gopenidclient

type Assertion interface {
	Type() string
	Assert(aud string) (string, error)
}

type CallbackResult struct {
	// UnmarshalUser will unmarshal the JSON user returned by the provider
	//      var user struct {
	//      	ID    string `json:"sub"`
	//      	Email string `json:"email"`
	//      	Name  string `json:"name"`
	//      }
	//      err = UnmarshalUser(&user)
	UnmarshalUser func(interface{}) error
	Token         *oauth2.Token
	// IntendedPath contains the URL before the login flow took place
	IntendedPath string
}

type CookieManager struct {
	Prefix    string
	Encrypter interface {
		Seal(name, cleartext string) string
		Open(name, cyphertext string) (string, error)
	}
}

type ExchangeHandler struct {
	CookieManager CookieManager
}

type Provider interface {
	// SetRedirectURL sets the local callback URL.
	SetRedirectURL(url string)

	// AuthCodeURL returns the Provider URL to redirect the user to.
	AuthCodeURL(state string) (url, pkceVerifier string, err error)

	// Exchange exchanges the code and provides a way to unmarshal the user info.
	//
	//      var user struct {
	//      	ID    string `json:"sub"`
	//      	Email string `json:"email"`
	//      	Name  string `json:"name"`
	//      }
	//      err = unmarshalUser(&user)
	Exchange(code, pkceVerifier string) (token *oauth2.Token, unmarshalUser func(interface{}) error, err error)

	// EndSessionURL is a URL where the RP can perform a redirect to request that the End-User be logged out at the OP.
	EndSessionURL() (*url.URL, error)
}