api

type AttestationObject struct {
	AuthData     AuthenticatorData
	RawAuthData  []byte                 `json:"authData"`
	Format       string                 `json:"fmt"`
	AttStatement map[string]interface{} `json:"attStmt,omitempty"`
}

type AttestedCredentialData struct {
	AAGUID              []byte `json:"aaguid"`
	CredentialID        []byte `json:"credential_id"`
	CredentialPublicKey []byte `json:"public_key"`
}

type AuthenticatorAssertionResponse struct {
	AuthenticatorResponse
	AuthenticatorData URLEncodedBase64 `json:"authenticatorData"`
	Signature         URLEncodedBase64 `json:"signature"`
	UserHandle        URLEncodedBase64 `json:"userHandle,omitempty"`
}

type AuthenticatorAttestationResponse struct {
	AuthenticatorResponse
	AttestationObject URLEncodedBase64 `json:"attestationObject"`
	Transports        []string         `json:"transports,omitempty"`
}

type AuthenticatorData struct {
	RPIDHash []byte                 `json:"rpid"`
	Flags    AuthenticatorFlags     `json:"flags"`
	Counter  uint32                 `json:"sign_count"`
	AttData  AttestedCredentialData `json:"att_data"`
	ExtData  []byte                 `json:"ext_data"`
}

type AuthenticatorFlags byte

type AuthenticatorResponse struct {
	ClientDataJSON URLEncodedBase64 `json:"clientDataJSON"`
}

type AuthenticatorTransport string

type CeremonyType string

type ClientCreateRequest struct {
	ClientID     string `json:"client_id" binding:"required" example:"cli"`
	ClientSecret string `json:"client_secret" binding:"required" example:"P@ssw0rd"`
	RedirectUri  string `json:"redirect_uri" binding:"required" example:"http://localhost:8080/callback"`
	UserEmail    string `json:"user_email" binding:"required" example:"[email protected]"`
}

type ClientResponse struct {
	ClientID    string `json:"client_id"`
	RedirectUri string `json:"redirect_uri"`
	UserEmail   string `json:"user_email"`
}

type ClientUpdateRequest struct {
	ClientSecret *string `json:"client_secret,omitempty" example:"P@ssw0rd"`
	RedirectUri  *string `json:"redirect_uri,omitempty" example:"http://localhost:8080/callback"`
	UserEmail    *string `json:"user_email,omitempty" example:"[email protected]"`
}

type CollectedClientData struct {
	Type         CeremonyType  `json:"type"`
	Challenge    string        `json:"challenge"`
	Origin       string        `json:"origin"`
	TokenBinding *TokenBinding `json:"tokenBinding,omitempty"`
	Hint         string        `json:"new_keys_may_be_added_here,omitempty"`
}

type Credential struct {
	ID   string `json:"id"`
	Type string `json:"type"`
}

type CredentialAssertionResponse struct {
	PublicKeyCredential
	AssertionResponse AuthenticatorAssertionResponse `json:"response"`
}

type CredentialCreationResponse struct {
	PublicKeyCredential
	AttestationResponse AuthenticatorAttestationResponse `json:"response"`
	Transports          []string                         `json:"transports,omitempty"`
}

type CredentialInfo struct {
	ID   []byte `json:"id"`
	Name string `json:"name"`
}

type CredentialNameRequest struct {
	Name string `json:"name" binding:"required" example:"My FIDO key"`
}

type DummyAuthenticationExtensionsClientOutputs map[string]interface{}

type DummyAuthenticatorAttachment string

type DummyCredential struct {
	ID   string `cbor:"id"`
	Type string `cbor:"type"`
}

type DummyCredentialAssertionData struct {
	DummyPublicKeyCredential
	Response ParsedAssertionResponse
	Raw      CredentialAssertionResponse
}

type DummyCredentialCreationData struct {
	DummyPublicKeyCredential
	Response DummyParsedAttestationResponse
	Raw      CredentialCreationResponse
}

type DummyParsedAttestationResponse struct {
	CollectedClientData CollectedClientData
	AttestationObject   AttestationObject
	Transports          []AuthenticatorTransport
}

type DummyPublicKeyCredential struct {
	DummyCredential
	RawID                   []byte                                     `json:"rawId"`
	ClientExtensionResults  DummyAuthenticationExtensionsClientOutputs `json:"clientExtensionResults,omitempty"`
	AuthenticatorAttachment DummyAuthenticatorAttachment               `json:"authenticatorAttachment,omitempty"`
}

type FidoService struct {
	W *webauthn.WebAuthn
}

type ImportUser struct {
	Email       string   `json:"email"`
	Password    string   `json:"password"`
	DisplayName string   `json:"display_name"`
	Roles       []string `json:"roles"`
}

type JSONWebKey struct {
	Kty     string   `json:"kty"`
	Use     string   `json:"use,omitempty"`
	KeyOps  []string `json:"key_ops,omitempty"`
	Alg     string   `json:"alg,omitempty"`
	Kid     string   `json:"kid,omitempty"`
	X5u     string   `json:"x5u,omitempty"`
	X5c     []string `json:"x5c,omitempty"`
	X5t     string   `json:"x5t,omitempty"`
	X5tS256 string   `json:"x5t#S256,omitempty"`
	N       string   `json:"n,omitempty"`
	E       string   `json:"e,omitempty"`
	Crv     string   `json:"crv,omitempty"`
	X       string   `json:"x,omitempty"`
	Y       string   `json:"y,omitempty"`
}

type JSONWebKeySet struct {
	Keys []JSONWebKey `json:"keys"`
}

type NewPasswordRequest struct {
	NewPassword string `form:"new_password" binding:"required" example:"P@ssw0rd"`
	OTP         string `form:"otp" binding:"required" example:"123456"`
}

type OIDCClientCreateRequest struct {
	Name         string `json:"name" binding:"required" example:"My OIDC client"`
	ClientID     string `json:"client_id" binding:"required" example:"cli"`
	ClientSecret string `json:"client_secret" binding:"required" example:"P@ssw0rd"`
	RedirectURI  string `json:"redirect_uri" binding:"required" example:"http://localhost:8080/callback"`
	ButtonName   string `json:"button_name" binding:"required" example:"Login with My OIDC client"`
}

type OIDCClientResponse struct {
	Name        string `json:"name"`
	ClientID    string `json:"client_id"`
	RedirectURI string `json:"redirect_uri"`
	ButtonName  string `json:"button_name"`
}

type OIDCClientUpdateRequest struct {
	ClientID     string `json:"client_id" binding:"required" example:"cli"`
	ClientSecret string `json:"client_secret" binding:"required" example:"P@ssw0rd"`
	RedirectURI  string `json:"redirect_uri" binding:"required" example:"http://localhost:8080/callback"`
	ButtonName   string `json:"button_name" binding:"required" example:"Login with My OIDC client"`
}

type OIDCProvider string

type OpenIDConfiguration struct {
	Issuer                                             string   `json:"issuer,omitempty"`
	AuthorizationEndpoint                              string   `json:"authorization_endpoint,omitempty"`
	TokenEndpoint                                      string   `json:"token_endpoint,omitempty"`
	JwksUri                                            string   `json:"jwks_uri,omitempty"`
	RegistrationEndpoint                               string   `json:"registration_endpoint,omitempty"`
	ScopesSupported                                    []string `json:"scopes_supported,omitempty"`
	ResponseTypesSupported                             []string `json:"response_types_supported,omitempty"`
	ResponseModesSupported                             []string `json:"response_modes_supported,omitempty"`
	GrantTypesSupported                                []string `json:"grant_types_supported,omitempty"`
	TokenEndpointAuthMethodsSupported                  []string `json:"token_endpoint_auth_methods_supported,omitempty"`
	TokenEndpointAuthSigningAlgValuesSupported         []string `json:"token_endpoint_auth_signing_alg_values_supported,omitempty"`
	ServiceDocumentation                               string   `json:"service_documentation,omitempty"`
	UILocalesSupported                                 []string `json:"ui_locales_supported,omitempty"`
	OpPolicyUri                                        string   `json:"op_policy_uri,omitempty"`
	OpTosUri                                           string   `json:"op_tos_uri,omitempty"`
	RevocationEndpoint                                 string   `json:"revocation_endpoint,omitempty"`
	RevocationEndpointAuthMethodsSupported             []string `json:"revocation_endpoint_auth_methods_supported,omitempty"`
	RevocationEndpointAuthSigningAlgValuesSupported    []string `json:"revocation_endpoint_auth_signing_alg_values_supported,omitempty"`
	IntrospectionEndpoint                              string   `json:"introspection_endpoint,omitempty"`
	IntrospectionEndpointAuthMethodsSupported          []string `json:"introspection_endpoint_auth_methods_supported,omitempty"`
	IntrospectionEndpointAuthSigningAlgValuesSupported []string `json:"introspection_endpoint_auth_signing_alg_values_supported,omitempty"`
	CodeChallengeMethodsSupported                      []string `json:"code_challenge_methods_supported,omitempty"`
}

type ParsedAssertionResponse struct {
	CollectedClientData CollectedClientData
	AuthenticatorData   AuthenticatorData
	Signature           []byte
	UserHandle          []byte
}

type PasswordChangeRequest struct {
	OldPassword string `form:"current_password" binding:"required" example:"P@ssw0rd"`
	NewPassword string `form:"new_password" binding:"required" example:"NewP@ssw0rd"`
}

type PasswordResetRequest struct {
	Email string `form:"email" binding:"required,email" example:"[email protected]"`
}

type PublicKeyCredential struct {
	Credential
	RawID                   URLEncodedBase64                           `json:"rawId"`
	ClientExtensionResults  DummyAuthenticationExtensionsClientOutputs `json:"clientExtensionResults,omitempty"`
	AuthenticatorAttachment string                                     `json:"authenticatorAttachment,omitempty"`
}

type ScopeCreationRequest struct {
	Name string `json:"name" binding:"required" example:"read"`
}

type TokenBinding struct {
	Status TokenBindingStatus `json:"status"`
	ID     string             `json:"id,omitempty"`
}

type TokenBindingStatus string

type TokenRequest struct {
	GrantType    string `form:"grant_type" binding:"required" example:"authorization_code"`
	Code         string `form:"code" binding:"required" example:"code"`
	RedirectUri  string `form:"redirect_uri" binding:"required" example:"http://localhost:8088"`
	ClientID     string `form:"client_id" binding:"required" example:"cli"`
	ClientSecret string `form:"client_secret" binding:"required" example:"P@ssw0rd"`
}

type URLEncodedBase64 []byte

type UserResponse struct {
	Email       string           `json:"email"`
	DisplayName string           `json:"display_name"`
	Roles       []string         `json:"roles"`
	Credentials []CredentialInfo `json:"credentials"`
	IsEnabled   bool             `json:"is_enabled"`
}

type UserSignInRequest struct {
	Email string `form:"email" binding:"required,email" example:"[email protected]"`
}

type UserSignInWithPasswordRequest struct {
	Password string `form:"password" binding:"required" example:"P@ssw0rd"`
}

type UserSignUpRequest struct {
	Email    string `form:"email" binding:"required,email" example:"[email protected]"`
	Password string `form:"password" binding:"required" example:"P@ssw0rd"`
}

type WebFingerConfiguration struct {
	Subject string           `json:"subject"`
	Links   []WebFingerLinks `json:"links"`
}

type WebFingerLinks struct {
	Rel  string `json:"rel,omitempty"`
	Type string `json:"type,omitempty"`
	Href string `json:"href"`
}