auth

type Authenticator interface {
	// AuthenticateRequest takes an HTTP request and
	// attempts to authenticate it.
	// It returns the email address of the authenticated
	// user, or an error.
	// TODO: maybe this should be Authenticate(string) (string, error)
	// Taking the Authorization header and returning the email address
	AuthenticateRequest(*http.Request) (string, string, error)
	IsRefreshTokenValid(string) (bool, error, error)
}

type FakeAuthenticator struct {
	MockAuthenticateRequest func(r *http.Request) (string, string, error)
	MockIsRefreshTokenValid func(string) (bool, error, error)
}

type FakeOAuthClient struct {
	MockAuthCodeURL func(string, ...oauth2.AuthCodeOption) string
	MockExchange    func(context.Context, string) (*oauth2.Token, error)
}

type GoogleAuthenticator struct {
	OAuthClient            OAuthClient
	SharedSecret           string
	TrustedUserEmailDomain string
}

type GoogleOAuthClient struct {
	Config *oauth2.Config
}

type IntegrationTestOAuthClient struct{}

type OAuthClient interface {
	// LookupAccessToken takes an access token
	// and returns the email address associated
	// with it
	LookupAccessToken(string) (string, error)
}