oauth_bearer.h

#ifndef SOURCEMETA_CORE_OAUTH_BEARER_H_
#define SOURCEMETA_CORE_OAUTH_BEARER_H_
 
#ifndef SOURCEMETA_CORE_OAUTH_EXPORT
#include <sourcemeta/core/oauth_export.h>
#endif
 
#include <sourcemeta/core/json.h>
 
#include <cstdint>     // std::uint8_t
#include <optional>    // std::optional
#include <string>      // std::string
#include <string_view> // std::string_view
 
namespace sourcemeta::core {

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_bearer_header(const std::string_view token, std::string &sink)
    -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_challenge_parameter(const std::string_view header,
                               const std::string_view scheme,
                               const std::string_view name)
    -> std::optional<std::string>;

struct OAuthChallenge {
  std::string_view realm;
  std::string_view scope;
  std::string_view error;
  std::string_view error_description;
  std::string_view error_uri;
  std::string_view resource_metadata;
  std::string_view algs;
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_challenge(const std::string_view scheme,
                           const OAuthChallenge &challenge, std::string &sink)
    -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_has_audience(const JSON &claims, const std::string_view audience)
    -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_has_scope(const JSON &claims, const std::string_view value) -> bool;

enum class OAuthScopeDecision : std::uint8_t {
  Accepted,
  Refused,
  Unreadable
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_scope_request_accepts(const JSON &claims, const JSON &request)
    -> OAuthScopeDecision;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_is_dpop_bound(const JSON &claims) -> bool;
 
} // namespace sourcemeta::core
 
#endif