct {
	Column userstore.Column `json:"column"`
}

type UpdateMutatorRequest struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type UpdateMutatorResponse struct {
	Mutator userstore.Mutator `json:"mutator"`
}

type UpdateUserRequest struct {
	UserProfile MutableUserProfile `json:"profile"`

	// TODO: add MFA factors
	RequireMFA *bool `json:"require_mfa,omitempty"`

	// Only fields set in the underlying map will be updated
	UserExtendedProfile userstore.Record `json:"profile_ext"`

	OrganizationID *uuid.UUID `json:"organization_id"`
}

type UserAndAuthnResponse struct {
	ID        uuid.UUID `json:"id"`
	UpdatedAt int64     `json:"updated_at"` // seconds since the Unix Epoch (UTC)

	UserProfile `json:"profile"`

	ExternalAlias *string `json:"external_alias,omitempty"`
	RequireMFA    bool    `json:"require_mfa"`

	UserExtendedProfile userstore.Record `json:"profile_ext"`

	OrganizationID uuid.UUID `json:"organization_id"`

	Authns []UserAuthn `json:"authns"`
}

type UserAuthn struct {
	AuthnType AuthnType `json:"authn_type"`

	// Fields specified if AuthnType == 'password'
	Username string `json:"username,omitempty"`
	Password string `json:"password,omitempty"`

	// Fields specified if AuthnType == 'social'
	SocialProvider socialprovider.SocialProvider `json:"social_provider,omitempty"`
	OIDCSubject    string                        `json:"oidc_subject,omitempty"`
}

type UserProfile struct {
	Email         string `json:"email"`
	EmailVerified bool   `json:"email_verified"`
	Name          string `json:"name,omitempty"`     // Full name in displayable form (incl titles, suffixes, etc) localized to end-user.
	Nickname      string `json:"nickname,omitempty"` // Casual name of the user, may or may not be same as Given Name.
	Picture       string `json:"picture,omitempty"`  // URL of the user's profile picture.

}

type UserSelector struct {
	ID            uuid.UUID `json:"id"`
	ExternalAlias string    `json:"external_alias"` // TODO: using this here makes me think we should rename it
}