niso

type AccessData struct {
	// ClientData information
	ClientID string

	// Access token
	AccessToken string

	// Token expiration in seconds
	ExpiresIn int32

	// Requested scope
	Scope string

	// Redirect Uri from request
	RedirectURI string

	// Date created
	CreatedAt time.Time

	// Type of grant used to issue this token
	GrantedVia GrantType

	// Data to be passed to storage. Not used by the library.
	UserData interface{}
}

type AccessRequest struct {
	GrantType GrantType
	Code      string
	ClientID  string

	RefreshToken string

	RedirectURI   string
	Scope         string
	Username      string
	Password      string
	AssertionType string
	Assertion     string

	// Token expiration in seconds. Change if different from default
	Expiration int32

	// Set if a refresh token should be generated
	GenerateRefresh bool

	// Data to be passed to storage. Not used by the library.
	UserData interface{}

	// Optional code_verifier as described in rfc7636
	CodeVerifier string
}

type AccessRequestAuthorizedCallback func(ar *AccessRequest) (bool, error)

type AccessTokenGenerator interface {
	GenerateAccessToken(ar *AccessData) (string, error)
	GenerateRefreshToken(ar *RefreshTokenData) (string, error)
}

type AccessTokenSubScoper interface {
	CheckSubScopes(accessTokenScopes string, refreshTokenScopes string) (string, error)
}

type AllowedAccessTypes []GrantType

type AllowedAuthorizeTypes []AuthorizeResponseType

type AuthRequestAuthorizedCallback func(ar *AuthorizationRequest) (bool, error)

type AuthRequestGenerator func() (*AuthorizationRequest, error)

type AuthorizationData struct {
	// ClientData information
	ClientID string

	// Authorization code
	Code string

	// Token expiration in seconds
	ExpiresIn int32

	// Requested scope
	Scope string

	// Redirect Uri from request
	RedirectURI string

	// State data from request
	State string

	// Date created
	CreatedAt time.Time

	// Data to be passed to storage. Not used by the library.
	UserData interface{}

	// Optional code_challenge as described in rfc7636
	CodeChallenge string
	// Optional code_challenge_method as described in rfc7636
	CodeChallengeMethod PKCECodeChallengeMethod
}

type AuthorizationRequest struct {
	ResponseType AuthorizeResponseType
	ClientID     string
	Scope        string
	RedirectURI  string
	State        string

	// Token expiration in seconds. Change if different from default.
	// If type = ResponseTypeToken, this expiration will be for the ACCESS token.
	Expiration int32

	// Optional code_challenge as described in rfc7636
	CodeChallenge string
	// Optional code_challenge_method as described in rfc7636
	CodeChallengeMethod PKCECodeChallengeMethod

	// (optional) Data to be passed to storage. Not used by the library.
	UserData interface{}
}

type AuthorizeResponseType string

type AuthorizeTokenGenerator interface {
	GenerateAuthorizeToken(data *AuthorizationData) (string, error)
}

type BasicAuth struct {
	Username string
	Password string
}

type ClientData struct {
	ClientID     string // Unique identifier for this client (https://tools.ietf.org/html/rfc6749#section-2.2)
	ClientSecret string // OAuth2 client secret (https://tools.ietf.org/html/rfc6749#section-2.3.1)
	RedirectURI  string // OAuth2 redirect URI
}

type DefaultAccessTokenGenerator struct {
}

type DefaultAccessTokenSubScoper struct {
}

type DefaultAuthorizeTokenGenerator struct {
}

type Error struct {
	Code ErrorCode
	Err  error

	// Human readable description of the error that occurred
	Message string
	// contains filtered or unexported fields
}

type ErrorCode string

type GrantType string

type NotFoundError struct {
	Err error
}

type OnAuthSuccessCallback func(ar *AuthorizationRequest, resp *Response) error

type PKCECodeChallengeMethod string

type RefreshTokenData struct {
	// ID of the client used to issue this refresh token
	ClientID string

	// Refresh token string
	RefreshToken string

	// Time at which refresh token was created
	CreatedAt time.Time

	// Redirect Uri from request
	RedirectURI string

	// Scope requested for this refresh token
	Scope string

	// Previous refresh token (if one existed)
	PreviousRefreshToken string

	// Type of grant used to issue this token
	GrantedVia GrantType

	// Data to be passed to storage. Not used by the library.
	UserData interface{}
}

type Response struct {
	StatusCode int
	Data       ResponseData
	Headers    http.Header
	// contains filtered or unexported fields
}

type ResponseData map[string]interface{}

type ResponseType int

type Server struct {
	Config                  *ServerConfig
	Storage                 Storage
	AuthorizeTokenGenerator AuthorizeTokenGenerator
	AccessTokenGenerator    AccessTokenGenerator
	AccessTokenSubScoper    AccessTokenSubScoper
	Now                     func() time.Time
}

type ServerConfig struct {
	// Authorization token expiration in seconds (default 5 minutes)
	AuthorizationExpiration int32

	// Access token expiration in seconds (default 1 hour)
	AccessExpiration int32

	// Token type to return
	TokenType string

	// List of allowed authorize types (only ResponseTypeCode by default)
	AllowedAuthorizeTypes AllowedAuthorizeTypes

	// List of allowed access types (only GrantTypeAuthorizationCode by default)
	AllowedAccessTypes AllowedAccessTypes

	// If true allows client secret also in params, else only in
	// Authorization header - default false
	AllowClientSecretInParams bool

	// Require PKCE for code flows for public OAuth clients - default false
	RequirePKCEForPublicClients bool

	// Separator to support multiple URIs in ClientData.GetRedirectURI().
	// If blank (the default), don't allow multiple URIs.
	RedirectURISeparator string

	// If true allows access request using GET, else only POST - default false
	AllowGetAccessRequest bool
}

type Storage interface {
	// Close the resources the Storage potentially holds. (Implements io.Closer)
	Close() error

	// GetClientData fetches the data for a ClientData by id
	// Should return NotFoundError, so an EInvalidClient error will be returned instead of EServerError
	GetClientData(ctx context.Context, id string) (*ClientData, error)

	// GetAuthorizeData looks up AuthorizationData by a code.
	//// ClientData information MUST be loaded together.
	// Optionally can return error if expired.
	GetAuthorizeData(ctx context.Context, code string) (*AuthorizationData, error)

	// SaveAuthorizeData saves authorize data.
	SaveAuthorizeData(ctx context.Context, data *AuthorizationData) error

	// DeleteAuthorizeData revokes or deletes the authorization code.
	DeleteAuthorizeData(ctx context.Context, code string) error

	// SaveAccessData writes AccessData to storage.
	SaveAccessData(ctx context.Context, data *AccessData) error

	// GetRefreshTokenData retrieves refresh token data from the token string.
	GetRefreshTokenData(ctx context.Context, token string) (*RefreshTokenData, error)

	// SaveRefreshTokenData saves refresh token data so it can be retrieved with GetRefreshTokenData
	SaveRefreshTokenData(ctx context.Context, data *RefreshTokenData) error

	// DeleteRefreshTokenData revokes or deletes a RefreshToken.
	DeleteRefreshTokenData(ctx context.Context, token string) error
}

type URIValidationError string