oauth_token.h

#ifndef SOURCEMETA_CORE_OAUTH_TOKEN_H_
#define SOURCEMETA_CORE_OAUTH_TOKEN_H_
 
#ifndef SOURCEMETA_CORE_OAUTH_EXPORT
#include <sourcemeta/core/oauth_export.h>
#endif
 
#include <sourcemeta/core/crypto.h>
#include <sourcemeta/core/json.h>
#include <sourcemeta/core/oauth_authorization.h>
 
#include <chrono>      // std::chrono::seconds
#include <functional>  // std::function
#include <optional>    // std::optional
#include <span>        // std::span
#include <string_view> // std::string_view
 
namespace sourcemeta::core {

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_token_request_code(
    const std::string_view code, const std::string_view redirect_uri,
    const std::string_view code_verifier,
    const std::span<const OAuthParameter> resources, SecureString &sink)
    -> void;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_token_request_refresh(
    const std::string_view refresh_token, const std::string_view scope,
    const std::span<const OAuthParameter> resources, SecureString &sink)
    -> void;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_token_request_client_credentials(
    const std::string_view scope,
    const std::span<const OAuthParameter> resources, SecureString &sink)
    -> void;

struct OAuthTokenRequest {
  std::string_view grant_type;
  std::string_view code;
  std::string_view redirect_uri;
  std::string_view code_verifier;
  std::string_view refresh_token;
  std::string_view scope;
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_parse_token_request(
    const std::string_view body, SecureString &storage,
    OAuthTokenRequest &result,
    const std::function<void(std::string_view, std::string_view)> &on_other)
    -> bool;

class SOURCEMETA_CORE_OAUTH_EXPORT OAuthTokenResponse {
public:
  explicit OAuthTokenResponse(const JSON &data);

  [[nodiscard]] auto access_token() const -> std::optional<std::string_view>;

  [[nodiscard]] auto token_type() const -> std::optional<std::string_view>;

  [[nodiscard]] auto is_bearer_token_type() const -> bool;

  [[nodiscard]] auto expires_in() const -> std::optional<std::chrono::seconds>;

  [[nodiscard]] auto refresh_token() const -> std::optional<std::string_view>;

  [[nodiscard]] auto scope() const -> std::optional<std::string_view>;

  [[nodiscard]] auto has_scope(const std::string_view value) const -> bool;

  [[nodiscard]] auto data() const -> const JSON &;
 
private:
  const JSON *data_;
};

struct OAuthTokenGrant {
  std::string_view access_token;
  std::string_view token_type;
  std::optional<std::chrono::seconds> expires_in;
  std::string_view refresh_token;
  std::string_view scope;
  std::string_view requested_scope;
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_make_token_response(const OAuthTokenGrant &grant) -> JSON;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_make_token_error_response(const std::string_view error,
                                     const std::string_view error_description,
                                     const std::string_view error_uri) -> JSON;
 
} // namespace sourcemeta::core
 
#endif