tokeninfo.go

package mytokenlib

import (
	"github.com/oidc-mytoken/api/v0"
)

// TokeninfoEndpoint is type representing a mytoken server's Revocation Endpoint and the actions that can be
// performed there.
type TokeninfoEndpoint struct {
	endpoint string
}

func newTokeninfoEndpoint(endpoint string) *TokeninfoEndpoint {
	return &TokeninfoEndpoint{
		endpoint: endpoint,
	}
}

// DoHTTPRequest performs an http request to the tokeninfo endpoint
func (info TokeninfoEndpoint) DoHTTPRequest(method string, req, resp interface{}) error {
	return doHTTPRequest(method, info.endpoint, req, resp)
}

// Introspect introspects the passed mytoken
func (info TokeninfoEndpoint) Introspect(mytoken string) (*api.TokeninfoIntrospectResponse, error) {
	req := api.TokenInfoRequest{
		Action:  api.TokeninfoActionIntrospect,
		Mytoken: mytoken,
	}
	var resp api.TokeninfoIntrospectResponse
	if err := info.DoHTTPRequest("POST", req, &resp); err != nil {
		return nil, err
	}
	return &resp, nil
}

// APIHistory obtains the event history for the passed mytoken or mom ids.
// If the used mytoken changes (due to token rotation), the new mytoken is included in the api.TokeninfoHistoryResponse
func (info TokeninfoEndpoint) APIHistory(mytoken string, momIDs ...string) (
	resp api.TokeninfoHistoryResponse, err error,
) {
	req := api.TokenInfoRequest{
		Action:  api.TokeninfoActionEventHistory,
		Mytoken: mytoken,
		MOMIDs:  momIDs,
	}
	err = info.DoHTTPRequest("POST", req, &resp)
	return
}

// History obtains the event history for the passed mytoken.
// If the used mytoken changes (due to token rotation), the passed variable is updated accordingly.
func (info TokeninfoEndpoint) History(mytoken *string) ([]api.EventEntry, error) {
	resp, err := info.APIHistory(*mytoken)
	if err != nil {
		return nil, err
	}
	if resp.TokenUpdate != nil {
		*mytoken = resp.TokenUpdate.Mytoken
	}
	return resp.EventHistory.Events, nil
}

// HistoryForOtherMytoken obtains the event history for mytoken with the passed mom id and uses the passed mytoken as
// authorization.
// If the used mytoken changes (due to token rotation), the passed variable is updated accordingly.
func (info TokeninfoEndpoint) HistoryForOtherMytoken(mytoken *string, momID string) (*api.EventHistory, error) {
	resp, err := info.APIHistory(*mytoken, momID)
	if err != nil {
		return nil, err
	}
	if resp.TokenUpdate != nil {
		*mytoken = resp.TokenUpdate.Mytoken
	}
	return &resp.EventHistory, nil
}

// APISubtokens returns an api.TokeninfoTreeResponse listing metadata about the passed mytoken and its children (
// recursively)
// If the used mytoken changes (due to token rotation), the new mytoken is included in the api.TokeninfoTreeResponse
func (info TokeninfoEndpoint) APISubtokens(mytoken string) (resp api.TokeninfoSubtokensResponse, err error) {
	req := api.TokenInfoRequest{
		Action:  api.TokeninfoActionSubtokens,
		Mytoken: mytoken,
	}
	err = info.DoHTTPRequest("POST", req, &resp)
	return
}

// Subtokens returns an api.MytokenEntryTree listing metadata about the passed mytoken and its children (
// recursively)
// If the used mytoken changes (due to token rotation), the passed variable is updated accordingly.
func (info TokeninfoEndpoint) Subtokens(mytoken *string) (*api.MytokenEntryTree, error) {
	resp, err := info.APISubtokens(*mytoken)
	if err != nil {
		return nil, err
	}
	if resp.TokenUpdate != nil {
		*mytoken = resp.TokenUpdate.Mytoken
	}
	return &resp.Tokens, nil
}

// APIListMytokens returns an api.TokeninfoListResponse listing metadata about all the user's mytoken and their
// children (recursively)
// If the used mytoken changes (due to token rotation), the new mytoken is included in the api.TokeninfoListResponse
func (info TokeninfoEndpoint) APIListMytokens(mytoken string) (resp api.TokeninfoListResponse, err error) {
	req := api.TokenInfoRequest{
		Action:  api.TokeninfoActionListMytokens,
		Mytoken: mytoken,
	}
	err = info.DoHTTPRequest("POST", req, &resp)
	return
}

// ListMytokens returns a slice of api.MytokenEntryTree listing metadata about all the user's mytoken and their
// children (recursively)
// If the used mytoken changes (due to token rotation), the passed variable is updated accordingly.
func (info TokeninfoEndpoint) ListMytokens(mytoken *string) ([]api.MytokenEntryTree, error) {
	resp, err := info.APIListMytokens(*mytoken)
	if err != nil {
		return nil, err
	}
	if resp.TokenUpdate != nil {
		*mytoken = resp.TokenUpdate.Mytoken
	}
	return resp.Tokens, nil
}