grant

type AccessToken struct {
	Type    string
	Created time.Time
	Expiry  time.Time
	Session *Session
}

type AccessTokenStrategy interface {
	// Export is the process of converting the given access token to a form suitable to be presented to the client.
	Export(ctx context.Context, token *AccessToken) (exported string, err error)
	// Import is the process of converting an exported version of the access token back to its full form.
	Import(ctx context.Context, exported string) (*AccessToken, error)
	// Invalidate the access token by its exported version.
	Invalidate(ctx context.Context, exported string) error
}

type Code struct {
	Challenge       string
	ChallengeMethod oidc.CodeChallengeMethod
	Expiry          time.Time
	Session         *Session
}

type CodeStorage interface {
	// Insert the given authorization code to storage.
	Insert(ctx context.Context, id string, code *Code) error
	// Get the authorization code from storage by its id. Implementations must
	// also restore Code.Session with or without the help of SessionLookup.
	Get(ctx context.Context, id string) (*Code, error)
	// Delete the authorization code from storage by its id. If the implementation
	// relies on SessionLookup to save Session state, it must NOT delete session
	// from storage.
	Delete(ctx context.Context, id string) error
}

type CodeStrategy interface {
	// Export is the process of converting the given authorization code to
	// a form suitable to be presented to the client. The client can later
	// use the exported version of the code to convert back to its full form.
	Export(ctx context.Context, code *Code) (exported string, err error)
	// Import is the process of converting an exported version of the code
	// back to its full form.
	Import(ctx context.Context, exported string) (*Code, error)
	// Invalidate the authorization code by its exported version.
	Invalidate(ctx context.Context, exported string) error
}

type IdToken struct {
	Created     time.Time
	Expiry      time.Time
	Code        string
	AccessToken string
	Client      *client.Client
	ExtraClaims map[string]interface{}
	Session     *Session
}

type IdTokenStrategy interface {
	Export(ctx context.Context, token *IdToken) (exported string, err error)
}

type JwtAccessTokenClaims struct {
	jwt.Claims
	SessionId string `json:"sid"`
	ClientId  string `json:"cid"`
	Scopes    string `json:"scp"`
}

type JwtAccessTokenStrategy struct {
	// Issuer identifier for the server, will be assigned as the
	// "iss" field of the token.
	Issuer string

	// JSON Web Key Set of the server, must contain a signing Key
	// capable of performing SigningAlg
	ServerJwks *gojosev2.JSONWebKeySet
	SigningAlg jose.SignatureAlgorithm

	SessionLookup SessionLookup
}

type RedisCodeStorage struct {
	Logger              *zerolog.Logger
	Client              redis.UniversalClient
	RedisSessionStorage *RedisSessionStorage
}

type RedisRefreshTokenStorage struct {
	Logger              *zerolog.Logger
	Client              redis.UniversalClient
	RedisSessionStorage *RedisSessionStorage
}

type RedisSessionStorage struct {
	Client redis.UniversalClient
	Logger *zerolog.Logger
}

type RefreshToken struct {
	Created time.Time
	Expiry  time.Time
	Session *Session
}

type RefreshTokenStorage interface {
	// Insert the given refresh token to storage.
	Insert(ctx context.Context, id string, token *RefreshToken) error
	// Get the refresh token from storage by its id. Implementations must
	// also restore RefreshToken.Session with or without the help of SessionLookup.
	Get(ctx context.Context, id string) (*RefreshToken, error)
	// Delete the refresh token from storage by its id. If the implementation
	// relies on SessionLookup to save Session state, it must NOT delete session from storage.
	Delete(ctx context.Context, id string) error
}

type RefreshTokenStrategy interface {
	// Export is the process of converting the given refresh token to
	// a form suitable to be presented to the client. The client can later
	// use the exported version of the token to convert back to its full form.
	Export(ctx context.Context, token *RefreshToken) (exported string, err error)
	// Import is the process of converting an exported version of the refresh token
	// back to its full form.
	Import(ctx context.Context, exported string) (*RefreshToken, error)
	// Invalidate the refresh token by its exported version.
	Invalidate(ctx context.Context, exported string) error
}

type Session struct {
	Id             string
	Subject        string
	ClientId       string
	RedirectUri    oidc.RedirectUri
	AudienceHint   []string
	GrantedScopes  map[oidc.Scope]struct{}
	UserInfoClaims map[string]interface{}
	IdTokenClaims  map[string]interface{}
}

type SessionLookup interface {
	// Get returns the session by its id.
	Get(ctx context.Context, sessionId string) (*Session, error)
}

type SessionStorage interface {
	SessionLookup
	// Insert a session into storage. If expiry is not zero, associate the expiry with it.
	Insert(ctx context.Context, session *Session, expiry time.Time) error
	// ExtendExpiry sets a new expiry to the id-ed session. If expiry is zero, deletes the session.
	ExtendExpiry(ctx context.Context, sessionId string, expiry time.Time) error
	// Delete immediately removes the id-ed session from storage.
	Delete(ctx context.Context, sessionId string) error
}