oidc

const (
	// ApplicationTypeWeb is the string value for the OpenID Connect client
	// application_type web.
	ApplicationTypeWeb = "web"

	// ApplicationTypeNative is the string value for the OpenID Connect client
	// application_type web.
	ApplicationTypeNative = "native"
)

const (
	AuthMethodClientSecretPost  = "client_secret_post"
	AuthMethodClientSecretBasic = "client_secret_basic"
	AuthMethodClientSecretJWT   = "client_secret_jwt"
	AuthMethodPrivateKeyJWT     = "private_key_jwt"
	AuthMethodNone              = "none"
)

const (
	IssuerIdentifierClaim  = "iss"
	SubjectIdentifierClaim = "sub"
	AudienceClaim          = "aud"
	ExpirationClaim        = "exp"
	IssuedAtClaim          = "iat"
)

const (
	NameClaim              = "name"
	FamilyNameClaim        = "family_name"
	GivenNameClaim         = "given_name"
	MiddleNameClaim        = "middle_name"
	NicknameClaim          = "nickname"
	PreferredUsernameClaim = "preferred_username"
	ProfileClaim           = "profile"
	PictureClaim           = "picture"
	WebsiteClaim           = "website"
	GenderClaim            = "gender"
	BirthdateClaim         = "birthdate"
	ZoneinfoClaim          = "zoneinfo"
	LocaleClaim            = "locale"
	UpdatedAtClaim         = "updated_at"

	EmailClaim         = "email"
	EmailVerifiedClaim = "email_verified"

	AuthTimeClaim = "auth_time"
)

const (
	PlainCodeChallengeMethod = "plain"
	S256CodeChallengeMethod  = "S256"
)

const (
	ErrorCodeOAuth2UnsupportedResponseType = "unsupported_response_type"
	ErrorCodeOAuth2InvalidRequest          = "invalid_request"
	ErrorCodeOAuth2InvalidToken            = "invalid_token"
	ErrorCodeOAuth2InsufficientScope       = "insufficient_scope"
	ErrorCodeOAuth2InvalidGrant            = "invalid_grant"
	ErrorCodeOAuth2UnsupportedGrantType    = "unsupported_grant_type"
	ErrorCodeOAuth2AccessDenied            = "access_denied"
	ErrorCodeOAuth2ServerError             = "server_error"
	ErrorCodeOAuth2TemporarilyUnavailable  = "temporarily_unavailable"
)

const (
	ErrorCodeOIDCInteractionRequired = "interaction_required"
	ErrorCodeOIDCLoginRequired       = "login_required"
	ErrorCodeOIDCConsentRequired     = "consent_required"

	ErrorCodeOIDCRequestNotSupported      = "request_not_supported"
	ErrorCodeOIDCInvalidRequestObject     = "invalid_request_object"
	ErrorCodeOIDCRequestURINotSupported   = "request_uri_not_supported"
	ErrorCodeOIDCRegistrationNotSupported = "registration_not_supported"

	ErrorCodeOIDCInvalidRedirectURI    = "invalid_redirect_uri"
	ErrorCodeOIDCInvalidClientMetadata = "invalid_client_metadata"
)

const (
	ResponseTypeCode             = "code"                // OIDC code flow
	ResponseTypeIDTokenToken     = "id_token token"      // OIDC implicit flow
	ResponseTypeIDToken          = "id_token"            // OIDC implicit flow
	ResponseTypeCodeIDToken      = "code id_token"       // OIDC hybrid flow
	ResponseTypeCodeToken        = "code token"          // OIDC hybrid flow
	ResponseTypeCodeIDTokenToken = "code id_token token" // OIDC hybrid flow
	ResponseTypeToken            = "token"               // OAuth2

	ResponseModeFragment = "fragment"
	ResponseModeQuery    = "query"

	FlowCode     = "code"
	FlowImplicit = "implicit"
	FlowHybrid   = "hybrid"
)

const (
	// GrantTypeAuthorizationCode is the string value for the
	// OAuth2 authroization code token request grant type.
	GrantTypeAuthorizationCode = "authorization_code"

	// GrantTypeImplicit is the string value for the OAuth2 id_token, token
	// id_token token request grant type.
	GrantTypeImplicit = "implicit"

	// GrantTypeRefreshToken is the string value for the OAuth2 refresh_token
	// token request grant_type.
	GrantTypeRefreshToken = "refresh_token"
)

const (
	PromptNone          = "none"
	PromptLogin         = "login"
	PromptConsent       = "consent"
	PromptSelectAccount = "select_account"
)

const (
	// ScopeOpenID is the string value of the base OIDC scope.
	ScopeOpenID = "openid"
	// ScopeProfile is the string value of the OIDC profile scope.
	ScopeProfile = "profile"
	// ScopeEmail is the string value of the OIDC email scope.
	ScopeEmail = "email"
	// ScopeOfflineAccess is the string value of the OIDC offline_access scope.
	ScopeOfflineAccess = "offline_access"
)

const (
	JWTHeaderKeyID = "kid"
	JWTHeaderAlg   = "alg"
)

const (
	SessionIDClaim = "sid"
)

const (
	// SubjectIDPublic is the the string value of the Subject Identifier Type
	// as defined in https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes
	SubjectIDPublic = "public"
)

const TokenTypeBearer = "Bearer"