oidc_userinfo.h

#ifndef SOURCEMETA_CORE_OIDC_USERINFO_H_
#define SOURCEMETA_CORE_OIDC_USERINFO_H_
 
#ifndef SOURCEMETA_CORE_OIDC_EXPORT
#include <sourcemeta/core/oidc_export.h>
#endif
 
#include <sourcemeta/core/jose.h>
#include <sourcemeta/core/json.h>
 
#include <optional>    // std::optional
#include <span>        // std::span
#include <string_view> // std::string_view
 
namespace sourcemeta::core {

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_build_userinfo(const std::string_view subject,
                         const JSON &additional_claims) -> JSON;

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_userinfo_matches_subject(const JSON &userinfo,
                                   const std::string_view expected_subject)
    -> bool;

SOURCEMETA_CORE_OIDC_EXPORT
auto oidc_verify_userinfo(
    const JWT &token, const JWKS &keys,
    const std::span<const JWSAlgorithm> allowed_algorithms,
    const std::string_view expected_subject,
    const std::string_view expected_issuer,
    const std::string_view expected_client_id) -> std::optional<JSON>;
 
} // namespace sourcemeta::core
 
#endif