jwt

type ClaimsSet interface {

	// GetISS is the issuer of the JWT.
	GetISS() (string, error)

	// GetSUB is the subject of the JWT.
	GetSUB() (string, error)

	// GetAUD is the audience (Recipient for which the JWT is intended.)
	GetAUD() (string, error)

	// GetEXP is the time after which the JWT expires.
	GetEXP() (NumericDate, error)

	// GetNBF is the time before the JWT must not be accepted for processing.
	GetNBF() (NumericDate, error)

	// GetIAT is the time at which the JWT was issued.
	// It can be used to determine the age of the JWT.
	GetIAT() (NumericDate, error)

	// GetJTI is a unique identifier. It can be used to prevent the JWT
	// from being replayed; it allows a token to be used only once.
	GetJTI() (string, error)
}

type CustomClaimsSet interface {
	ClaimsSet
	Validate() error
}

type KeyPair struct {
	PrivateKey crypto.PrivateKey
	PublicKey  crypto.PublicKey
}

type MapClaims map[string]any

type NumericDate int64

type RawToken []byte

type RegisteredClaims struct {
	Issuer         string      `json:"iss,omitempty"`
	Subject        string      `json:"sub,omitempty"`
	Audience       string      `json:"aud,omitempty"`
	ExpirationTime NumericDate `json:"exp,omitempty"`
	NotBeforeTime  NumericDate `json:"nbf,omitempty"`
	IssuedAtTime   NumericDate `json:"iat,omitempty"`
	ID             string      `json:"jti,omitempty"`
}

type Section uint8

type SigningMethod interface {

	// Name should return the name of the signing method.
	Name() string

	// GenerateKeyPair should generate and return a key pair complient
	// with the implementing signing method.
	GenerateKeyPair() *KeyPair

	// Sign should take a base64 encoded header and payload and return a
	// valid signature.
	Sign(partialToken []byte, key crypto.PrivateKey) (signature []byte, err error)

	// Verify should take a token and signature and verify the token using the
	// provided signature.
	Verify(partialToken []byte, signature []byte, key crypto.PublicKey) error
}

type SigningMethodECDSA struct {
	KeySize   int
	CurveBits int
	// contains filtered or unexported fields
}

type SigningMethodHMAC struct {
	// contains filtered or unexported fields
}

type SigningMethodRSA struct {
	// contains filtered or unexported fields
}

type SigningMethodRSAPSS struct {
	// contains filtered or unexported fields
}

type Token struct {
	RawToken
	Header    TokenHeader
	Payload   MapClaims
	Method    SigningMethod
	Signature []byte
	Valid     bool
}

type TokenHeader struct {
	Typ string `json:"typ"`
	Alg string `json:"alg"`
}

type TokenManager struct {
	Validator
	// contains filtered or unexported fields
}

type ValidateClaimFunc func(name string, claim any) error

type Validator struct {

	// Margin is an optional time margin that can be applied
	// to account for clock skew
	Margin time.Duration

	// ValidateIAT specifies whether the issued at time claim
	// will be validated.
	ValidateIAT bool

	// ExpectedAUD holds the audience this token expects; if
	// it is left as an empty string, audience validation will
	// be disabled.
	ExpectedAUD string

	// ExpectedISS holds the issuer this token expects; if
	// it is left as an empty string, issuer validation will
	// be disabled.
	ExpectedISS string

	// ExpectedSUB holds the subject this token expects; if
	// it is left as an empty string, subject validation will
	// be disabled.
	ExpectedSUB string

	Method SigningMethod
}