oidc_logout.h

#ifndef SOURCEMETA_CORE_OIDC_LOGOUT_H_
#define SOURCEMETA_CORE_OIDC_LOGOUT_H_
 
#ifndef SOURCEMETA_CORE_OIDC_EXPORT
#include <sourcemeta/core/oidc_export.h>
#endif
 
#include <sourcemeta/core/jose.h>
 
#include <chrono>      // std::chrono::system_clock
#include <span>        // std::span
#include <string>      // std::string
#include <string_view> // std::string_view
 
namespace sourcemeta::core {

struct OIDCLogoutRequest {
  std::string_view id_token_hint;
  std::string_view logout_hint;
  std::string_view client_id;
  std::string_view post_logout_redirect_uri;
  std::string_view state;
  std::string_view ui_locales;
};

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_build_logout_url(const std::string_view end_session_endpoint,
                           const OIDCLogoutRequest &request, std::string &sink)
    -> void;

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_validate_logout_token(
    const JWT &token, const JWKS &keys,
    const std::span<const JWSAlgorithm> allowed_algorithms,
    const std::string_view issuer, const std::string_view client_id,
    const std::chrono::system_clock::time_point now,
    const JWTClockSkew clock_skew = {}) -> bool;

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_front_channel_pairing_is_valid(const std::string_view issuer,
                                         const std::string_view session_id)
    -> bool;

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_session_state(const std::string_view client_id,
                        const std::string_view origin,
                        const std::string_view provider_browser_state,
                        const std::string_view salt) -> std::string;
 
} // namespace sourcemeta::core
 
#endif