oidc

type OIDCAuthorizeRequest struct {
	ClientID     string
	Nonce        string
	RedirectURI  string
	ResponseType string
	State        string
	Scope        string

	// Required PKCE fields
	CodeChallenge        string
	CodeChallengeMedthod string
}

type OIDCAuthorizeResponse struct {
	Code  string
	State string
	Error error
}

type OIDCConfig struct {
	Issuer              *url.URL
	IssuerAuthorizePath string
	IssuerTokenPath     string
	IssuerCAPath        string
	IssuerUserScope     string

	ClientID      string
	OfflineAccess bool

	CallbackAddr          string
	CallbackAuthorizePath string

	KubernetesClusterID string
	KubernetesReauth    bool
}

type OIDCTokenRequest struct {
	ClientID     string
	Code         string
	GrantType    string
	RedirectURI  string
	RefreshToken string
	Scope        string

	// Required PKCE field in lieu of client secret
	CodeVerifier string
}

type OIDCTokenResponse struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int    `json:"expires_in"`
	RefreshToken string `json:"refresh_token"`
	IDToken      string `json:"id_token"`
	Scope        string `json:"scope"`

	// Set by handler
	Error error
}