auth

type AuthClient struct {
	// contains filtered or unexported fields
}

type AuthClientOption func(*AuthClient)

type AuthError struct {
	Code    string // e.g., "invalid_grant", "expired_token"
	Message string
}

type AuthURLOption func(url.Values)

type Config struct {
	// ClientID is the OAuth client ID.
	ClientID string

	// ClientSecret is the OAuth client secret.
	ClientSecret string

	// RedirectURL is the callback URL for the OAuth flow.
	RedirectURL string

	// Scopes are the requested OAuth scopes.
	Scopes []string

	// AuthURL is the authorization endpoint (defaults to Google's).
	AuthURL string

	// TokenURL is the token endpoint (defaults to Google's).
	TokenURL string
}

type DeviceAuthError struct {
	Code    string // e.g., "authorization_pending", "slow_down", "access_denied", "expired_token"
	Message string
}

type DeviceAuthResponse struct {
	// DeviceCode is the device verification code.
	DeviceCode string `json:"device_code"`

	// UserCode is the code the user enters at the verification URL.
	UserCode string `json:"user_code"`

	// VerificationURL is where the user should go to enter the code.
	VerificationURL string `json:"verification_uri"`

	// VerificationURLComplete is a URL that includes the user code (optional).
	VerificationURLComplete string `json:"verification_uri_complete,omitempty"`

	// ExpiresIn is how long the codes are valid for in seconds.
	ExpiresIn int `json:"expires_in"`

	// Interval is the minimum polling interval in seconds.
	Interval int `json:"interval"`
	// contains filtered or unexported fields
}

type DeviceClient struct {
	// contains filtered or unexported fields
}

type DeviceClientOption func(*DeviceClient)

type DeviceConfig struct {
	// ClientID is the OAuth client ID.
	ClientID string

	// Scopes are the requested OAuth scopes.
	Scopes []string

	// DeviceCodeURL is the device authorization endpoint (defaults to Google's).
	DeviceCodeURL string

	// TokenURL is the token endpoint (defaults to Google's).
	TokenURL string
}

type ServiceAccountClient struct {
	// contains filtered or unexported fields
}

type ServiceAccountConfig struct {
	// Email is the service account email address.
	Email string `json:"client_email"`

	// PrivateKey is the PEM-encoded RSA private key.
	PrivateKey string `json:"private_key"`

	// PrivateKeyID is the private key ID (optional).
	PrivateKeyID string `json:"private_key_id,omitempty"`

	// Scopes are the requested OAuth scopes.
	Scopes []string `json:"-"`

	// TokenURL is the token endpoint (defaults to Google's).
	TokenURL string `json:"token_uri,omitempty"`

	// Subject is the email of the user to impersonate (domain-wide delegation).
	Subject string `json:"-"`
}

type ServiceAccountOption func(*ServiceAccountClient)

type Token struct {

	// AccessToken is the token used to authenticate API requests.
	AccessToken string `json:"access_token"`

	// TokenType is the type of token (usually "Bearer").
	TokenType string `json:"token_type,omitempty"`

	// RefreshToken is used to obtain a new access token.
	RefreshToken string `json:"refresh_token,omitempty"`

	// Expiry is the time when the access token expires.
	Expiry time.Time `json:"expiry,omitempty"`

	// Scopes are the granted OAuth scopes.
	Scopes []string `json:"scopes,omitempty"`
	// contains filtered or unexported fields
}