proxy

type DiscoveryResponse struct {
	ExpiredURL string `json:"expired_endpoint"`
	LogoutURL  string `json:"logout_endpoint"`
	TokenURL   string `json:"token_endpoint"`
	LoginURL   string `json:"login_endpoint"`
}

type OauthProxy struct {
	Provider  *oidc3.Provider
	Config    *config.Config
	Endpoint  *url.URL
	IdpClient *gocloak.GoCloak
	Listener  net.Listener
	Log       *zap.Logger

	Router http.Handler

	Server   *http.Server
	Store    storage.Storage
	Upstream reverseProxy

	GetIdentity  func(req *http.Request, tokenCookie string, tokenHeader string) (*UserContext, error)
	Cm           *cookie.Manager
	WithOAuthURI func(uri string) string
	// contains filtered or unexported fields
}

type OpenIDRoundTripper struct {
	http.Header
	// contains filtered or unexported fields
}

type PAT struct {
	Token *gocloak.JWT
	// contains filtered or unexported fields
}

type RPT struct {
	Token string
	// contains filtered or unexported fields
}

type RealmRoles struct {
	Roles []string `json:"roles"`
}

type RequestScope struct {
	// AccessDenied indicates the request should not be proxied on
	AccessDenied bool
	// Identity is the user Identity of the request
	Identity *UserContext
	// The parsed (unescaped) value of the request path
	Path string
	// Preserve the original request path: KEYCLOAK-10864, KEYCLOAK-11276, KEYCLOAK-13315
	// The exact path received in the request, if different than Path
	RawPath string
	Logger  *zap.Logger
}

type TokenResponse struct {
	TokenType    string  `json:"token_type"`
	AccessToken  string  `json:"access_token"`
	IDToken      string  `json:"id_token"`
	RefreshToken string  `json:"refresh_token,omitempty"`
	ExpiresIn    float64 `json:"expires_in"`
	Scope        string  `json:"scope,omitempty"`
}

type UserContext struct {
	// the id of the user
	ID string
	// the audience for the token
	Audiences []string
	// whether the context is from a session cookie or authorization header
	BearerToken bool
	// the email associated to the user
	Email string
	// the expiration of the access token
	ExpiresAt time.Time
	// groups is a collection of groups where user is member
	Groups []string
	// a name of the user
	Name string
	// preferredName is the name of the user
	PreferredName string
	// roles is a collection of roles the users holds
	Roles []string
	// rawToken
	RawToken string
	// claims
	Claims map[string]interface{}
	// permissions
	Permissions authorization.Permissions
}