security

type DefaultClientValidator struct {
	ClientStore store.IClientStore
}

type DefaultPkceValidator struct{}

type DefaultResourceOwnerValidator struct{}

type IClientValidator interface {
	// ExractClientCredentials extract client credential from request
	ExractClientCredentials(ctx *fasthttp.RequestCtx) (*model.Credential, error, error)
	// VerifyCredential verify client id & secret
	VerifyCredential(credential *model.Credential) (model.IClient, error, error)
	// VerifyCredentialGrantType verify client id, secret & grant type
	VerifyCredentialGrantType(credential *model.Credential, grantType string) (model.IClient, error, error)
	// VerifyCredentialGrantTypeScope verify client id, secret, grant type & scopes
	VerifyCredentialGrantTypeScope(credential *model.Credential, grantType, scopesStr string) (model.IClient, error, error)
	// VerifyRespTypeRedirectURIScope verify client, response type, scopes, redirect uri
	VerifyRespTypeRedirectURIScope(clientID, responseType, redirectURI, scopesStr string) (model.IClient, error, error)
	// VerifyRedirectURI verify client id, redirect uri
	VerifyRedirectURI(clientID, logoutRedirectURI string) (model.IClient, error, error)
}

type IPkceValidator interface {
	Verify(codeVerifier, codeChanllenge, codeChanllengeMethod string) bool
}

type IResourceOwnerValidator interface {
	Verify(username, password string) (bool, error)
}

type ISecretEncryptor interface {
	EncryptStringToString(input string) string
	EncryptBytesToBytes(input []byte) []byte
	EncryptBytesToString(input []byte) string

	DecryptStringToString(input string) string
	DecryptBytesToBytes(input []byte) []byte
	DecryptStringToBytes(input string) []byte
}