oauth2

type Audience []string

type Claims struct {
	Issuer    string       `json:"iss,omitempty"`
	Subject   string       `json:"sub,omitempty"`
	Audience  Audience     `json:"aud,omitempty"`
	Scp       Scopes       `json:"scp,omitempty"`
	Scope     Scopes       `json:"scope,omitempty"`
	Expiry    *NumericDate `json:"exp,omitempty"`
	NotBefore *NumericDate `json:"nbf,omitempty"`
	IssuedAt  *NumericDate `json:"iat,omitempty"`
	ID        string       `json:"jti,omitempty"`
}

type ExactScopeStrategyMatcher []string

type Expectation struct {
	TrustedIssuers    []string      `mapstructure:"issuers"`
	ScopesMatcher     ScopesMatcher `mapstructure:"scopes"`
	Audiences         []string      `mapstructure:"audience"`
	AllowedAlgorithms []string      `mapstructure:"allowed_algorithms"`
	ValidityLeeway    time.Duration `mapstructure:"validity_leeway"`
}

type HierarchicScopeStrategyMatcher []string

type IntrospectionResponse struct {
	Claims

	Active    bool   `json:"active,omitempty"`
	ClientID  string `json:"client_id,omitempty"`
	TokenType string `json:"token_type,omitempty"`
}

type MetadataEndpoint struct {
	endpoint.Endpoint `mapstructure:",squash"`

	DisableIssuerIdentifierVerification bool `mapstructure:"disable_issuer_identifier_verification"`
}

type NoopMatcher struct{}

type NumericDate int64

type ResolverAdapterFunc func(ctx context.Context, args map[string]any) (ServerMetadata, error)

type ScopeMatcherFactory func(scopes []string) (ScopesMatcher, error)

type Scopes []string

type ScopesMatcher interface {
	Match(scopes []string) error
}

type ServerMetadata struct {
	Issuer                string
	JWKSEndpoint          *endpoint.Endpoint
	IntrospectionEndpoint *endpoint.Endpoint
}

type ServerMetadataResolver interface {
	Get(ctx context.Context, args map[string]any) (ServerMetadata, error)
}

type WildcardScopeStrategyMatcher []string