auth

type AuthorizeParams struct {
	ClientID      string
	RedirectURI   string
	Scopes        []string
	State         string
	CodeChallenge string
	AuthorizeURL  string // tests may override; production uses ProductionOAuthAuthorize
}

type CallbackResult struct {
	Code  string
	State string
	Error string
	Raw   url.Values
}

type ExchangeParams struct {
	TokenURL     string // tests inject; production must be ProductionOAuthToken
	ClientID     string
	ClientSecret string
	Code         string
	RedirectURI  string
	Verifier     string
	HTTPClient   *http.Client
}

type KeyringStore struct {
	Service string
}

type LoginOptions struct {
	Profile      string
	ClientID     string
	RedirectURI  string
	Scopes       []string
	NoOpen       bool
	AuthorizeURL string
	TokenURL     string
	HTTPClient   *http.Client
	TokenStore   TokenStore
	SecretSource SecretSource
	Stdout       io.Writer // unused for secrets; reserved
	Stderr       io.Writer
	OpenURL      func(string) error
	Now          func() time.Time
	CallbackWait time.Duration
}

type LoginResult struct {
	Profile   string
	Scopes    []string
	ExpiresAt time.Time
	IssuedAt  time.Time
}

type LoopbackServer struct {
	Listener net.Listener
	Path     string
	Timeout  time.Duration
}

type MemoryStore struct {
	Fail bool
	// contains filtered or unexported fields
}

type PKCE struct {
	Verifier  string
	Challenge string
	Method    string
}

type SecretSource struct {
	Env    func(string) string
	Stdin  io.Reader
	Stderr io.Writer
	IsTTY  func() bool
}

type TokenResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
	ExpiresIn   int64  `json:"expires_in"`
	Scope       string `json:"scope"`
	Error       string `json:"error"`
	ErrorDesc   string `json:"error_description"`
}

type TokenStore interface {
	Set(profile, token string) error
	Get(profile string) (string, error)
	Delete(profile string) error
}