oauth_authorization.h

#ifndef SOURCEMETA_CORE_OAUTH_AUTHORIZATION_H_
#define SOURCEMETA_CORE_OAUTH_AUTHORIZATION_H_
 
#ifndef SOURCEMETA_CORE_OAUTH_EXPORT
#include <sourcemeta/core/oauth_export.h>
#endif
 
#include <sourcemeta/core/oauth_profile.h>
 
#include <cstdint>     // std::uint8_t
#include <functional>  // std::function
#include <optional>    // std::optional
#include <span>        // std::span
#include <string>      // std::string
#include <string_view> // std::string_view
 
namespace sourcemeta::core {

struct OAuthParameter {
  std::string_view name;
  std::string_view value;
};

struct OAuthAuthorizationRequest {
  std::string_view client_id;
  std::string_view redirect_uri;
  std::string_view scope;
  std::string_view state;
  std::string_view code_challenge;
  std::string_view code_challenge_method;
  std::string_view request_uri;
  std::string_view dpop_jkt;
  std::string_view response_type;
  std::span<const OAuthParameter> resources;
  std::span<const OAuthParameter> extra;
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_url(const std::string_view endpoint,
                                   const OAuthAuthorizationRequest &request,
                                   std::string &sink) -> void;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_parse_authorization_request(
    const std::string_view query, std::string &storage,
    OAuthAuthorizationRequest &result,
    const std::function<void(std::string_view, std::string_view)> &on_other)
    -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_redirect_uri_matches(const std::string_view registered,
                                const std::string_view presented,
                                const OAuthProfile profile) -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_is_private_use_scheme(const std::string_view scheme) noexcept
    -> bool;

struct OAuthAuthorizationResponse {
  std::string_view code;
  std::string_view state;
  std::string_view iss;
  std::string_view error;
  std::string_view error_description;
  std::string_view error_uri;
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_parse_authorization_response(const std::string_view query,
                                        std::string &storage,
                                        OAuthAuthorizationResponse &result)
    -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_redirect(
    const std::string_view redirect_uri,
    const OAuthAuthorizationResponse &response, std::string &sink) -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_error_redirect(
    const std::string_view redirect_uri,
    const OAuthAuthorizationResponse &response, std::string &sink) -> bool;

enum class OAuthResponseMode : std::uint8_t {
  Query,
  Fragment,
  FormPost
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_default_response_mode(const std::string_view response_type)
    -> std::optional<OAuthResponseMode>;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_is_response_mode_allowed(const std::string_view response_type,
                                    const OAuthResponseMode mode) -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_redirect(
    const std::string_view redirect_uri,
    const OAuthAuthorizationResponse &response, const OAuthResponseMode mode,
    std::string &sink) -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_error_redirect(
    const std::string_view redirect_uri,
    const OAuthAuthorizationResponse &response, const OAuthResponseMode mode,
    std::string &sink) -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_form_post(
    const std::string_view redirect_uri,
    const OAuthAuthorizationResponse &response, std::string &sink,
    const std::string_view title = "Submit This Form") -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_authorization_error_form_post(
    const std::string_view redirect_uri,
    const OAuthAuthorizationResponse &response, std::string &sink,
    const std::string_view title = "Submit This Form") -> bool;
 
} // namespace sourcemeta::core
 
#endif