gate

type ClaimSet struct {
	Iss   string `json:"iss"`             // email address of the client_id of the application making the access token request
	Scope string `json:"scope,omitempty"` // space-delimited list of the permissions the application requests
	Aud   string `json:"aud"`             // descriptor of the intended target of the assertion (Optional).
	Exp   int64  `json:"exp"`             // the expiration time of the assertion (seconds since Unix epoch)
	Iat   int64  `json:"iat"`             // the time the assertion was issued (seconds since Unix epoch)
	Typ   string `json:"typ,omitempty"`   // token type (Optional).

	// Email for which the application is requesting delegated access (Optional).
	Sub string `json:"sub,omitempty"`
}

type Client interface {
	// GenerateJWT generates a JWT for the given service account
	GenerateJWT(serviceAccount string, expiry int64) (string, error)
	// AuthenticateRequest authenticates the given request for the given service account
	AuthenticateRequest(req *http.Request, serviceAccount string, expiry int64) error
}