tokenv1

type Actor struct {

	// OPTIONAL. Token issuer URI
	Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// OPTIONAL. Identity subject
	Subject string `protobuf:"bytes,2,opt,name=subject,proto3" json:"subject,omitempty"`
	// OPTIONAL. Client identifier.
	ClientId string `protobuf:"bytes,3,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	// OPTIONAL. Actor chain.
	Act *Actor `protobuf:"bytes,4,opt,name=act,proto3" json:"act,omitempty"`
	// contains filtered or unexported fields
}

type IntrospectRequest struct {

	// REQUIRED. Token issuer URL.
	Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// REQUIRED. Client that invoke the token introspection.
	Client *v1.Client `protobuf:"bytes,2,opt,name=client,proto3" json:"client,omitempty"`
	// REQUIRED.  The string value of the token.  For access tokens, this
	// is the "access_token" value returned from the token endpoint
	// defined in OAuth 2.0 [RFC6749], Section 5.1.  For refresh tokens,
	// this is the "refresh_token" value returned from the token endpoint
	// as defined in OAuth 2.0 [RFC6749], Section 5.1.  Other token types
	// are outside the scope of this specification.
	Token string `protobuf:"bytes,3,opt,name=token,proto3" json:"token,omitempty"`
	// OPTIONAL.  A hint about the type of the token submitted for
	// introspection.  The protected resource MAY pass this parameter to
	// help the authorization server optimize the token lookup.  If the
	// server is unable to locate the token using the given hint, it MUST
	// extend its search across all of its supported token types.  An
	// authorization server MAY ignore this parameter, particularly if it
	// is able to detect the token type automatically.  Values for this
	// field are defined in the "OAuth Token Type Hints" registry defined
	// in OAuth Token Revocation [RFC7009]
	TokenTypeHint *string `protobuf:"bytes,4,opt,name=token_type_hint,json=tokenTypeHint,proto3,oneof" json:"token_type_hint,omitempty"`
	// contains filtered or unexported fields
}

type IntrospectResponse struct {
	Error *v11.Error `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	// OPTIONAL. The matching token instance.
	Token *Token `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
	// contains filtered or unexported fields
}

type IntrospectionServiceClient interface {
	Introspect(ctx context.Context, in *IntrospectRequest, opts ...grpc.CallOption) (*IntrospectResponse, error)
}

type IntrospectionServiceServer interface {
	Introspect(context.Context, *IntrospectRequest) (*IntrospectResponse, error)
}

type OAuthTokenResponse struct {
	AccessToken  string  `protobuf:"bytes,1,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	TokenType    string  `protobuf:"bytes,2,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
	ExpiresIn    uint64  `protobuf:"fixed64,3,opt,name=expires_in,json=expiresIn,proto3" json:"expires_in,omitempty"`
	RefreshToken *string `protobuf:"bytes,4,opt,name=refresh_token,json=refreshToken,proto3,oneof" json:"refresh_token,omitempty"`
	IdToken      *string `protobuf:"bytes,5,opt,name=id_token,json=idToken,proto3,oneof" json:"id_token,omitempty"`
	// contains filtered or unexported fields
}

type RevocatonServiceClient interface {
	Revoke(ctx context.Context, in *RevokeRequest, opts ...grpc.CallOption) (*RevokeResponse, error)
}

type RevocatonServiceServer interface {
	Revoke(context.Context, *RevokeRequest) (*RevokeResponse, error)
}

type RevokeRequest struct {

	// REQUIRED. Token issuer URL.
	Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// REQUIRED. Client that invoke the token revocation.
	Client *v1.Client `protobuf:"bytes,2,opt,name=client,proto3" json:"client,omitempty"`
	// REQUIRED.  The token that the client wants to get revoked.
	Token string `protobuf:"bytes,3,opt,name=token,proto3" json:"token,omitempty"`
	// OPTIONAL.  A hint about the type of the token
	// submitted for revocation.  Clients MAY pass this parameter in
	// order to help the authorization server to optimize the token
	// lookup.  If the server is unable to locate the token using
	// the given hint, it MUST extend its search across all of its
	// supported token types.  An authorization server MAY ignore
	// this parameter, particularly if it is able to detect the
	// token type automatically.  This specification defines two
	// such values:
	TokenTypeHint *string `protobuf:"bytes,4,opt,name=token_type_hint,json=tokenTypeHint,proto3,oneof" json:"token_type_hint,omitempty"`
	// contains filtered or unexported fields
}

type RevokeResponse struct {
	Error *v11.Error `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type Token struct {

	// REQUIRED. Token issuer.
	Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// REQUIRED. Token type.
	TokenType TokenType `protobuf:"varint,2,opt,name=token_type,json=tokenType,proto3,enum=oidc.token.v1.TokenType" json:"token_type,omitempty"`
	// REQUIRED. Token identifier.
	TokenId string `protobuf:"bytes,3,opt,name=token_id,json=tokenId,proto3" json:"token_id,omitempty"`
	// REQUIRED. Token meta output of token endpoint.
	Metadata *TokenMeta `protobuf:"bytes,4,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// REQUIRED. Token status.
	Status TokenStatus `protobuf:"varint,5,opt,name=status,proto3,enum=oidc.token.v1.TokenStatus" json:"status,omitempty"`
	// REQUIRED. Final token value.
	Value string `protobuf:"bytes,6,opt,name=value,proto3" json:"value,omitempty"`
	// OPTIONAL. Phantom token value.
	Phantom *string `protobuf:"bytes,7,opt,name=phantom,proto3,oneof" json:"phantom,omitempty"`
	// OPTIONAL. Token confirmation
	Confirmation *TokenConfirmation `protobuf:"bytes,8,opt,name=confirmation,proto3" json:"confirmation,omitempty"`
	// OPTIONAL. Actor.
	Actor []*Actor `protobuf:"bytes,9,rep,name=actor,proto3" json:"actor,omitempty"`
	// OPTIONAL. Authorized Actor.
	MayAct []*Actor `protobuf:"bytes,10,rep,name=may_act,json=mayAct,proto3" json:"may_act,omitempty"`
	// contains filtered or unexported fields
}

type TokenConfirmation struct {
	Jkt string `protobuf:"bytes,1,opt,name=jkt,proto3" json:"jkt,omitempty"`
	// contains filtered or unexported fields
}

type TokenMeta struct {

	// REQUIRED. Token issuer URI
	Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// REQUIRED. Identity subject
	Subject string `protobuf:"bytes,2,opt,name=subject,proto3" json:"subject,omitempty"`
	// REQUIRED. Unix timestamp of the creation date
	IssuedAt uint64 `protobuf:"fixed64,3,opt,name=issued_at,json=issuedAt,proto3" json:"issued_at,omitempty"`
	// REQUIRED. Unix timestamp of the usability date
	NotBefore uint64 `protobuf:"fixed64,4,opt,name=not_before,json=notBefore,proto3" json:"not_before,omitempty"`
	// REQUIRED. Unix timestamp of the expiration date
	ExpiresAt uint64 `protobuf:"fixed64,5,opt,name=expires_at,json=expiresAt,proto3" json:"expires_at,omitempty"`
	// REQUIRED. Token owner.
	ClientId string `protobuf:"bytes,6,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	// REQUIRED. Space delimited JSON string containing requested scope.
	Scope string `protobuf:"bytes,7,opt,name=scope,proto3" json:"scope,omitempty"`
	// REQUIRED. Targeted application identifier.
	Audience string `protobuf:"bytes,8,opt,name=audience,proto3" json:"audience,omitempty"`
	// OPTIONAL. String specifying an authentication context class reference value
	// that identifies the authentication context class that was satisfied by the
	// user-authentication event performed.
	// https://datatracker.ietf.org/doc/html/rfc9470#name-oauth-20-token-introspectio
	Acr *string `protobuf:"bytes,9,opt,name=acr,proto3,oneof" json:"acr,omitempty"`
	// OPTIONAL. Time when the user authentication occurred. A JSON numeric value
	// representing the number of seconds from 1970-01-01T00:00:00Z UTC until the
	// date/time of the authentication event.
	// https://datatracker.ietf.org/doc/html/rfc9470#name-oauth-20-token-introspectio
	AuthTime *uint64 `protobuf:"fixed64,10,opt,name=auth_time,json=authTime,proto3,oneof" json:"auth_time,omitempty"`
	// contains filtered or unexported fields
}

type TokenStatus int32

type TokenType int32

type UnimplementedIntrospectionServiceServer struct {
}

type UnimplementedRevocatonServiceServer struct {
}

type UnsafeIntrospectionServiceServer interface {
	// contains filtered or unexported methods
}

type UnsafeRevocatonServiceServer interface {
	// contains filtered or unexported methods
}