oauth_token_exchange.h

#ifndef SOURCEMETA_CORE_OAUTH_TOKEN_EXCHANGE_H_
#define SOURCEMETA_CORE_OAUTH_TOKEN_EXCHANGE_H_
 
#ifndef SOURCEMETA_CORE_OAUTH_EXPORT
#include <sourcemeta/core/oauth_export.h>
#endif
 
#include <sourcemeta/core/crypto.h>
#include <sourcemeta/core/json.h>
 
#include <optional>    // std::optional
#include <span>        // std::span
#include <string_view> // std::string_view
 
namespace sourcemeta::core {

inline constexpr std::string_view OAUTH_TOKEN_TYPE_ACCESS_TOKEN{
    "urn:ietf:params:oauth:token-type:access_token"};

inline constexpr std::string_view OAUTH_TOKEN_TYPE_REFRESH_TOKEN{
    "urn:ietf:params:oauth:token-type:refresh_token"};

inline constexpr std::string_view OAUTH_TOKEN_TYPE_ID_TOKEN{
    "urn:ietf:params:oauth:token-type:id_token"};

inline constexpr std::string_view OAUTH_TOKEN_TYPE_SAML1{
    "urn:ietf:params:oauth:token-type:saml1"};

inline constexpr std::string_view OAUTH_TOKEN_TYPE_SAML2{
    "urn:ietf:params:oauth:token-type:saml2"};

inline constexpr std::string_view OAUTH_TOKEN_TYPE_JWT{
    "urn:ietf:params:oauth:token-type:jwt"};

struct OAuthTokenExchangeRequest {
  std::string_view subject_token;
  std::string_view subject_token_type;
  std::string_view actor_token;
  std::string_view actor_token_type;
  std::string_view requested_token_type;
  std::string_view scope;
  std::span<const std::string_view> audiences;
  std::span<const std::string_view> resources;
};

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_token_exchange_valid(const OAuthTokenExchangeRequest &request)
    -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_build_token_request_exchange(
    const OAuthTokenExchangeRequest &request, SecureString &sink) -> bool;

SOURCEMETA_CORE_OAUTH_EXPORT
auto oauth_issued_token_type(const JSON &response)
    -> std::optional<std::string_view>;
 
} // namespace sourcemeta::core
 
#endif