openid

type Auth struct {
	SecretFunc token.SecretFunc //required
	Expire     time.Duration
	Realm      string //required

	//optional. Authorize check whether this request could access some resource or API based on json claims.
	//Typically, this method should communicate with a RBAC, ABAC system
	Authorize func(payload map[string]interface{}, req *http.Request) error

	//optional.
	// this function control whether a request should be validate or not
	// if this func is nil, validate all requests.
	MustAuth func(req *http.Request) bool
}

type Handler struct {
}

type JWTClaims struct {
	goJwt.StandardClaims

	Authorities           []string               `json:"authorities"`
	AdditionalInformation map[string]interface{} `json:"additionalInformation"`
	Scope                 []string               `json:"scope"`
}

type JWTToken struct {
	Claims *JWTClaims `json:"claims"`
	Value  string     `json:"value"`
}

type OpenIDTokenManager struct {
}

type SessionToken struct {
	Value                 string                 `json:"value"`
	IssueAt               int64                  `json:"issueAt"`
	ExpiresIn             int64                  `json:"expiresIn"`
	NotBefore             int64                  `json:"notBefore"`
	Username              string                 `json:"username"`
	AdditionalInformation map[string]interface{} `json:"additionalInformation"`
}

type TokenResponse struct {
	TokenType    string        `json:"tokenType"`
	AccessToken  *SessionToken `json:"accessToken"`
	Refreshtoken *SessionToken `json:"refreshToken"`
	IDToken      *JWTToken     `json:"idToken"`
	Scope        []string      `json:"scope"`
}