ident

type ChangeEmailRequest struct {
	ChangeEmailToken string `json:"changeEmailToken"`
}

type CompleteRegistrationRequest struct {
	RegistrationToken string `json:"registrationToken"`
	RedirectUri       string `json:"redirectUri"`
}

type DeleteUserResponse struct {
	NumDeleted int `json:"numDeleted"`
}

type DeleteUsersRequest = Selection

type Email struct {
	*openid.Userinfo
	RedirectUri string
}

type ExchangeSocialLoginRequest struct {
	Auth        openid.AuthResponse `json:"auth"`
	Scope       string              `json:"scope"`
	Nonce       string              `json:"nonce"`
	RedirectUri string              `json:"redirectUri"`
}

type ExchangeSocialLoginResponse = openid.TokenResponse

type GetUsersRequest struct {
	Selection
	PageToken string `json:"pageToken"`
	PageSize  int    `json:"pageSize"`
}

type GetUsersResponse struct {
	Users         []*User `json:"users"`
	NumFound      int     `json:"numFound"`
	NumTotal      int     `json:"numTotal"`
	NextPageToken string  `json:"nextPageToken,omitempty"`
}

type IdTokenClaims struct {
	openid.Userinfo
	Nonce string
}

type InsertUsersRequest struct {
	Users        []*NewUser `json:"users"`
	Issuer       string     `json:"iss"`
	IgnoreEmails bool       `json:"ignoreEmails"`
}

type InsertUsersResponse struct {
	Ids []string `json:"ids"`
}

type InstructEmailChangeRequest struct {
	Email string `json:"email"`
}

type InstructPasswordResetRequest struct {
	Email       string `json:"email"`
	RedirectUri string `json:"redirectUri"`
}

type LoginRequest struct {
	Username string `json:"username"`
	Password string `json:"password"`

	Nonce string `json:"nonce,omitempty"`
}

type LoginResponse = openid.TokenResponse

type LogoutRequest struct {
	RefreshToken string `json:"refreshToken"`
}

type NewUser struct {
	Userinfo

	Suspended bool `json:"suspended,omitempty"`

	Password Option[string] `json:"password,omitempty"`
}

type Option[T any] struct {
	// Value is the value of the option.
	Value T
	// Valid is true if the value is set.
	Valid bool
}

type RegistrationRequest struct {
	Userinfo
	Password    string `json:"password"`
	RedirectUri string `json:"redirectUri"`
}

type ResetPasswordRequest struct {
	ResetPasswordToken string `json:"resetPasswordToken"`
	Password           string `json:"password"`
	RedirectUri        string `json:"redirectUri"`
}

type Scopes = openid.Scopes

type Selection struct {
	All    bool     `json:"all,omitempty"`
	Ids    []string `json:"ids,omitempty"`
	Email  string   `json:"email,omitempty"`
	Search string   `json:"search,omitempty"`
}

type Server struct {
	*openid.Server

	Api map[string]http.Handler

	ScopeAdmin string

	SessionStore SessionStore
	UserStore    UserStore

	EmailHost                 string
	EmailHostPort             int
	EmailFrom                 string
	EmailFromDisplayName      string
	EmailEnableTLS            bool
	EmailEnaleStartTLS        bool
	EmailEnableAuthentication bool
	EmailUsername             string
	EmailPassword             string

	CompleteRegistrationTemplate *template.Template
	CompleteRegistrationSubject  string

	ChangeEmailTemplate *template.Template
	ChangeEmailSubject  string

	PasswordResetTemplate    *template.Template
	PasswordResetSubject     string
	PasswordResetDelay       time.Duration
	PasswordResetTokenExpiry time.Duration

	SendMail func(addr string, a smtp.Auth, from string, to []string, msg []byte) error
	// contains filtered or unexported fields
}

type SessionSelection struct {
	Id  string `json:"id"`  // session id
	Sub string `json:"sub"` // user id
}

type SessionStore interface {
	openid.SessionStore
	UpdateSessions(ctx context.Context, sess string, sub string, addScopes []string, removeScopes []string) (numUpdated int, err error)
}

type Social struct {
	Iss     string `json:"iss"`
	Profile string `json:"profile,omitempty"`
	Website string `json:"website,omitempty"`
	Picture string `json:"picture,omitempty"`
}

type SocialLoginRequest struct {
	Iss         string `json:"iss"`
	RedirectUri string `json:"redirectUri"`
}

type SocialLoginResponse struct {
	RedirectUri string `json:"redirectUri"`
}

type SocialProvider struct {
	Scope        string
	ClientId     string
	ClientSecret string
	Config       *openid.Configuration
}

type Store interface {
	UserStore
	SessionStore
}

type UpdateSessionRequest struct {
	SessionSelection

	AddScopes    []string `json:"addScopes"`
	RemoveScopes []string `json:"removeScopes"`
}

type UpdateSessionResponse struct {
	NumUpdated int `json:"numUpdated"`
}

type UpdateUserResponse struct {
	NumUpdated int `json:"numUpdated"`
}

type UpdateUsersRequest struct {
	Selection  Selection  `json:"sel"`
	UserUpdate UserUpdate `json:"update"`
}

type User struct {
	Userinfo

	Suspended bool `json:"suspended,omitempty"`

	Socials []Social `json:"socials,omitempty"`
}

type UserStore interface {
	openid.UserStore

	LoginUser(ctx context.Context, username string, password string) (sub string, err error)

	RegisterUsers(ctx context.Context, iss string, ignoreEmails bool, users []*NewUser) (ids []string, err error)

	UpdateUsers(ctx context.Context, sel Selection, u *UserUpdate) (numUpdated int, err error)

	DeleteUsers(ctx context.Context, sel Selection) (numDeleted int, err error)

	FindUsers(ctx context.Context, sel Selection, pageToken string, pageSize int) (users []*User, nextPageToken string, err error)

	CountUsers(ctx context.Context, sel Selection) (numSel int, numTotal int, err error)
}

type UserUpdate struct {
	Name       Option[string] `json:"name,omitempty"`
	GivenName  Option[string] `json:"given_name,omitempty"`
	FamilyName Option[string] `json:"family_name,omitempty"`
	MiddleName Option[string] `json:"middle_name,omitempty"`
	Nickname   Option[string] `json:"nickname,omitempty"`

	PreferredUsername Option[string] `json:"preferred_username,omitempty"`
	// requires priviliged scope
	PreferredUsernameVerified Option[bool] `json:"preferred_username_verified,omitempty"`

	Email Option[string] `json:"email,omitempty"`
	// requires priviliged scope
	EmailVerified Option[bool] `json:"email_verified,omitempty"`

	Gender      Option[string] `json:"gender,omitempty"`
	Birthdate   Option[string] `json:"birthdat,omitempty"`
	Zoneinfo    Option[string] `json:"zoneinfo,omitempty"`
	Locale      Option[string] `json:"locale,omitempty"`
	PhoneNumber Option[string] `json:"phone_number,omitempty"`
	// requires priviliged scope
	PhoneNumberVerified Option[bool]    `json:"phone_number_verified,omitempty"`
	Address             *openid.Address `json:"address,omitempty"`

	// requires priviliged scope
	Suspended Option[bool] `json:"suspended,omitempty"`

	NewPassword Option[string] `json:"new_password,omitempty"`
	// omitting this field requires priviliged scope
	OldPassword Option[string] `json:"old_password,omitempty"`
}

type Userinfo = openid.Userinfo