consts

const (
	ClaimJWTID                               = "jti"
	ClaimSessionID                           = "sid"
	ClaimIssuedAt                            = "iat"
	ClaimNotBefore                           = "nbf"
	ClaimRequestedAt                         = "rat"
	ClaimExpirationTime                      = "exp"
	ClaimAuthenticationTime                  = "auth_time"
	ClaimIssuer                              = valueIss
	ClaimSubject                             = "sub"
	ClaimAudience                            = "aud"
	ClaimGroups                              = "groups"
	ClaimFullName                            = "name"
	ClaimPreferredUsername                   = "preferred_username"
	ClaimPreferredEmail                      = "email"
	ClaimEmailVerified                       = "email_verified"
	ClaimAuthorizedParty                     = "azp"
	ClaimAuthenticationContextClassReference = "acr"
	ClaimAuthenticationMethodsReference      = "amr"
	ClaimClientIdentifier                    = valueClientID
	ClaimScope                               = valueScope
	ClaimScopeNonStandard                    = "scp"
	ClaimExtra                               = "ext"
	ClaimActive                              = "active"
	ClaimUsername                            = "username"
	ClaimTokenIntrospection                  = "token_introspection"
	ClaimAccessTokenHash                     = "at_hash"
	ClaimCodeHash                            = "c_hash"
	ClaimStateHash                           = "s_hash"
	ClaimNonce                               = valueNonce
	ClaimAuthorizedActor                     = "may_act"
	ClaimActor                               = "act"
)

const (
	ClientAuthMethodClientSecretBasic = "client_secret_basic"
	ClientAuthMethodClientSecretPost  = "client_secret_post"
	ClientAuthMethodClientSecretJWT   = "client_secret_jwt"
	ClientAuthMethodPrivateKeyJWT     = "private_key_jwt"
	ClientAuthMethodNone              = valueNone
)

const (
	FormParameterState                                     = "state"
	FormParameterAuthorizationCode                         = valueCode
	FormParameterClientID                                  = valueClientID
	FormParameterClientSecret                              = "client_secret"
	FormParameterRequest                                   = "request"
	FormParameterRequestURI                                = "request_uri"
	FormParameterRedirectURI                               = "redirect_uri"
	FormParameterNonce                                     = valueNonce
	FormParameterResponse                                  = "response"
	FormParameterResponseMode                              = "response_mode"
	FormParameterResponseType                              = "response_type"
	FormParameterCodeChallenge                             = "code_challenge"
	FormParameterCodeVerifier                              = "code_verifier"
	FormParameterCodeChallengeMethod                       = "code_challenge_method"
	FormParameterClientAssertionType                       = "client_assertion_type"
	FormParameterClientAssertion                           = "client_assertion"
	FormParameterAssertion                                 = "assertion"
	FormParameterGrantType                                 = "grant_type"
	FormParameterScope                                     = valueScope
	FormParameterRegistration                              = "registration"
	FormParameterAudience                                  = "audience"
	FormParameterRefreshToken                              = valueRefreshToken
	FormParameterIssuer                                    = valueIss
	FormParameterToken                                     = "token"
	FormParameterTokenTypeHint                             = "token_type_hint"
	FormParameterError                                     = "error"
	FormParameterErrorHint                                 = "error_hint"
	FormParameterErrorDescription                          = "error_description"
	FormParameterUsername                                  = "username"
	FormParameterPassword                                  = valuePassword
	FormParameterAccessToken                               = valueAccessToken
	FormParameterMaximumAge                                = "max_age"
	FormParameterPrompt                                    = "prompt"
	FormParameterDisplay                                   = "display"
	FormParameterAuthenticationContextClassReferenceValues = "acr_values"
	FormParameterIDTokenHint                               = "id_token_hint"
	FormParameterRequestedTokenType                        = "requested_token_type"
	FormParameterIssuedTokenType                           = "issued_token_type"
	FormParameterSubjectTokenType                          = "subject_token_type"
	FormParameterSubjectToken                              = "subject_token"
	FormParameterActorTokenType                            = "actor_token_type"
	FormParameterActorToken                                = "actor_token"
	FormParameterDeviceCode                                = valueDeviceCode
	FormParameterUserCode                                  = valueUserCode
)

const (
	GrantTypeImplicit                         = valueImplicit
	GrantTypeRefreshToken                     = valueRefreshToken
	GrantTypeAuthorizationCode                = "authorization_code"
	GrantTypeClientCredentials                = "client_credentials"
	GrantTypeResourceOwnerPasswordCredentials = valuePassword
	GrantTypeOAuthJWTBearer                   = "urn:ietf:params:oauth:grant-type:jwt-bearer"     //nolint:gosec
	GrantTypeOAuthDeviceCode                  = "urn:ietf:params:oauth:grant-type:device_code"    //nolint:gosec
	GrantTypeOAuthTokenExchange               = "urn:ietf:params:oauth:grant-type:token-exchange" //nolint:gosec
)

const (
	HeaderContentType    = "Content-Type"
	HeaderCacheControl   = "Cache-Control"
	HeaderPragma         = "Pragma"
	HeaderAuthorization  = "Authorization"
	HeaderLocation       = "Location"
	HeaderAcceptLanguage = "Accept-Language"
)

const (
	ContentTypeApplicationURLEncodedForm        = "application/x-www-form-urlencoded"
	ContentTypeApplicationJSON                  = "application/json; charset=utf-8"
	ContentTypeApplicationTokenIntrospectionJWT = "application/token-introspection+jwt; charset=utf-8"
	ContentTypeTextHTML                         = "text/html; charset=utf-8"
)

const (
	PragmaNoCache       = "no-cache"
	CacheControlNoStore = "no-store"
)

const (
	SchemeHTTP  = "http"
	SchemeHTTPS = "https"
)

const (
	JSONWebTokenHeaderKeyIdentifier = "kid"
	JSONWebTokenHeaderAlgorithm     = "alg"
	JSONWebTokenHeaderUse           = "use"
	JSONWebTokenHeaderType          = "typ"
)

const (
	JSONWebTokenUseSignature  = "sig"
	JSONWebTokenUseEncryption = "enc"
)

const (
	JSONWebTokenTypeJWT                = "JWT"
	JSONWebTokenTypeAccessToken        = "at+jwt"
	JSONWebTokenTypeTokenIntrospection = "token-introspection+jwt"
)

const (
	AccessResponseRefreshToken      = valueRefreshToken
	AccessResponseAccessToken       = valueAccessToken
	AccessResponseIDToken           = valueIDToken
	AccessResponseExpiresIn         = "expires_in"
	AccessResponseScope             = valueScope
	AccessResponseAuthorizationCode = valueCode
	AccessResponseTokenType         = "token_type"
)

const (
	DeviceCodeResponseExpiresIn               = valueExpiresIn
	DeviceCodeResponseStatus                  = "status"
	DeviceCodeResponseDeviceCode              = valueDeviceCode
	DeviceCodeResponseUserCode                = valueUserCode
	DeviceCodeResponseVerificationURI         = "verification_uri"
	DeviceCodeResponseVerificationURIComplete = "verification_uri_complete"
	DeviceCodeResponseInterval                = "interval"
)

const (
	ResponseModeNone        = valueNone
	ResponseModeFormPost    = "form_post"
	ResponseModeQuery       = "query"
	ResponseModeFragment    = "fragment"
	ResponseModeJWT         = "jwt"
	ResponseModeFormPostJWT = "form_post.jwt"
	ResponseModeQueryJWT    = "query.jwt"
	ResponseModeFragmentJWT = "fragment.jwt"
)

const (
	ResponseTypeAuthorizationCodeFlow = valueCode
	ResponseTypeImplicitFlowIDToken   = valueIDToken
	ResponseTypeImplicitFlowToken     = "token"
	ResponseTypeImplicitFlowBoth      = "id_token token"
	ResponseTypeHybridFlowIDToken     = "code id_token"
	ResponseTypeHybridFlowToken       = "code token"
	ResponseTypeHybridFlowBoth        = "code id_token token"
	ResponseTypeNone                  = valueNone
)

const (
	ScopeOpenID        = "openid"
	ScopeOffline       = "offline"
	ScopeOfflineAccess = "offline_access"
	ScopeEmail         = "email"
)

const (
	PromptTypeNone          = valueNone
	PromptTypeLogin         = "login"
	PromptTypeConsent       = "consent"
	PromptTypeSelectAccount = "select_account"
)

const (
	PKCEChallengeMethodPlain  = "plain"
	PKCEChallengeMethodSHA256 = "S256"
)

const (
	CodeDevice = valueDeviceCode
	CodeUser   = "user_code"
)

const (
	TokenTypeAccessToken  = "access_token"
	TokenTypeRefreshToken = "refresh_token"
)

const (
	TokenTypeRFC8693AccessToken  = "urn:ietf:params:oauth:token-type:access_token"
	TokenTypeRFC8693RefreshToken = "urn:ietf:params:oauth:token-type:refresh_token"
	TokenTypeRFC8693IDToken      = "urn:ietf:params:oauth:token-type:id_token"
	TokenTypeRFC8693JWT          = "urn:ietf:params:oauth:token-type:jwt"
)

const (
	ClientAssertionTypeJWTBearer = "urn:ietf:params:oauth:client-assertion-type:jwt-bearer" //nolint:gosec
)

const (
	JSONWebTokenAlgNone = valueNone
)

const (
	PrefixRequestURI = "urn:ietf:params:oauth:request_uri:"
)