auth

type AuthorizeRequest struct {
	RedirectURI         string // Callback URL to send the code to; must be in the allowlist
	ResponseType        string // Must be "code"
	State               string // Opaque value the client uses to maintain request/callback state
	CodeChallenge       string // base64url(SHA256(code_verifier)); used to bind the code to the token request
	CodeChallengeMethod string // Hash method used; only "S256" is accepted
}

type JWK struct {
	Kty string `json:"kty"` // Key type; always "EC"
	Crv string `json:"crv"` // Curve; always "P-256"
	X   string `json:"x"`   // Base64url-encoded X coordinate of the public key point
	Y   string `json:"y"`   // Base64url-encoded Y coordinate of the public key point
	Kid string `json:"kid"` // Key ID; stable identifier derived from the public key
	Use string `json:"use"` // Intended use; always "sig"
	Alg string `json:"alg"` // Algorithm; always "ES256"
}

type JWKSet struct {
	Keys []JWK `json:"keys"`
}

type Service struct {
	// contains filtered or unexported fields
}

type TokenRequest struct {
	GrantType    string // Must be "authorization_code"
	Code         string // Authorization code received from the authorize endpoint
	RedirectURI  string // Must exactly match the redirect_uri used when the code was issued
	CodeVerifier string // Plain random string whose SHA256 hash was sent as the code_challenge
}