oidc_metadata.h

#ifndef SOURCEMETA_CORE_OIDC_METADATA_H_
#define SOURCEMETA_CORE_OIDC_METADATA_H_
 
#ifndef SOURCEMETA_CORE_OIDC_EXPORT
#include <sourcemeta/core/oidc_export.h>
#endif
 
#include <sourcemeta/core/json.h>
#include <sourcemeta/core/oauth.h>
 
#include <optional>    // std::optional
#include <span>        // std::span
#include <string_view> // std::string_view
 
namespace sourcemeta::core {
 
#if defined(_MSC_VER)
#pragma warning(disable : 4251)
#endif

class SOURCEMETA_CORE_OIDC_EXPORT OIDCProviderMetadata {
public:
  OIDCProviderMetadata(JSON &&data, const std::string_view issuer);

  explicit OIDCProviderMetadata(OAuthServerMetadata &&oauth);

  [[nodiscard]] static auto from(JSON &&data, const std::string_view issuer)
      -> std::optional<OIDCProviderMetadata>;

  [[nodiscard]] static auto from(OAuthServerMetadata &&oauth)
      -> std::optional<OIDCProviderMetadata>;

  [[nodiscard]] auto issuer() const -> std::string_view;

  [[nodiscard]] auto authorization_endpoint() const
      -> std::optional<std::string_view>;

  [[nodiscard]] auto token_endpoint() const -> std::optional<std::string_view>;

  [[nodiscard]] auto userinfo_endpoint() const
      -> std::optional<std::string_view>;

  [[nodiscard]] auto registration_endpoint() const
      -> std::optional<std::string_view>;

  [[nodiscard]] auto jwks_uri() const -> std::string_view;

  [[nodiscard]] auto end_session_endpoint() const
      -> std::optional<std::string_view>;

  [[nodiscard]] auto check_session_iframe() const
      -> std::optional<std::string_view>;

  [[nodiscard]] auto supports_subject_type(const std::string_view value) const
      -> bool;

  [[nodiscard]] auto
  supports_id_token_signing_alg(const std::string_view value) const -> bool;

  [[nodiscard]] auto supports_response_type(const std::string_view value) const
      -> bool;

  [[nodiscard]] auto
  supports_token_endpoint_auth_method(const std::string_view value) const
      -> bool;

  [[nodiscard]] auto supports_scope(const std::string_view value) const -> bool;

  [[nodiscard]] auto supports_claim(const std::string_view value) const -> bool;

  [[nodiscard]] auto supports_claims_parameter() const -> bool;

  [[nodiscard]] auto oauth() const -> const OAuthServerMetadata &;

  [[nodiscard]] auto data() const -> const JSON &;
 
private:
  OAuthServerMetadata oauth_;
};
 
#if defined(_MSC_VER)
#pragma warning(default : 4251)
#endif

struct OIDCProviderMetadataConfig {
  OAuthServerMetadataConfig base;
  std::string_view userinfo_endpoint;
  std::string_view end_session_endpoint;
  std::string_view check_session_iframe;
  std::span<const std::string_view> subject_types_supported;
  std::span<const std::string_view> id_token_signing_alg_values_supported;
  std::span<const std::string_view> id_token_encryption_alg_values_supported;
  std::span<const std::string_view> id_token_encryption_enc_values_supported;
  std::span<const std::string_view> userinfo_signing_alg_values_supported;
  std::span<const std::string_view> userinfo_encryption_alg_values_supported;
  std::span<const std::string_view> userinfo_encryption_enc_values_supported;
  std::span<const std::string_view> request_object_signing_alg_values_supported;
  std::span<const std::string_view>
      request_object_encryption_alg_values_supported;
  std::span<const std::string_view>
      request_object_encryption_enc_values_supported;
  std::span<const std::string_view> claims_supported;
  std::span<const std::string_view> acr_values_supported;
  std::span<const std::string_view> claim_types_supported;
  std::span<const std::string_view> display_values_supported;
  std::span<const std::string_view> claims_locales_supported;
  std::span<const std::string_view> ui_locales_supported;
  bool claims_parameter_supported{false};
  bool request_parameter_supported{false};
  bool request_uri_parameter_supported{true};
  bool require_request_uri_registration{false};
};

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_make_provider_metadata(const OIDCProviderMetadataConfig &config)
    -> std::optional<JSON>;
 
} // namespace sourcemeta::core
 
#endif