uaaclient

type Client struct {
	// Client identifier, unique within identity zone.
	// Required
	ClientID string `json:"client_id"`

	// List of grant types that can be used to obtain a token with this client.
	// Can include authorization_code, password, implicit, and/or client_credntials.
	// Optional
	AuthorizedGrantTypes []string `json:"authorized_grant_types,omitempty"`

	// Allowed URI pattern for redirect during authorization.
	// Wildcard patterns can be specified using the Ant-style pattern.
	// Null/Empty value is forbidden.
	// Optional
	RedirectURI []string `json:"redirect_uri,omitempty"`

	// Scopes allowed for the client.
	// Optional (defaults to "uaa.none")
	Scope []string `json:"scope,omitempty"`

	// Resources the client is allowed access to
	// Optional (defaults to [])
	ResourceIds []string `json:"resource_ids,omitempty"`

	// Scopes which the client is able to grant when creating a client.
	// Optional (defaults to "uaa.none")
	Authorities []string `json:"authorities,omitempty"`

	// Scopes that do not require user approval.
	// Optional (defaults to [])
	Autoapprove interface{} `json:"autoapprove,omitempty"`

	// Time in seconds to access token expiration after it is issued
	// Optional
	AccessTokenValidity uint32 `json:"access_token_validity,omitempty"`

	// time in seconds to refresh token expiration after it is issued
	// Optional
	RefreshTokenValidity uint32 `json:"refresh_token_validity,omitempty"`

	// 	A list of origin keys (alias) for identity providers the client
	// is limited to. Null implies any identity provider is allowed.
	// Optional
	Allowedproviders []string `json:"allowedproviders,omitempty"`

	// A human readable name for the client
	// Optional
	Name string `json:"name,omitempty"`

	// A random string used to generate the client's revokation key.
	// Change this value to revoke all active tokens for the client.
	// Optional
	TokenSalt string `json:"token_salt,omitempty"`

	// What scope the bearer token had when client was created
	// Optional
	CreatedWith string `json:"createdwith,omitempty"`

	// A list of group names. If a user doesn't belong to all the required
	// groups, the user will not be authenticated and no tokens will be issued
	// to this client for that user. If this field is not set, authentication
	// and token issuance will proceed normally.
	// Optional
	RequiredUserGroups []string `json:"required_user_groups,omitempty"`

	// A secret string used for authenticating as this client. To support
	// secret rotation this can be space delimited string of two secrets.
	// Required if the client allows authorization_code or client_credentials
	// grant type
	ClientSecret string `json:"client_secret,omitempty"`
	// contains filtered or unexported fields
}

type Clients struct {
	// contains filtered or unexported fields
}

type Config struct {
	// ClientID is the application's ID.
	ClientID string
	// ClientSecret is the application's secret.
	Secret string
	// http or https
	Scheme string
	// Host is the UAA host
	Host string
	// UAAEndpoint is the UAA endpoint that is obtained from hitting
	UAAEndpoint string
	// RedirectURL is the URL to redirect users going through
	// the OAuth flow, after the resource owner's URLs.
	RedirectURL string

	Scopes []string

	Context context.Context
}

type Payload struct {
	// JWT ID. unique identifier for this token
	Jti string `json:"jti"`
	// JWT Time the token was issued (epoch)
	IatRaw int64 `json:"iat"`
	Iat    time.Time
	// JWT Time the token expires (epoch)
	ExpRaw int64 `json:"exp"`
	Exp    time.Time
	// JWT Issuer (who created and signed this token)
	Iss string `json:"iss"`
	// UAA Used in multi-tenant environments to identity the tenant
	Zid string `json:"zid"`
	// UAA Identity provider that authenticated the end-user
	Origin string `json:"origin"`
	// UAA Canonical username of the end-user
	UserName string `json:"user_name"`
	// OIDC Email address of the end-user
	Email string `json:"email"`
	// OIDC Subject (who the token refers to)
	Sub string `json:"sub"`
	// OAuth List of scopes (group memberships) this access token has
	Scope []string `json:"scope"`
	//
	Authorities []string `json:"authorities"`
	// OAuth Client ID that requested the token
	ClientID string `json:"client_id"`
	// OAuth Type of authorization grant
	GrantType string `json:"grant_type"`
}

type Session struct {
	ID     string
	Cookie http.Cookie
}

type Token struct {
	oauth2.Token
	Payload Payload
}

type UaaClient struct {
	// contains filtered or unexported fields
}