keychain

type AuthToken interface {
	// ID returns the token identifier
	ID() string

	// ClientID returns the OAuth client identity
	ClientID() string

	// Username returns the user for the token or empty if no user is associated
	Username() string

	// Subject return the subject id
	Subject() string

	// Audience return the token audience
	Audience() string

	// ExpiresAt returns the token expiration time
	ExpiresAt() int64

	// Scope returns the scopes the token has
	Scope() []string

	// Returns the token use, i.e. access, identity, etc.
	Use() string

	// Claims returns the token claims
	Claims() Claims

	// String returns the string value of the token as a signed JWT
	String() string

	// Returns a context from the token
	Context(context.Context) context.Context
}

type Claims = types.StringMap

type ClaimsValidator struct {
	// Issuers matches the particular issuers
	Issuers []string

	// Clients matches client ids
	Clients []string

	// Audience matches audiences
	Audience []string

	// Subject matches subjects
	Subject []string

	// Action is the action to perform
	Action ValidationAction
}

type ContextKey string

type KeyValidator struct {
	// Method is the method to use
	Method jwt.SigningMethod

	// Key is the key data
	Key interface{}

	// Action is the action to perform
	Action ValidationAction
}

type ScopeMatch string

type ScopeValidator struct {
	// Scopes is the list of scopes to match
	Scopes []string

	// Match is the rule to match the scopes with
	Match ScopeMatch

	// Action is the action to perform
	Action ValidationAction
}

type TokenValidationError error

type ValidationAction string

type ValidationRule interface {
	Validate(token *authToken) (ValidationAction, error)
}